Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: qon37AVge+LYv2+miMpnO7Mma6JGeKLcBTT2+getdqw=
Subject key identifier: C4:A8:61:06:11:CE:D5:DD:FE:CD:C6:2B:F2:04:8F:AE:32:A4:FC:01
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 0197488C61EAC8FB79E3F5082BCB9FE7021F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 0D75
Signing time: Sat 07 Jun 2025 04:00:48 +0000
Manifest this update: Sat 07 Jun 2025 04:00:48 +0000
Manifest next update: Sun 08 Jun 2025 04:00:48 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: xBK5r63dFfYAdvG2fR21LseDbve7ezpwP78vJQBUVQ4=)
2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:61:ea:c8:fb:79:e3:f5:08:2b:cb:9f:e7:02:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Jun 7 04:00:48 2025 GMT
Not After : Jun 8 04:00:48 2025 GMT
Subject: CN=c4a8610611ced5ddfecdc62bf2048fae32a4fc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:8f:5f:a5:6a:e8:66:65:1b:ff:3d:4c:d0:
b0:28:36:d8:3b:6e:d7:56:b8:fe:42:e4:72:f1:53:
fd:f5:24:d8:77:89:49:e7:e3:5d:e9:a5:36:9b:e3:
60:3f:26:a7:82:40:4d:25:66:9d:d1:bc:97:eb:f5:
bf:c0:b4:77:ec:d7:90:ca:cf:97:7c:7c:16:86:06:
dd:14:c9:f5:54:a0:40:7b:e2:e8:de:d8:f7:70:07:
1e:d7:78:ee:f6:e3:b0:42:ab:43:39:ec:4b:5f:21:
2c:a8:b5:af:4f:80:8f:df:18:cf:72:48:c6:21:e8:
24:63:5e:2c:84:6b:e6:2b:c4:17:e1:53:14:aa:57:
1e:25:66:42:81:b8:b5:2a:40:cd:80:5e:4e:d0:63:
69:8d:ed:bb:a8:af:76:32:b6:fa:0f:28:41:3e:1b:
61:60:57:a2:36:5d:ac:82:39:71:d3:bc:5b:31:40:
4d:7a:f5:1e:f3:c3:32:57:ee:8d:8a:10:00:ec:f0:
f7:e4:fe:d6:c6:ad:ad:71:6d:b1:39:9a:14:ac:fa:
5d:65:5e:66:0d:5d:d5:6d:9d:87:b3:43:45:56:3c:
44:08:cb:fb:e1:bd:eb:fc:6b:6f:71:78:34:f6:4b:
53:a9:4b:1f:b2:f2:f9:f2:67:21:7b:96:fd:14:e9:
32:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:61:06:11:CE:D5:DD:FE:CD:C6:2B:F2:04:8F:AE:32:A4:FC:01
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:38:3a:a6:c8:83:79:fd:8a:98:b6:4c:3a:ff:6a:26:f0:
43:88:d6:9b:42:9b:76:8c:b8:7e:f2:50:f2:8e:83:21:54:04:
0d:23:bf:78:e7:30:81:03:ed:f2:00:05:31:ec:12:27:b7:79:
62:cd:59:3a:c0:66:71:a0:7e:88:4d:72:6f:a5:02:df:8a:df:
21:e1:e6:e9:bc:41:f2:eb:5b:21:a1:84:9b:e8:63:aa:78:fe:
b4:06:15:96:c3:f5:13:be:7d:fb:ba:0b:f9:d0:a6:76:ab:e1:
aa:2a:11:65:c5:a6:5e:b6:d0:26:eb:86:85:09:2b:41:50:48:
9f:42:4e:75:06:74:02:9b:01:fe:a3:53:b5:44:d5:6d:a7:a3:
7d:da:40:32:35:e8:04:ba:d1:eb:4d:47:62:97:c2:ea:99:61:
8a:c4:83:6e:3c:29:39:c0:62:99:ec:7f:25:b5:32:89:4a:0e:
d8:12:96:55:b2:cf:40:98:6a:d0:68:71:0a:34:00:34:51:ac:
0a:a2:ce:11:6a:2e:b4:36:ff:25:da:b3:98:21:0a:e8:57:d1:
78:a2:96:0f:65:cb:f3:f4:41:e9:ce:26:c5:a3:42:36:17:f4:
81:89:71:b1:dd:69:bd:14:b2:8c:6d:d9:53:f9:86:35:c7:53:
b8:ef:48:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:21:54 2025 by rpki-client