Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
File: PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft (raw, json)
Hash identifier: SakFBu9wLtTK5s5CgJlhTlmBKyzhVuQX9ab4QLdQN1s=
Subject key identifier: 5A:83:09:E5:71:13:93:34:F7:03:4B:79:D6:B6:93:44:A1:E8:71:00
Authority key identifier: 3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
Certificate issuer: /CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Certificate serial: 01975046216B62FAF1C94252B01F99B161EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
Manifest number: 0304
Signing time: Sun 08 Jun 2025 16:01:02 +0000
Manifest this update: Sun 08 Jun 2025 16:01:02 +0000
Manifest next update: Mon 09 Jun 2025 16:01:02 +0000
Files and hashes: 1: PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl (hash: WD16etk1AxLbM6xjWTIzwa9U/4mOHuVS3FVCUJmXcTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:21:6b:62:fa:f1:c9:42:52:b0:1f:99:b1:61:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d1b67ccda49c8de48929341f6de8a2b6025b3a6
Validity
Not Before: Jun 8 16:01:02 2025 GMT
Not After : Jun 9 16:01:02 2025 GMT
Subject: CN=5a8309e571139334f7034b79d6b69344a1e87100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:95:01:43:fd:67:4a:4e:b9:46:d2:dc:0b:
00:95:d2:4e:28:8e:4d:9e:b1:5e:a4:ae:cc:36:b3:
6b:73:b3:7d:fc:a7:e1:2b:37:2b:df:98:be:a0:83:
11:a7:44:5a:38:76:2f:3d:66:22:f2:d0:c5:ae:3e:
73:7c:94:a2:98:69:c9:c0:5d:c8:98:e0:1c:71:f6:
f7:2c:ba:67:90:11:a5:43:06:cc:48:d6:81:3e:4b:
3b:9b:bc:31:64:ad:c3:f0:6e:90:a4:97:92:f8:e5:
48:af:c8:ea:ad:ae:5d:74:21:e7:67:d7:ec:ec:85:
57:9e:17:2d:b9:30:ad:87:3d:b4:16:a7:a5:c4:77:
8d:95:b5:75:82:af:f7:be:9f:54:7e:f3:87:bc:09:
f8:7e:c8:f8:8a:92:7d:08:38:e9:a6:9d:4c:28:16:
1e:1a:01:6a:0c:14:08:23:37:f8:8d:6a:95:4b:da:
fd:28:37:7d:d1:ce:cc:3d:d0:04:fa:db:2b:42:a4:
3f:65:1e:f0:ff:2c:5a:7d:a0:a2:73:47:36:25:2d:
fb:20:f0:04:9c:14:3c:2e:66:83:04:20:fe:a0:e3:
d2:b4:7b:7b:9d:16:00:87:c4:14:ba:6a:63:18:f0:
a9:d6:21:77:59:cc:8e:1a:b0:c4:66:aa:8d:a0:ca:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:09:E5:71:13:93:34:F7:03:4B:79:D6:B6:93:44:A1:E8:71:00
X509v3 Authority Key Identifier:
keyid:3D:1B:67:CC:DA:49:C8:DE:48:92:93:41:F6:DE:8A:2B:60:25:B3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRtnzNpJyN5IkpNB9t6KK2Als6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d8c098-7862-42cd-ad03-08b24be12689/1/PRtnzNpJyN5IkpNB9t6KK2Als6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2d:9f:54:94:63:3c:08:c3:5f:bd:73:5a:bc:74:76:a0:ad:
94:1d:f1:8f:b4:a7:ee:4e:1e:95:7a:89:87:0a:3f:c9:11:c0:
34:54:0c:16:69:21:4e:19:d9:73:d7:c3:7e:e4:8b:f9:df:5e:
d1:eb:19:27:63:93:20:08:90:8e:a4:d0:b4:83:7a:05:5b:e6:
14:f3:7c:89:ca:65:10:b6:b1:c5:3e:b7:44:b7:e9:49:e8:ee:
8c:8c:ab:87:ba:af:75:bb:8a:44:65:ec:cb:92:05:58:3d:27:
2c:67:2e:ec:3c:a0:4c:71:51:fa:51:b9:37:02:66:05:7a:f6:
e8:cc:cd:5f:ca:08:a6:fa:2c:75:76:28:f2:3e:e6:53:ab:33:
10:14:80:ee:f9:42:31:08:db:91:b5:9a:0b:85:b9:31:02:cc:
d2:50:81:80:dd:6f:a2:eb:d8:d6:52:1a:f2:98:dc:b0:38:66:
33:df:09:d5:38:66:ce:25:60:5e:0c:c9:8e:07:91:b0:28:56:
5d:85:cb:68:ad:52:40:e8:0c:9f:39:36:73:02:d3:46:30:56:
b5:6d:f5:b6:44:4b:4b:41:13:84:85:43:0a:26:a9:0e:28:d9:
79:55:a0:8a:f4:2e:b1:fd:d6:7c:5b:a4:23:f9:7b:14:42:35:
ff:15:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:45:23 2025 by rpki-client