Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: REr/A1aHhDLCkMywBmYtdoJFyR0Wy1BP8BY6JcuFD0A=
Subject key identifier: 3F:B2:27:44:F7:1D:47:D6:4C:ED:EA:A3:DE:33:5B:CE:80:C7:BE:65
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 01974A7AE02480AA43DFAD5436EF24C55FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:00:56 +0000
Manifest this update: Sat 07 Jun 2025 13:00:56 +0000
Manifest next update: Sun 08 Jun 2025 13:00:56 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: OQIjbjqAaLPU3AS/+toig0i52wp1qbZFAPRw0XiSRmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:e0:24:80:aa:43:df:ad:54:36:ef:24:c5:5f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Jun 7 13:00:56 2025 GMT
Not After : Jun 8 13:00:56 2025 GMT
Subject: CN=3fb22744f71d47d64cedeaa3de335bce80c7be65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:73:01:93:44:e8:a4:4d:56:51:b3:dc:6e:
81:4e:2c:f9:f6:58:76:b0:3e:45:cd:fd:0c:85:0f:
84:b5:fe:02:c6:98:17:0a:98:6f:85:4f:5a:df:20:
a1:14:2c:10:24:20:9c:ca:b1:fb:da:6e:6a:27:3d:
be:a4:52:c5:14:22:a3:33:46:b9:81:4f:e3:67:25:
6f:45:67:f8:83:65:4a:98:80:58:8f:6d:3b:8f:98:
d4:6c:d9:09:bb:6f:b3:4a:23:14:7f:b4:de:7a:45:
6e:e0:4e:c8:96:44:08:1f:61:20:17:38:16:b1:d6:
35:cb:30:eb:c1:4c:7f:ea:28:bf:4e:f0:8f:81:13:
f2:a6:40:e7:5a:09:e8:54:0c:dd:69:09:e0:13:73:
38:0e:7b:ff:7f:74:d9:c3:40:d6:d7:f3:82:e7:76:
80:89:63:d3:5a:90:3b:2f:3a:b1:32:8e:a5:30:0b:
2a:0b:14:4c:55:83:e0:da:87:5a:b6:63:55:12:3b:
1c:89:ac:b9:f3:57:ce:bc:43:11:6f:ee:8f:61:71:
53:8b:d7:1f:96:3f:b5:2c:69:56:8d:86:83:12:e0:
e7:36:a2:40:f2:5e:3a:34:fa:b1:61:ca:fe:e2:4f:
69:bf:4e:8f:eb:33:ac:bb:80:f3:a2:3a:ae:68:c9:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:27:44:F7:1D:47:D6:4C:ED:EA:A3:DE:33:5B:CE:80:C7:BE:65
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:9d:ad:f9:09:76:6a:b2:6a:38:e2:2a:fa:03:85:fe:01:7f:
5a:3d:71:f2:45:b1:da:95:28:85:7c:42:b4:63:ea:75:1f:41:
c7:eb:02:32:dd:20:0e:15:9f:3b:df:c8:9f:45:40:de:e6:16:
f9:1a:2b:d1:f9:fd:01:ed:d5:11:bc:6d:c8:eb:72:73:89:7d:
f0:16:8c:ae:9b:3a:df:46:87:fa:7c:30:fb:04:83:4d:8a:fa:
f3:20:9e:99:c7:dd:77:9f:f1:76:77:cc:7c:9b:c5:ab:c3:c5:
e1:b2:5a:05:4d:45:af:63:17:2d:5b:90:f8:1e:95:01:14:1d:
36:b9:06:1f:21:c3:6c:9c:ad:53:70:c4:4a:14:14:a9:eb:76:
7b:d6:7b:7f:92:71:fb:9d:b0:f2:f9:c1:f0:89:3b:e4:6f:44:
ac:da:7c:46:2d:e6:d2:74:49:1d:5a:b7:c2:db:e8:83:b0:e3:
21:18:9e:32:e4:42:2c:42:88:9f:c3:5f:c3:19:85:4d:23:af:
ca:bb:e2:74:fc:dc:2d:dc:37:c1:cc:dd:a7:5b:57:40:72:c0:
de:b3:fd:be:89:b9:7c:c5:74:8f:bc:44:b3:18:ee:bb:7a:3d:
b6:10:27:f2:bf:d3:43:5c:c4:70:eb:18:5d:00:66:7e:8d:2a:
e1:67:73:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:43 2025 by rpki-client