Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
File: PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft (raw, json)
Hash identifier: 0oeKFpvG+wMV3tpJeTPBs/ulAmZlymRfOeFkibvS76M=
Subject key identifier: 7C:D1:13:1D:E3:CC:AA:3D:2C:96:9A:64:C0:54:27:00:FA:DD:95:08
Authority key identifier: 3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
Certificate issuer: /CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Certificate serial: 01975234CFAE9D4D2B85AED51F693715B6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
Manifest number: 136F
Signing time: Mon 09 Jun 2025 01:01:21 +0000
Manifest this update: Mon 09 Jun 2025 01:01:21 +0000
Manifest next update: Tue 10 Jun 2025 01:01:21 +0000
Files and hashes: 1: PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl (hash: vYXl0nV+nZC7HuIz/LcH8/LDtDmANdNRlOeszwuQGAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:cf:ae:9d:4d:2b:85:ae:d5:1f:69:37:15:b6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3d69ab62c8d8825f2ba4b483d0e393e2534eef
Validity
Not Before: Jun 9 01:01:21 2025 GMT
Not After : Jun 10 01:01:21 2025 GMT
Subject: CN=7cd1131de3ccaa3d2c969a64c0542700fadd9508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:2e:1e:5f:95:8b:06:ac:79:28:06:9d:4a:
5a:b5:8b:3b:b8:cb:05:3f:1c:63:d6:7c:98:85:ea:
0c:01:38:fb:19:94:57:ef:2f:83:1a:81:33:6d:d6:
2c:4e:c4:04:33:cb:7c:01:cf:81:77:d2:26:16:e4:
92:0d:17:f3:f7:29:08:b0:b8:6f:9e:44:32:ea:15:
f3:19:98:5b:7b:74:f7:ba:a0:35:d1:10:33:c0:52:
3f:14:00:b7:c4:1c:3e:c0:d9:2c:0e:50:93:ef:b6:
ce:f8:40:0b:ec:f9:93:c2:57:d9:a7:96:ad:a5:5e:
34:9d:0f:78:2a:89:70:6e:bd:e5:2d:34:98:05:fd:
bf:d9:7c:b8:bb:b5:2d:07:5f:9c:72:29:30:28:e7:
3f:8c:78:0a:32:4f:8d:f4:6f:ff:5b:86:d3:60:d4:
b1:ba:10:cf:c6:21:b3:8f:3f:ce:75:ab:4b:c1:74:
8a:66:0e:de:0c:36:58:a1:2a:b6:89:52:78:94:99:
13:01:0a:b2:a5:bb:19:02:97:b0:26:f5:09:b0:c4:
5e:0f:4e:ff:8d:f1:ea:9c:c6:23:61:4f:e9:eb:d6:
61:e8:3a:c5:cb:2a:29:1e:ca:a7:40:26:ee:18:8b:
d2:cb:7f:8f:d2:50:69:90:d9:14:e0:59:fa:4a:89:
14:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:13:1D:E3:CC:AA:3D:2C:96:9A:64:C0:54:27:00:FA:DD:95:08
X509v3 Authority Key Identifier:
keyid:3D:3D:69:AB:62:C8:D8:82:5F:2B:A4:B4:83:D0:E3:93:E2:53:4E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT1pq2LI2IJfK6S0g9Djk-JTTu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d1205b-072f-46c1-8170-0705bccd1f2a/1/PT1pq2LI2IJfK6S0g9Djk-JTTu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ac:12:72:36:a2:8a:63:d8:f0:13:98:86:01:d4:79:0e:35:
1e:b6:ad:97:d0:4e:41:78:47:1d:4f:b5:1a:49:b2:2e:62:91:
c7:38:ef:46:0d:b9:52:5d:75:41:70:10:d1:98:cd:8d:12:2a:
2c:32:78:8e:04:f3:91:7d:2c:fd:cb:78:0e:9b:35:23:79:81:
af:e4:61:5d:0b:04:2a:04:86:5e:4e:ff:60:38:b0:44:7f:11:
c9:7e:f6:32:79:30:e5:d4:ce:69:08:09:46:05:f6:f9:e5:67:
4f:85:07:f0:33:22:b8:9e:c6:99:2e:82:6d:e8:5a:53:c5:75:
90:1d:99:4f:4b:7c:8c:f9:97:28:ab:4b:0e:59:12:ee:10:b2:
91:a9:16:7d:55:ae:e8:fc:c0:66:9f:2a:02:5c:3b:bb:88:bc:
20:f9:d5:27:8f:87:db:43:18:42:70:76:01:bb:68:5c:b9:8f:
ee:79:e9:80:1d:60:72:8a:7d:08:bd:ca:bb:10:ec:09:72:9a:
c2:8b:42:d2:4f:3b:1f:99:5d:32:1d:da:db:29:9d:1c:f9:45:
5b:69:9e:c7:f6:ee:b4:e3:3d:93:f3:b6:ee:64:10:02:9f:b7:
f1:78:ac:de:b8:d3:5a:6c:85:e1:7c:59:12:b2:2b:35:60:a2:
fc:e5:5d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:35:46 2025 by rpki-client