Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier: cx2BeFhZKTYURANC+bHdhVUPebnB0Hd5sEKH0nOV/v4=
Subject key identifier: 75:A1:25:C3:80:2F:F1:AC:3F:34:D5:93:9C:E0:55:E9:5D:A8:32:F1
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial: 01975DCB5F80A9F549DF432679EEA9CCD3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number: 1375
Signing time: Wed 11 Jun 2025 07:01:38 +0000
Manifest this update: Wed 11 Jun 2025 07:01:38 +0000
Manifest next update: Thu 12 Jun 2025 07:01:38 +0000
Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: tW3/hMpgm3vjVK2NkcfIMY1tRQ5s2p24Ma3R0Tjj860=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:5f:80:a9:f5:49:df:43:26:79:ee:a9:cc:d3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Validity
Not Before: Jun 11 07:01:38 2025 GMT
Not After : Jun 12 07:01:38 2025 GMT
Subject: CN=75a125c3802ff1ac3f34d5939ce055e95da832f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7e:4f:b1:42:72:f1:24:ef:50:9a:ae:ae:90:
02:43:02:a0:72:d2:9a:2d:08:bb:5b:a8:50:02:6f:
47:36:4d:95:8d:99:ac:d1:e6:57:b4:b3:bb:14:34:
8f:aa:02:d8:07:ad:5e:0b:c6:b8:d3:90:29:f7:64:
16:b4:d6:ce:50:48:7d:a4:39:f4:42:28:a5:5e:07:
5e:29:ca:b6:ce:8e:b0:a4:eb:e3:b9:20:0b:b3:ac:
07:4b:7b:88:0a:48:52:47:7e:a2:83:70:19:e8:e9:
55:18:7c:52:7a:e2:dd:4b:c3:c3:3c:94:4e:d0:f0:
e2:61:1d:48:bc:72:2e:88:3f:6a:02:fa:ac:ce:b5:
1d:23:84:3e:73:32:50:6b:ed:f4:60:ae:e8:52:08:
8c:da:3d:c6:c9:e4:5b:92:00:ba:86:a4:ce:25:21:
4d:f7:01:19:ec:70:c7:80:d2:7e:f7:6b:8f:ae:51:
8a:d7:75:f2:1b:9f:15:07:2c:af:e8:ae:4f:f5:f7:
05:89:f5:82:d3:ff:ed:62:0f:83:c8:7e:1a:86:02:
1e:d0:3b:b1:d4:e9:e8:0f:96:18:6e:89:07:50:ac:
a3:27:d6:b1:cb:3f:2b:5f:3c:63:bf:d9:45:e5:db:
95:32:ab:6a:5a:81:a2:6a:db:a0:46:d9:9e:f3:a4:
ad:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A1:25:C3:80:2F:F1:AC:3F:34:D5:93:9C:E0:55:E9:5D:A8:32:F1
X509v3 Authority Key Identifier:
keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:68:c9:c0:d2:f2:97:97:ac:89:3f:ca:64:58:e5:b0:e2:c1:
82:25:b8:00:bf:8b:6b:60:80:c7:1b:79:ae:fe:25:73:95:30:
85:17:f6:9d:8f:a8:fd:55:7f:e5:58:8b:40:f1:a2:a9:1a:b7:
84:3d:a7:69:5e:0d:14:d7:4e:c7:90:66:fa:e8:c3:6a:aa:35:
70:1b:52:7e:5a:a8:33:d8:26:1e:5b:aa:18:a6:f4:60:8f:de:
71:72:3c:58:03:d9:47:ac:29:2d:34:cc:48:29:8d:db:9d:26:
5f:ad:b9:3e:90:9f:fd:1c:80:e1:00:09:3f:89:5b:9d:62:db:
c1:af:80:7e:a0:d8:66:b1:a7:69:8f:e9:cf:89:cd:f3:88:b5:
c0:65:24:dd:4f:1e:09:f4:0a:48:a7:cf:4e:23:40:52:65:3b:
05:ca:94:32:43:2e:fd:aa:10:37:2b:3c:19:ca:3c:eb:ae:b8:
13:2e:ee:e1:ff:b6:db:e7:20:5d:e0:bd:a6:a4:a6:62:38:db:
e2:71:0e:f4:0b:c0:c1:68:49:68:c1:71:02:8a:75:cc:d1:93:
96:24:86:59:87:ae:7d:45:5f:3b:a6:a1:31:02:15:70:b3:17:
26:c9:58:fe:61:cd:de:09:c2:00:43:ff:29:c8:4f:fc:a4:3c:
50:ed:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:15:12 2025 by rpki-client