Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
File: PcJAKLjucj8XJvRZUfpc_mteQms.mft (raw, json)
Hash identifier: bY33fBaXGLYNZNakHRNoU7sj4lTVleiHQSoiIrqzL+Q=
Subject key identifier: C8:E4:23:80:CB:02:73:05:AE:4B:A8:73:9A:12:B4:8B:27:89:9E:34
Authority key identifier: 3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
Certificate issuer: /CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Certificate serial: 019749D5F2D8C6F5088575AE385FEA3D089E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
Manifest number: 11
Signing time: Sat 07 Jun 2025 10:00:47 +0000
Manifest this update: Sat 07 Jun 2025 10:00:47 +0000
Manifest next update: Sun 08 Jun 2025 10:00:47 +0000
Files and hashes: 1: PcJAKLjucj8XJvRZUfpc_mteQms.crl (hash: hHBkwRTb0EzPhLlmzuSTVoEFtQdJmW4rEFUksh3cY/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f2:d8:c6:f5:08:85:75:ae:38:5f:ea:3d:08:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc24028b8ee723f1726f45951fa5cfe6b5e426b
Validity
Not Before: Jun 7 10:00:47 2025 GMT
Not After : Jun 8 10:00:47 2025 GMT
Subject: CN=c8e42380cb027305ae4ba8739a12b48b27899e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:89:a5:15:66:40:16:3c:15:14:5e:63:14:
e5:28:f2:c7:93:ec:06:cc:cf:a7:cb:24:e6:d9:26:
47:3f:db:41:d5:0d:05:53:fe:cd:76:10:e0:c2:e6:
de:7e:a1:cb:65:9e:e8:57:6a:48:16:fd:5b:a7:8b:
b3:0a:7a:5f:a8:fb:16:fc:8b:ec:5d:0e:49:5a:64:
f3:6b:0c:6e:71:0e:21:4a:58:bd:f8:dd:ba:34:02:
47:d0:1a:2c:74:7b:4c:62:50:fd:d0:67:2f:a8:84:
2e:9d:d4:8d:d2:12:71:0a:08:eb:86:d8:b8:bb:0d:
1e:0d:35:33:09:d5:1a:08:e7:4f:a5:8a:98:a3:61:
5c:ce:8e:6b:70:5e:47:96:c1:f0:22:ed:f3:1c:8e:
1e:0b:ea:b4:7b:8d:b6:52:12:7b:1c:9e:b4:80:fa:
50:38:a8:1f:43:e3:71:29:d1:b7:a3:51:b3:3e:40:
0a:a0:cb:16:a6:2c:ec:0d:f8:3b:ac:b1:e1:1e:b2:
23:75:f9:57:54:ab:2c:59:73:4d:e1:c0:34:62:ee:
70:07:b1:81:cc:a9:a5:ad:a4:a8:28:c7:39:f4:07:
1e:ef:93:b7:ef:a9:a5:cb:1a:93:fe:84:24:42:1a:
98:a4:52:72:76:a6:db:a1:94:8e:4f:02:20:ea:31:
a7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E4:23:80:CB:02:73:05:AE:4B:A8:73:9A:12:B4:8B:27:89:9E:34
X509v3 Authority Key Identifier:
keyid:3D:C2:40:28:B8:EE:72:3F:17:26:F4:59:51:FA:5C:FE:6B:5E:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcJAKLjucj8XJvRZUfpc_mteQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/afc9af-c0d6-41fa-937b-7dcb3907f396/1/PcJAKLjucj8XJvRZUfpc_mteQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d3:95:0a:49:31:a9:5d:5b:5d:d7:52:72:56:1d:68:1f:17:
44:11:43:ef:c1:c7:5f:38:4b:09:e8:26:d4:65:63:41:2f:57:
3c:66:11:a0:18:17:5c:78:e8:ed:ba:e4:c2:ae:2c:16:22:58:
a8:64:bd:b5:38:d0:6d:b5:19:e4:5d:7d:6c:5c:40:a5:a3:05:
37:a7:d8:da:38:1a:24:c9:65:51:31:ff:b5:f0:a7:32:7d:58:
35:15:8e:00:7e:ab:ef:44:13:95:16:16:a3:a8:17:3a:43:22:
d0:4f:a8:1a:77:f7:64:41:7c:4d:65:b2:58:f2:ee:ad:23:c2:
06:23:46:40:d2:bd:fc:3c:06:f1:a7:03:b1:aa:05:80:cd:40:
86:ec:4f:8b:ee:1b:a9:2f:24:ac:01:32:b3:96:62:8e:ae:32:
b8:0e:88:46:a9:59:24:5f:63:fd:d8:cf:18:f5:73:3d:36:e0:
88:cd:84:fd:ed:20:40:fa:fb:62:2e:29:34:8d:cc:28:ae:d2:
be:de:bc:07:7d:bf:f5:11:e7:8e:22:e4:2e:f0:52:07:de:9c:
23:54:9b:fc:eb:83:a8:b9:93:99:55:e0:5b:c9:c8:90:85:97:
5b:4b:17:90:11:4b:68:22:d3:73:68:d1:5c:46:40:ff:f0:2d:
e3:de:dd:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1fLYxvUIhXWuOF/qPQieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzI0MDI4YjhlZTcyM2YxNzI2ZjQ1OTUxZmE1Y2ZlNmI1
ZTQyNmIwHhcNMjUwNjA3MTAwMDQ3WhcNMjUwNjA4MTAwMDQ3WjAzMTEwLwYDVQQD
EyhjOGU0MjM4MGNiMDI3MzA1YWU0YmE4NzM5YTEyYjQ4YjI3ODk5ZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMiJpRVmQBY8FRReYxTlKPLHk+wG
zM+nyyTm2SZHP9tB1Q0FU/7NdhDgwubefqHLZZ7oV2pIFv1bp4uzCnpfqPsW/Ivs
XQ5JWmTzawxucQ4hSli9+N26NAJH0BosdHtMYlD90GcvqIQundSN0hJxCgjrhti4
uw0eDTUzCdUaCOdPpYqYo2Fczo5rcF5HlsHwIu3zHI4eC+q0e422UhJ7HJ60gPpQ
OKgfQ+NxKdG3o1GzPkAKoMsWpizsDfg7rLHhHrIjdflXVKssWXNN4cA0Yu5wB7GB
zKmlraSoKMc59Ace75O376mlyxqT/oQkQhqYpFJydqbboZSOTwIg6jGn8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjkI4DLAnMFrkuoc5oStIsniZ40MB8GA1UdIwQY
MBaAFD3CQCi47nI/Fyb0WVH6XP5rXkJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hZmM5YWYtYzBkNi00MWZhLTkzN2It
N2RjYjM5MDdmMzk2LzEvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hZmM5YWYtYzBkNi00MWZhLTkzN2ItN2RjYjM5MDdmMzk2
LzEvUGNKQUtManVjajhYSnZSWlVmcGNfbXRlUW1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtOVCkkx
qV1bXddSclYdaB8XRBFD78HHXzhLCegm1GVjQS9XPGYRoBgXXHjo7brkwq4sFiJY
qGS9tTjQbbUZ5F19bFxApaMFN6fY2jgaJMllUTH/tfCnMn1YNRWOAH6r70QTlRYW
o6gXOkMi0E+oGnf3ZEF8TWWyWPLurSPCBiNGQNK9/DwG8acDsaoFgM1AhuxPi+4b
qS8krAEys5Zijq4yuA6IRqlZJF9j/djPGPVzPTbgiM2E/e0gQPr7Yi4pNI3MKK7S
vt68B32/9RHnjiLkLvBSB96cI1Sb/OuDqLmTmVXgW8nIkIWXW0sXkBFLaCLTc2jR
XEZA//At497d3A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:37 2025 by rpki-client