Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: E2GFgk1gEMj84ULRbEPlZK8t1nq7HTODI6tlakAMHEs=
Subject key identifier: 90:33:36:CC:19:E9:CA:D9:EE:B1:1D:DA:E4:10:B8:5C:DF:89:BF:B8
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 01974B56D1292B5D3006759FDFDF3263B42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 0451
Signing time: Sat 07 Jun 2025 17:01:10 +0000
Manifest this update: Sat 07 Jun 2025 17:01:10 +0000
Manifest next update: Sun 08 Jun 2025 17:01:10 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: UX/anfze15//VkMnXwV08zfwR91jEH2A7hIGtwXmLkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d1:29:2b:5d:30:06:75:9f:df:df:32:63:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Jun 7 17:01:10 2025 GMT
Not After : Jun 8 17:01:10 2025 GMT
Subject: CN=903336cc19e9cad9eeb11ddae410b85cdf89bfb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:2a:0d:93:b7:f7:d2:8f:0b:d9:23:aa:cf:
92:06:53:cd:bc:fb:7c:96:11:43:dd:24:8c:5a:37:
d6:fa:89:8e:56:2c:11:30:b1:07:d3:66:8d:fb:07:
6d:6b:c4:70:a9:1f:1f:f5:11:f4:d5:55:e7:36:de:
5c:bf:b3:8c:8f:bb:03:18:f9:fa:84:73:5e:e8:65:
dc:31:3c:ad:00:84:ee:39:19:29:6d:4c:ba:66:29:
e2:e1:bd:59:57:2d:32:e4:83:d7:c6:82:3a:4a:df:
a5:58:41:ae:ec:d1:62:01:13:93:6c:c1:a2:86:01:
da:f7:70:7f:36:fd:97:7e:7a:26:22:cb:39:7b:e3:
ca:f5:bd:04:f1:f6:8c:b5:c6:93:d9:ed:47:7d:88:
06:26:9d:16:ac:5f:52:9b:38:bf:92:90:8b:24:ea:
e1:9a:ba:80:b2:04:bb:7f:ac:bc:bb:27:3d:8b:95:
f4:df:1a:26:59:85:09:8b:2c:80:91:ef:b5:84:49:
d3:6c:de:7c:e3:9a:38:f4:86:45:7a:e3:a2:62:a2:
f9:6d:70:eb:21:ba:27:1a:09:86:60:ee:1d:fe:76:
a1:be:71:f7:0a:42:da:70:7e:f7:6a:33:1f:f8:e9:
ee:f6:3f:2c:83:d8:70:1f:36:d4:b5:3e:4c:3c:4a:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:33:36:CC:19:E9:CA:D9:EE:B1:1D:DA:E4:10:B8:5C:DF:89:BF:B8
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:da:93:fd:cd:64:44:40:53:b0:1f:cd:70:03:69:c9:04:e6:
6a:99:d5:ce:de:aa:46:aa:46:31:15:f0:0e:60:d9:b8:6b:27:
85:06:d9:3a:a8:9d:c3:c3:17:f8:2f:7a:0f:96:ad:c1:23:32:
c5:a1:ec:d1:96:c3:46:72:31:17:45:19:2d:91:e2:20:12:33:
dc:05:b5:19:da:2f:b0:6f:1f:fa:82:90:45:90:d2:f6:50:d2:
36:ea:92:22:2a:fb:fb:af:47:ca:6c:4e:7d:43:cc:40:b0:1b:
c6:9d:1a:a5:24:1b:b6:92:24:2c:00:9a:65:15:cb:16:c0:ee:
3d:d5:06:e3:51:d7:d7:b5:e7:d8:be:6a:0b:d2:47:3e:5c:c9:
2a:9e:05:d1:7a:bd:ba:06:ba:f0:40:a0:d9:b9:62:5e:25:64:
cf:1b:84:7c:86:fd:35:76:e4:a6:bc:75:00:8c:cc:63:cd:89:
a6:13:60:ca:56:5b:00:29:90:06:4e:e5:36:40:d4:35:4a:4f:
5d:9e:70:8d:a2:c6:43:32:a6:48:cb:5a:52:5f:e3:53:60:c0:
5a:09:2c:20:82:26:f3:57:1c:bd:23:8d:86:31:8a:27:ed:88:
64:92:cc:64:6b:42:14:62:02:23:37:74:75:48:b2:e7:01:87:
aa:de:83:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:45:42 2025 by rpki-client