
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
File: Pkgvs8n5r0cOTki23zgtPVAVRmE.mft (raw, json)
Hash identifier: 2Xn0v0wxT7UtDEkM/HD/3wIol9knIQSY80ldTeCTEoY=
Subject key identifier: B9:73:F2:F6:0F:7A:30:8B:3C:D5:F5:79:F0:12:B6:42:5F:F4:A7:C5
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 019748FAA89098D75D4626CD27DA6C226F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 06:01:16 +0000
Manifest this update: Sat 07 Jun 2025 06:01:16 +0000
Manifest next update: Sun 08 Jun 2025 06:01:16 +0000
Files and hashes: 1: Pkgvs8n5r0cOTki23zgtPVAVRmE.crl (hash: Vx9jGaW1pSnNn8rQu1w+w+3tHMwCN+s/hs4MY7LSnwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a8:90:98:d7:5d:46:26:cd:27:da:6c:22:6f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Jun 7 06:01:16 2025 GMT
Not After : Jun 8 06:01:16 2025 GMT
Subject: CN=b973f2f60f7a308b3cd5f579f012b6425ff4a7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:32:e9:2e:9e:97:59:46:9d:88:a8:19:b4:30:
1c:92:15:ec:f0:7c:c9:ba:49:da:95:5e:2c:36:a6:
b8:f3:5c:84:0e:ac:53:88:63:a9:3a:96:58:84:f3:
d4:dc:b3:46:28:00:c4:2a:10:15:b2:54:8d:a0:4f:
ef:17:f8:65:1a:e5:d0:51:b1:a1:01:94:05:64:ad:
5c:bc:ca:c3:df:de:d6:45:6e:f1:14:67:f2:6b:22:
a4:70:43:dc:58:ff:45:e4:84:76:32:00:77:21:b6:
3e:ad:74:44:3b:f7:f1:00:2b:df:81:27:43:73:59:
2f:d9:a9:61:74:85:e1:1c:96:08:a2:45:99:b3:02:
89:54:8f:61:52:42:91:d2:e2:83:eb:4e:36:24:80:
c9:83:09:dc:3e:b0:ac:ad:44:94:81:e6:3c:8a:c8:
97:a9:72:54:b4:c6:bd:fe:a8:87:f2:83:0b:89:18:
fd:21:11:39:61:79:08:ec:f8:f8:54:bd:27:de:d1:
0d:bd:f8:b4:fd:37:e7:d5:42:1d:d6:f5:d8:d4:fc:
5a:5f:d6:d9:ba:bc:cf:92:df:dc:98:ea:8b:6b:37:
ac:c1:b5:6b:72:1f:b6:60:12:aa:6d:17:6b:ef:fb:
6b:1d:0f:8e:cd:6a:cb:0f:66:07:95:69:cc:9b:aa:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:F2:F6:0F:7A:30:8B:3C:D5:F5:79:F0:12:B6:42:5F:F4:A7:C5
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1c:01:75:d1:11:92:cb:56:b4:47:2e:c5:f9:87:50:31:8c:
78:dc:26:10:1f:fd:a1:b9:ca:6a:6d:d2:15:9f:70:68:75:0e:
b9:65:3b:09:5d:70:6e:8d:8c:3c:44:0c:13:b1:a0:47:28:4e:
e1:0f:a2:30:53:c1:58:80:f9:b1:84:90:26:46:db:07:11:e2:
b6:7a:c8:73:45:aa:f9:c3:f6:ae:68:a9:09:3e:3b:e0:43:f3:
1b:da:72:78:f1:fe:14:7c:08:05:e2:e6:6b:9c:4a:49:43:23:
14:7a:fe:e1:64:de:e1:fc:aa:ce:f4:aa:56:1f:bf:25:52:a3:
e8:20:d6:5e:8f:0e:ba:25:da:53:1f:8c:00:b5:45:45:35:92:
5d:68:a0:ef:f9:4a:4d:8e:02:6c:c6:2b:6e:6a:ba:50:a4:d1:
78:c9:aa:0a:da:c7:6d:3a:a1:f4:d8:23:77:88:a7:55:9a:b9:
83:a6:a3:16:14:04:07:59:30:b7:b7:17:c4:9c:7a:e3:aa:35:
8c:2a:6b:57:e6:02:88:cd:9e:20:66:bb:30:f9:35:6e:15:b2:
66:f5:7d:aa:8b:a4:b1:24:35:0f:fb:2d:a6:28:98:42:fc:34:
c8:26:25:ed:f9:e4:be:bb:ad:ac:f6:74:cf:95:7a:2a:a3:c0:
62:28:58:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+qiQmNddRibNJ9psIm9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx
NTQ2NjEwHhcNMjUwNjA3MDYwMTE2WhcNMjUwNjA4MDYwMTE2WjAzMTEwLwYDVQQD
EyhiOTczZjJmNjBmN2EzMDhiM2NkNWY1NzlmMDEyYjY0MjVmZjRhN2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzLpLp6XWUadiKgZtDAckhXs8HzJ
uknalV4sNqa481yEDqxTiGOpOpZYhPPU3LNGKADEKhAVslSNoE/vF/hlGuXQUbGh
AZQFZK1cvMrD397WRW7xFGfyayKkcEPcWP9F5IR2MgB3IbY+rXREO/fxACvfgSdD
c1kv2alhdIXhHJYIokWZswKJVI9hUkKR0uKD6042JIDJgwncPrCsrUSUgeY8isiX
qXJUtMa9/qiH8oMLiRj9IRE5YXkI7Pj4VL0n3tENvfi0/Tfn1UId1vXY1PxaX9bZ
urzPkt/cmOqLazeswbVrch+2YBKqbRdr7/trHQ+OzWrLD2YHlWnMm6pzEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlz8vYPejCLPNX1efAStkJf9KfFMB8GA1UdIwQY
MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt
ZGI0ZDcxNDg1OWI1LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1
LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBwBddER
kstWtEcuxfmHUDGMeNwmEB/9obnKam3SFZ9waHUOuWU7CV1wbo2MPEQME7GgRyhO
4Q+iMFPBWID5sYSQJkbbBxHitnrIc0Wq+cP2rmipCT474EPzG9pyePH+FHwIBeLm
a5xKSUMjFHr+4WTe4fyqzvSqVh+/JVKj6CDWXo8OuiXaUx+MALVFRTWSXWig7/lK
TY4CbMYrbmq6UKTReMmqCtrHbTqh9Ngjd4inVZq5g6ajFhQEB1kwt7cXxJx646o1
jCprV+YCiM2eIGa7MPk1bhWyZvV9qouksSQ1D/stpiiYQvw0yCYl7fnkvrutrPZ0
z5V6KqPAYihYQw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:15:44 2025 by rpki-client