Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File: PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier: oHwfAc+ksp1WCfqqogegTReeDHEnI357TiGymPxIwUA=
Subject key identifier: DF:6C:92:62:6F:61:8A:2E:D7:D6:0F:74:D7:1A:58:D0:E1:72:AA:94
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer: /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial: 019749684370C14C47A9226373090BBC6FBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number: 09E1
Signing time: Sat 07 Jun 2025 08:00:59 +0000
Manifest this update: Sat 07 Jun 2025 08:00:59 +0000
Manifest next update: Sun 08 Jun 2025 08:00:59 +0000
Files and hashes: 1: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: GjOMSrDXCYm88ZeM9J8WCWStbsxXFkREZX22lPDVdr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:43:70:c1:4c:47:a9:22:63:73:09:0b:bc:6f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Validity
Not Before: Jun 7 08:00:59 2025 GMT
Not After : Jun 8 08:00:59 2025 GMT
Subject: CN=df6c92626f618a2ed7d60f74d71a58d0e172aa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:96:aa:9c:22:3d:33:10:ca:b6:6c:8c:36:
a1:85:6c:d0:ca:06:12:fc:38:4d:40:c6:ad:8f:b3:
91:71:5c:8f:4a:1c:ab:b7:57:1d:d9:80:47:e1:6c:
fb:c4:98:ff:64:0e:91:1b:97:8a:f0:31:d6:a0:85:
b9:a8:a2:6e:60:9f:81:22:27:70:7f:7b:d8:cc:04:
2e:1c:9a:2c:6e:11:09:71:e4:b3:af:d5:5a:75:09:
a7:d9:95:50:ab:01:9c:2a:69:8d:db:d1:6d:9d:d4:
e9:b2:eb:8f:6b:95:7b:0c:4f:29:5b:7a:c3:e1:81:
4c:a5:82:bc:cd:d2:4b:6f:80:4c:28:62:18:ba:da:
fd:15:2f:22:4f:d9:83:14:f0:b6:03:58:7f:76:c9:
a0:ae:51:24:b2:1d:9e:ec:47:6e:62:36:1c:e0:31:
ee:2c:b1:00:1f:e4:51:8b:1c:7b:7c:0e:6e:e4:1b:
47:a4:92:00:1c:cd:b7:6d:29:0c:78:99:ed:e7:61:
f7:79:d1:a5:e4:dc:ef:54:e5:e7:10:e4:9c:ac:a5:
1c:80:c3:dc:33:56:ad:d6:12:a2:a9:3b:83:24:95:
bf:f9:2f:e6:91:3a:84:dc:77:6c:30:d2:20:4c:ae:
05:4d:9f:43:98:e5:13:73:59:7d:f4:fc:b4:69:e8:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:6C:92:62:6F:61:8A:2E:D7:D6:0F:74:D7:1A:58:D0:E1:72:AA:94
X509v3 Authority Key Identifier:
keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:af:6b:0c:d2:e1:e8:27:79:43:6e:63:ff:1d:de:9f:e8:d6:
ce:d0:8b:94:1d:a8:b5:1d:f4:3e:6f:c3:82:7a:9f:fc:d5:75:
9b:86:91:53:b5:0f:e1:d0:d6:31:73:63:5a:a4:1a:87:09:c2:
52:47:21:8a:6f:5d:f7:74:34:9f:0a:ad:2b:d7:76:58:87:cc:
de:9b:48:b6:87:8f:5f:0e:58:1a:d5:bf:f4:a4:01:01:3b:70:
6d:44:2e:4c:b3:db:6b:55:70:46:39:27:14:b7:bb:a2:6e:b6:
cc:13:ce:24:a7:09:cd:0b:44:d8:89:d5:7c:71:20:19:c1:50:
fa:11:4b:76:81:41:dd:2f:08:ca:7f:f9:90:99:76:c0:31:4a:
c6:c3:af:22:04:84:69:84:20:e4:30:4b:1d:c1:ac:8d:0a:d1:
96:8b:47:b8:af:61:2e:5f:ff:80:66:9d:2f:20:bf:74:46:25:
57:e8:3b:fa:2e:fd:22:c4:3c:cf:52:6c:29:d3:00:35:e9:2c:
80:f6:d6:e1:09:e9:4a:02:6b:20:73:ca:b7:09:10:9b:14:ce:
3d:4e:3a:bb:de:82:b2:bc:a7:b9:89:25:36:55:40:b0:68:fa:
83:6e:b6:1d:5d:0f:89:1d:33:e3:0e:2d:9c:d8:88:21:55:a1:
39:e0:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:07 2025 by rpki-client