Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: RX+BysVe92g5HAk4I8ImD2NRwehDe2qqdcU64rDLv/Y=
Subject key identifier: C9:20:E5:88:8B:DE:45:D9:FB:B3:CE:97:A4:A6:1D:62:CE:CF:FC:DD
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 01974B1FC36F9EAE4B55E87A1BEFFED7935A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 0599
Signing time: Sat 07 Jun 2025 16:01:02 +0000
Manifest this update: Sat 07 Jun 2025 16:01:02 +0000
Manifest next update: Sun 08 Jun 2025 16:01:02 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: fs5fj6/nYWEMKNqoytl2nqc7XUe4i3/nWrSQzlxIy/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:c3:6f:9e:ae:4b:55:e8:7a:1b:ef:fe:d7:93:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Jun 7 16:01:02 2025 GMT
Not After : Jun 8 16:01:02 2025 GMT
Subject: CN=c920e5888bde45d9fbb3ce97a4a61d62cecffcdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:d0:8e:ff:96:a7:c4:e4:3c:ca:59:5b:66:
8c:ad:ca:51:55:9a:07:c6:07:c9:2c:3b:f9:88:c8:
c4:f5:a9:34:fa:bf:32:32:9d:68:5a:1f:7c:9c:22:
81:dc:cb:d1:5e:1f:09:9b:cb:26:00:ad:f3:16:68:
b2:c0:91:30:42:4e:df:f5:f0:e5:b9:8c:68:a8:b7:
c8:3b:2e:81:7e:1a:fb:50:bc:cd:af:9e:6b:ee:7f:
ce:a0:d3:0f:0a:07:eb:0b:d3:8b:e2:9d:b2:0b:85:
41:fc:64:89:0a:3c:ef:bc:66:cf:e0:b3:ee:1f:ec:
46:40:25:03:b3:66:16:cf:aa:54:9b:b1:eb:c4:52:
02:79:fd:36:d6:b2:b5:8e:7c:af:83:23:22:92:55:
50:f2:da:c9:bd:a1:13:6e:a1:9b:68:d0:1a:ad:51:
75:33:57:c0:46:86:10:16:0c:0c:b3:b1:50:9c:62:
4c:19:e7:6d:e3:e3:cc:75:cc:c8:76:31:30:1d:36:
26:0c:9c:a6:16:d5:a4:39:a1:1b:2c:60:0f:cd:1d:
79:58:ae:4e:0d:a9:f5:e7:48:83:93:8e:56:0b:ca:
d7:93:81:68:0d:cb:6f:1e:d3:f2:f4:66:f5:09:2e:
c4:a4:1c:41:1e:8a:16:97:f7:09:cb:c2:82:ff:93:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:20:E5:88:8B:DE:45:D9:FB:B3:CE:97:A4:A6:1D:62:CE:CF:FC:DD
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:98:9e:6c:d5:46:66:2e:b3:2b:45:8e:47:c2:17:55:c0:24:
32:23:d1:ee:fe:9d:f2:03:da:73:8e:ce:14:59:29:f9:fc:1d:
a1:c8:5e:ae:86:93:3b:5b:ee:d4:6e:15:da:b7:43:f4:8b:a7:
ec:ac:a3:7b:cf:8d:ca:b2:71:4f:cb:6d:40:8d:b8:c4:b9:70:
42:19:35:8f:1b:6a:73:9e:7f:53:d8:20:ae:14:14:cf:92:55:
97:f2:a5:84:03:da:fa:d4:a9:2d:c2:7d:3d:ef:ec:83:a2:03:
16:4b:5d:57:db:0a:c9:e4:dd:f4:f8:d4:db:5a:42:01:bd:ef:
32:e7:c3:3d:0e:ee:46:aa:13:6b:2e:6c:b1:da:70:cf:ce:3e:
20:66:01:cb:0b:c8:e3:3a:88:ce:04:d8:b8:a5:66:b9:53:0e:
b3:0f:9d:d9:d7:90:da:a9:4a:22:58:c3:ba:d4:87:f0:85:9c:
81:ca:06:72:a7:c4:db:d5:0f:04:fa:ae:3b:98:33:5a:24:c3:
75:67:ca:e1:be:6a:24:86:5d:71:7a:b0:f3:d8:ec:3a:ae:a2:
d2:9a:31:54:1f:c1:b1:99:75:b0:5c:79:86:f9:4b:7b:45:92:
9f:88:ad:5d:5a:0d:6c:c4:43:a4:bf:48:b0:72:f2:c8:39:01:
9c:71:90:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:50:18 2025 by rpki-client