Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
File: PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft (raw, json)
Hash identifier: M8i/fnebpJoJmWaNxM7zV23M6ddIU3p/MG1pmknNPwQ=
Subject key identifier: 61:0B:12:68:F4:B6:EA:93:C9:92:79:75:89:46:E9:9D:DC:C1:F2:3D
Authority key identifier: 3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
Certificate issuer: /CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Certificate serial: 0197488CAE762B403180B38F62F193D53BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 04:01:08 +0000
Manifest this update: Sat 07 Jun 2025 04:01:08 +0000
Manifest next update: Sun 08 Jun 2025 04:01:08 +0000
Files and hashes: 1: PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl (hash: aqy7P4gcSrgVwrbKyPiza8R19MfR4JjjzO4P+N9VDEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:ae:76:2b:40:31:80:b3:8f:62:f1:93:d5:3b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea6ed31f97f37c5e5c550732f85d24690962cef
Validity
Not Before: Jun 7 04:01:08 2025 GMT
Not After : Jun 8 04:01:08 2025 GMT
Subject: CN=610b1268f4b6ea93c99279758946e99ddcc1f23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fd:2f:62:96:f4:30:4a:21:97:08:9b:69:2c:
9c:25:56:b7:ae:7e:a3:bc:d2:4e:a3:2b:c6:b2:80:
fa:ca:10:78:4b:d3:b2:3f:07:8d:3f:e1:da:9a:b0:
19:65:95:2f:f0:52:cd:7a:30:1c:67:57:2b:eb:de:
8e:80:5c:a6:a4:9d:e3:77:1a:9e:64:04:3a:47:94:
b3:b7:8f:1d:2c:ab:af:42:87:61:32:fc:36:2d:2a:
2b:ae:ca:4c:d9:41:a8:04:5f:44:04:a8:df:46:7e:
1d:8f:2b:15:af:e7:9f:02:ff:bf:28:e9:ea:42:e8:
31:15:6a:88:90:25:3b:ef:23:e9:9c:fc:db:db:d2:
38:f3:b6:3e:b2:13:d4:7e:b8:79:b1:48:66:21:e6:
7f:d5:85:04:f6:7c:e5:2a:17:a4:27:8b:ad:1b:70:
51:6e:c4:d5:38:4d:95:41:9b:f6:d0:02:f2:96:8d:
24:ea:20:df:2f:30:33:a1:f4:f9:df:9d:97:41:33:
85:0e:12:6f:dd:54:29:92:72:5e:b0:69:9e:6d:be:
69:ea:95:fa:c9:b6:33:5b:72:85:f7:fc:8a:71:55:
b1:30:e1:d5:c5:cc:5a:0a:39:57:bf:05:10:0b:cb:
5c:d2:ca:14:e7:d2:ce:c5:fd:da:46:08:b2:5e:0c:
34:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0B:12:68:F4:B6:EA:93:C9:92:79:75:89:46:E9:9D:DC:C1:F2:3D
X509v3 Authority Key Identifier:
keyid:3E:A6:ED:31:F9:7F:37:C5:E5:C5:50:73:2F:85:D2:46:90:96:2C:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqbtMfl_N8XlxVBzL4XSRpCWLO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35adb1-67ed-492d-ba89-2e6791694aeb/1/PqbtMfl_N8XlxVBzL4XSRpCWLO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:28:a6:14:af:26:16:eb:2a:b3:a0:62:d7:50:14:6c:1d:e3:
a3:5d:c6:f1:5b:64:4e:28:07:54:fa:c1:a7:08:6d:5b:c9:38:
90:59:45:ec:f2:80:1b:ad:9e:b4:63:df:45:ae:39:7b:9d:59:
fa:4d:88:c4:da:e4:90:6f:df:a6:49:f8:a1:0f:d9:cd:ea:3f:
4e:a4:74:d4:fb:5e:3f:ee:b2:39:b5:0c:26:42:66:d1:3c:52:
be:26:9f:2b:b0:d4:36:8c:dd:21:bf:31:2e:70:e6:48:c4:81:
cb:65:d2:fa:b2:4a:9a:14:1f:41:50:99:8f:f6:bf:de:35:63:
23:a5:8f:d0:60:e4:96:39:80:0c:7b:a5:59:29:17:30:74:e2:
76:08:af:b0:e4:02:72:cc:de:dc:97:56:6a:b2:c5:fc:ab:26:
2f:5e:74:1d:35:8c:2b:00:07:8e:e1:2d:1a:35:b5:fa:0f:86:
a1:5a:77:fd:85:bf:91:b6:32:b0:b9:c5:6f:cf:df:90:47:57:
ae:63:4b:13:30:bc:b2:f0:6e:46:77:53:c8:ce:29:f6:7f:bc:
b2:49:67:e2:de:0b:72:4b:e2:5d:33:68:e6:cd:77:fa:73:5b:
f9:f6:a5:aa:52:29:36:84:0f:1f:07:d5:6c:85:a6:d9:de:27:
c4:81:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:48:57 2025 by rpki-client