Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier: BUqrQFfTQoCCQM6CBjRlFE+75Zp2WB6q/UsMJ2ouwHM=
Subject key identifier: 77:7F:7D:94:26:47:E5:CB:0B:F2:8E:DC:9F:E9:D2:43:3E:29:38:7A
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer: /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial: 01974967D6AD617AD5B9642FE05F15090BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number: 0833
Signing time: Sat 07 Jun 2025 08:00:31 +0000
Manifest this update: Sat 07 Jun 2025 08:00:31 +0000
Manifest next update: Sun 08 Jun 2025 08:00:31 +0000
Files and hashes: 1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: CzXiG43epmgMP6z6+1ei73lQf5SeGdqEFBXzXfdv3z0=)
2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d6:ad:61:7a:d5:b9:64:2f:e0:5f:15:09:0b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Validity
Not Before: Jun 7 08:00:31 2025 GMT
Not After : Jun 8 08:00:31 2025 GMT
Subject: CN=777f7d942647e5cb0bf28edc9fe9d2433e29387a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:1a:18:f1:59:56:34:33:e4:bb:59:0e:cb:
28:6b:7d:cf:db:be:28:83:fe:6c:33:47:e6:65:e6:
fd:b6:72:93:94:0e:b7:62:aa:21:19:70:a6:60:e9:
74:32:09:31:eb:98:33:cd:45:e6:b4:e4:64:a1:b8:
62:c1:fa:10:fc:c0:1f:bb:6e:a1:22:2b:bb:47:8a:
e1:6f:7a:a2:c5:71:25:fd:2a:d7:0c:cc:09:54:72:
2b:25:47:95:b6:39:fe:12:da:71:1a:e1:87:40:a1:
db:e2:d2:42:24:d4:6a:a8:ad:00:7c:df:43:b8:84:
5c:f1:fc:9b:4f:27:5c:02:48:cd:92:3e:8e:bb:2b:
ec:ff:6d:d7:02:4d:3d:ff:3c:8f:ff:bb:f8:0e:49:
63:57:be:0f:06:bc:8b:a6:b5:07:19:cd:7d:5e:f2:
cd:bb:1d:f8:32:c6:ad:50:39:b3:8e:34:5e:df:3d:
55:09:6f:ed:40:5f:04:e1:1d:98:04:3a:54:68:ce:
a2:f0:81:78:0c:1e:b2:97:64:5f:63:0b:bb:f0:84:
fc:1f:8c:d0:56:89:35:91:a1:18:dd:c9:85:ea:49:
9e:03:55:c4:c7:03:5c:b4:66:2c:e5:6c:9d:6c:dc:
ca:68:ed:82:a4:01:c7:1b:d8:cb:53:30:f6:ee:6d:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7F:7D:94:26:47:E5:CB:0B:F2:8E:DC:9F:E9:D2:43:3E:29:38:7A
X509v3 Authority Key Identifier:
keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:74:c8:4a:89:60:7d:ee:3e:5a:82:ea:b9:f0:fa:1c:6c:bc:
eb:52:b0:e3:b8:99:81:b5:a1:0f:7b:4d:2c:f1:d3:3a:fa:99:
76:d8:21:70:7e:9c:2f:1a:7e:81:4f:f8:9d:ea:ef:4e:f5:a4:
6b:2b:2b:85:cc:f3:e5:50:ab:16:9a:1d:bf:68:5f:71:97:d1:
c2:f8:dc:f5:5f:6d:b7:53:df:8a:0c:0f:a4:23:3f:a8:cb:92:
23:08:9e:55:91:8c:68:4d:eb:4d:19:29:a7:f6:ce:1b:27:e7:
60:f9:53:76:f9:c9:e5:d0:97:19:c5:44:5e:96:18:eb:21:8a:
a1:f2:52:24:7d:6f:d1:88:6d:c4:51:7d:b4:06:dc:99:0b:7e:
fb:12:90:59:2b:ee:76:c8:f8:9e:d2:93:59:ee:64:00:90:87:
41:b2:4c:cd:91:66:05:64:34:da:40:fd:f8:04:7f:c8:07:e9:
e5:1d:08:df:05:f3:9f:84:2f:9c:06:82:3d:e6:51:ce:ba:c1:
77:e4:8d:d7:16:e0:95:59:8b:e9:44:2d:7d:ce:98:97:53:ce:
d5:c9:31:ee:7e:a7:e8:bc:f7:ec:4e:db:8e:2b:df:f6:16:df:
be:4e:98:d7:28:54:b9:8a:f9:c9:eb:18:0d:11:f2:18:92:a5:
17:e4:9f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:35 2025 by rpki-client