Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: ARn+8EpfoF+6mx/R2D/z36ChUrk2ig4JN6EgHUO2KRk=
Subject key identifier: 33:12:FB:82:AF:96:7D:31:59:A8:E9:3A:F0:C2:82:B3:97:8C:77:62
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 0199239ED0ED9F29A39DCF612EE2EF3EDDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0A78
Signing time: Sun 07 Sep 2025 10:00:34 +0000
Manifest this update: Sun 07 Sep 2025 10:00:34 +0000
Manifest next update: Mon 08 Sep 2025 10:00:34 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: xZybLjoqFi7bg5dN3dVcs/c1vljeY44d/CmUj2giuIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d0:ed:9f:29:a3:9d:cf:61:2e:e2:ef:3e:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Sep 7 10:00:34 2025 GMT
Not After : Sep 8 10:00:34 2025 GMT
Subject: CN=3312fb82af967d3159a8e93af0c282b3978c7762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:c6:59:a4:48:68:dd:3b:11:b0:92:30:77:
4b:4e:5c:92:e8:2d:56:38:dd:eb:99:fa:cb:e0:e2:
4d:83:d3:cf:df:91:c2:f1:16:7d:81:dd:e1:c7:58:
40:c8:e5:42:b5:7e:0a:a7:e7:5e:fd:2b:90:ea:25:
f9:b4:79:3a:6d:0c:b7:c2:e2:4a:a8:e2:82:9d:18:
ac:72:e3:67:66:06:c7:01:53:0a:2e:d5:d8:e8:19:
b5:18:33:1a:f2:44:7d:6a:76:73:ac:f7:11:2d:63:
6d:17:d3:f6:6c:c8:4c:fb:08:dc:e4:fc:c8:77:6d:
cb:df:6a:35:d4:5d:3e:d6:a3:23:bc:be:bd:87:6b:
de:14:13:25:76:fb:ec:60:91:f9:71:7a:de:30:55:
8f:ad:aa:44:66:0b:74:6b:85:e0:c1:00:97:f4:be:
45:07:21:52:cf:10:f8:f0:af:bd:f9:49:25:34:d9:
43:92:9c:27:45:06:a0:16:5b:36:cf:45:fa:76:50:
c3:63:1c:9d:41:3c:78:d7:d5:8f:58:fa:7e:9d:15:
5b:6e:be:4f:c2:43:0c:6b:fd:f0:7d:d0:ee:cd:99:
e8:f4:1e:ec:35:93:2d:e9:bf:22:5d:16:70:ca:f5:
20:0a:6b:11:62:9c:77:2b:1c:28:63:93:7e:26:25:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:12:FB:82:AF:96:7D:31:59:A8:E9:3A:F0:C2:82:B3:97:8C:77:62
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cf:e6:16:2c:6e:18:da:da:0a:31:42:2d:18:14:e9:26:2e:
f3:b9:28:75:b0:e4:2a:e1:36:52:db:00:93:7f:c3:35:f2:50:
1d:1e:fd:6d:34:3e:d3:9d:0c:0b:c7:af:32:b7:24:4b:fc:3f:
de:e9:58:76:17:ac:22:e7:4b:e5:7a:53:f5:28:5b:15:ad:5d:
f7:47:dd:0f:be:76:ca:bf:6d:33:e0:1b:1d:06:7d:57:34:95:
63:cf:f0:aa:db:06:e2:64:02:c6:24:65:c4:3a:e0:22:01:09:
53:e9:e1:fa:de:d5:02:90:89:ad:4b:68:c6:70:ab:1f:80:2f:
02:91:e5:f6:41:aa:54:c8:9e:34:1b:41:d1:0c:8d:9e:b3:e2:
00:0e:18:4f:45:14:cd:07:3f:41:c5:37:8a:38:4b:83:28:bb:
0b:a9:75:ec:ad:b0:5a:cb:56:10:e9:0f:04:55:66:58:90:5d:
64:fe:73:36:89:5b:8e:59:5d:3d:da:fc:f1:c6:65:01:e9:16:
0d:b3:b9:62:aa:e2:43:6e:f5:83:87:e5:9e:0f:08:f7:ca:d0:
9f:e8:83:af:9a:88:19:77:9c:3c:b5:1d:47:44:b5:04:63:a5:
f1:9d:82:94:de:7d:94:cf:83:11:c0:87:6d:b1:c6:8d:90:09:
d9:68:f7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:10 2025 by rpki-client