Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: JIu+oZY0M2pmLAqk9WpwKwb94KVzDsP8UPO8iZC3Fz0=
Subject key identifier: 9D:C9:D4:61:E8:89:91:B8:07:4B:3F:E7:BC:53:2F:2B:AD:F5:CE:2F
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019756112D3DF25B25A441BAE798B4923FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 19:00:55 +0000
Manifest this update: Mon 09 Jun 2025 19:00:55 +0000
Manifest next update: Tue 10 Jun 2025 19:00:55 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: zgzhRW5zQmF2GXCOnY8SSPIVc+XqQwjeTA3zAl+pe9o=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:11:2d:3d:f2:5b:25:a4:41:ba:e7:98:b4:92:3f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Jun 9 19:00:55 2025 GMT
Not After : Jun 10 19:00:55 2025 GMT
Subject: CN=9dc9d461e88991b8074b3fe7bc532f2badf5ce2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:24:cb:5b:98:ac:8a:c0:f9:a9:82:16:8e:
3e:36:ab:b3:56:f1:c9:57:77:5a:21:23:3b:d1:e5:
ca:08:84:c2:f0:bf:87:07:7a:48:b0:34:55:98:0f:
86:7b:c7:2d:f3:c0:a1:df:ec:73:79:75:22:cb:73:
ff:4e:5a:07:85:ef:c8:16:3d:27:2d:26:bc:ef:e0:
2a:78:17:cb:61:32:58:87:60:45:28:78:ed:7b:65:
f9:27:83:11:bf:57:67:7f:23:ee:16:dc:a7:f5:7b:
a6:6a:a5:ad:87:a6:44:28:85:9b:83:ba:ae:9c:69:
91:2b:20:77:31:2c:6b:a5:c2:13:fc:f4:b2:f5:4e:
ee:47:2d:5c:c5:55:b3:8b:11:ae:49:13:94:a1:7f:
26:5f:25:51:08:5b:78:a6:c8:83:4e:fa:e9:cc:f6:
13:56:eb:6d:b4:4d:9e:b8:ea:4e:02:d8:e0:56:d0:
fd:86:76:8f:9a:8b:60:39:37:e6:4f:0e:64:a6:a3:
9b:d9:8b:e1:df:0c:f3:04:78:57:80:02:a5:3b:32:
59:4b:95:40:6f:01:bc:97:22:d7:10:01:b3:c4:da:
d9:86:c1:1a:bd:97:4d:c8:fe:80:08:09:34:c5:d7:
77:c4:fc:fb:4c:75:4d:0c:cb:b6:33:fe:6a:55:d3:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C9:D4:61:E8:89:91:B8:07:4B:3F:E7:BC:53:2F:2B:AD:F5:CE:2F
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:11:f5:5b:ae:86:0c:b1:33:1c:80:fe:2e:58:ed:fc:a4:7e:
0b:0e:b5:c9:67:df:0d:f7:d1:bd:b0:4f:e9:90:2d:7f:c3:66:
4f:95:92:0b:6e:83:1c:a1:48:4d:f4:ba:aa:2c:c2:12:2c:28:
36:37:53:c3:90:ff:80:64:ec:ca:9f:21:a0:34:51:97:63:3c:
94:4d:7b:9a:e6:74:17:09:15:31:05:1b:75:9c:68:66:a4:c9:
2b:53:c2:39:73:e2:4e:0e:ce:9a:e3:8c:e0:87:1f:b5:4d:74:
2d:33:ad:46:13:02:e6:7c:24:2f:e4:a3:d9:ce:da:b2:18:7a:
79:f4:1f:a6:d4:ab:34:7b:32:d0:d1:b0:45:55:df:3e:e0:85:
fb:29:3a:7e:d7:f8:27:09:30:cd:5c:94:d6:83:1c:dc:a3:3a:
3c:6c:67:37:1f:1a:03:74:08:3a:42:04:d2:fe:b9:54:bc:15:
08:b3:e8:16:c4:8c:96:50:18:23:0c:38:0a:d2:33:43:12:aa:
f4:ed:f2:f2:42:23:0f:86:c3:95:56:a6:fc:08:d9:57:6b:d3:
15:00:dd:b1:43:0f:2c:bc:2b:64:2d:60:ff:65:96:42:d1:17:
f4:7b:7e:c1:50:b3:33:72:9b:10:7c:d0:6c:36:67:e0:04:b6:
b2:13:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:44:09 2025 by rpki-client