Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File: pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier: fdFzRoFYN/utKKsykX/Qk2ehHuOaFTbvAWewYO4BDj0=
Subject key identifier: 43:8C:13:95:6E:C6:5B:F0:C2:D8:05:33:DA:38:5B:C9:B5:E1:F8:36
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer: /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial: 0199239F39BDD0A25572C57A50832C96B43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number: 13B3
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: 5opjnP7Hc5zr4aZx8og08g6jBP3GQWEYAzlA/BypWwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:39:bd:d0:a2:55:72:c5:7a:50:83:2c:96:b4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=438c13956ec65bf0c2d80533da385bc9b5e1f836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:e5:ed:e5:6b:3f:27:70:ea:a3:62:80:e1:
52:2e:09:ba:cb:6f:af:6a:d1:05:c5:47:01:20:eb:
5a:37:88:22:1e:0b:34:ae:ca:ca:99:32:0c:53:e7:
23:32:af:ed:ab:c4:45:bf:da:54:7d:a1:ea:46:b4:
ea:0e:bd:31:bc:9f:fc:87:c3:ad:75:8f:6f:81:bb:
2e:33:c5:00:b6:10:46:ec:9e:a9:23:29:b4:f7:e9:
00:43:e7:db:d9:8b:c5:66:7a:28:6c:9a:69:24:ac:
13:92:1e:1f:28:1f:5a:cb:41:c6:f9:11:f6:84:67:
08:7a:35:24:9f:49:38:ae:94:8e:b4:f4:e5:8d:56:
75:2c:16:11:d9:7a:d3:29:d7:4f:ce:7a:d9:1e:7c:
e8:51:3f:9f:df:2d:a8:ff:76:c4:b4:26:a1:48:38:
b0:87:8b:a2:d3:45:c1:5b:a6:85:23:02:1e:7a:79:
94:df:99:70:76:89:3e:1a:04:2c:2a:a4:03:63:09:
a6:83:dc:6f:3d:47:b1:0f:ed:c8:03:8d:fc:82:0c:
1e:f0:60:96:ad:18:9e:9a:e1:41:15:d6:c0:00:01:
29:cb:75:82:e6:f2:52:8a:87:3d:06:93:e5:3e:88:
b1:4a:42:16:f4:54:7a:0d:c9:db:4f:34:e3:45:76:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:13:95:6E:C6:5B:F0:C2:D8:05:33:DA:38:5B:C9:B5:E1:F8:36
X509v3 Authority Key Identifier:
keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f9:07:a1:17:67:cc:28:43:69:99:1a:e5:08:e8:c2:20:0a:
3f:d6:41:73:8d:03:1d:2c:ac:ee:97:f9:f6:b9:1d:cc:26:72:
0a:e6:8e:93:c5:23:fe:dd:e8:d2:07:8c:30:fd:61:f8:18:92:
02:95:ef:e9:6a:21:21:28:8e:2f:a7:fa:53:de:a5:49:9a:21:
df:77:53:34:0d:aa:ce:a8:83:3d:7b:b1:ff:23:cc:e9:25:a7:
a4:54:c2:b1:c6:41:37:d1:ef:22:7f:f5:4e:47:81:e3:27:3a:
94:1d:4d:65:d3:ff:7e:a5:2d:17:6e:9b:f7:b5:39:2e:b3:82:
39:68:32:78:b6:16:7a:fb:26:96:84:10:12:22:aa:a4:64:bb:
d3:a3:0d:96:18:4c:fd:fb:e8:56:a5:a3:ac:ac:51:fb:63:41:
2d:6e:a5:59:74:bc:70:5d:1d:fb:20:87:15:ce:33:a6:58:fd:
c7:85:56:4c:7f:96:46:8a:ba:39:eb:dd:d8:79:25:57:73:e4:
3e:c2:88:40:a3:bd:e1:47:5a:65:59:df:1b:b4:9e:e8:cd:13:
81:2e:d8:ee:75:d1:96:32:d8:09:86:51:9c:cf:16:ff:67:de:
78:16:d1:80:1a:d7:89:5e:10:5c:8e:b6:89:7b:3d:15:13:ec:
5d:5f:76:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:44 2025 by rpki-client