Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: KwWG5xb1YbbwR5RpGmbnACoonnbQC3TRrL6bR+bDKlw=
Subject key identifier: B3:28:8F:82:1B:5D:1A:9D:A6:B6:38:BD:0F:47:C0:A6:C2:A6:3F:E8
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 0197499F0A380216D702FB09D387C4CDDDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 045B
Signing time: Sat 07 Jun 2025 09:00:48 +0000
Manifest this update: Sat 07 Jun 2025 09:00:48 +0000
Manifest next update: Sun 08 Jun 2025 09:00:48 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: WzE/Z7yT+vo4heB4XEQ7+8WebHbQPo5vkcHWgQMnFZ8=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:0a:38:02:16:d7:02:fb:09:d3:87:c4:cd:dd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jun 7 09:00:48 2025 GMT
Not After : Jun 8 09:00:48 2025 GMT
Subject: CN=b3288f821b5d1a9da6b638bd0f47c0a6c2a63fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:38:bb:fe:d0:0c:06:fd:31:73:fc:16:17:
f6:85:08:47:b0:33:88:0c:11:40:35:e1:31:64:c6:
bc:70:33:36:f0:c6:b2:ff:22:f0:68:56:0e:f2:c6:
34:48:61:48:12:42:0d:77:0e:60:64:aa:44:0a:4a:
49:10:ad:b9:ec:ef:31:79:b2:24:91:4e:87:7d:61:
f0:2b:8e:6b:87:b2:1f:6b:0b:41:e7:06:32:b0:af:
b6:4f:30:f8:c4:73:0e:26:ea:13:10:dd:73:db:29:
1e:08:d4:6e:81:9a:46:ac:a9:fe:c4:22:48:77:65:
8d:6f:90:03:0d:58:97:c7:97:e3:b2:92:16:4d:d3:
93:13:2b:ab:c2:f3:c9:d7:85:70:7a:85:eb:ce:72:
a7:83:ad:f8:52:3a:00:92:05:78:6a:84:2a:49:09:
c2:9a:06:d4:d3:55:1d:d4:34:b1:bc:0b:36:b1:71:
79:b9:93:46:0f:27:92:6d:99:8e:60:3e:94:a6:89:
02:95:1d:97:6a:d1:b8:8b:37:24:a6:a3:b5:6a:41:
90:20:c5:d5:4a:de:1b:b6:b6:be:be:85:40:40:51:
4d:ab:f4:89:cf:4c:7f:94:1a:26:cc:85:df:e1:17:
e5:92:59:5b:53:0a:bf:28:0b:48:1a:ab:d8:57:60:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:28:8F:82:1B:5D:1A:9D:A6:B6:38:BD:0F:47:C0:A6:C2:A6:3F:E8
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:79:c9:0b:b2:da:15:bc:0c:e8:5e:05:b4:f1:72:21:98:96:
41:fc:e9:1a:86:dc:d3:c8:33:64:73:8a:16:dc:bc:5e:e4:14:
ba:db:4d:33:ac:20:bd:a1:10:ca:b0:8b:c0:75:e5:02:8b:43:
7f:44:68:f3:9b:2a:47:3a:cb:c2:f1:8b:46:35:01:c8:07:19:
c1:42:14:f0:5e:4b:23:fd:e2:9a:0b:9a:9d:cb:fb:67:a8:cb:
de:09:46:79:ae:46:3e:0d:82:22:a1:39:a3:88:f1:9c:ba:6d:
c1:10:bd:e1:c8:81:2a:b0:70:02:cf:24:a4:d0:fe:44:19:9f:
9d:37:03:d0:79:80:01:72:4b:37:eb:cf:c1:75:f2:8f:3b:a9:
16:cb:c9:23:db:93:1f:57:29:84:48:6a:46:09:98:6a:a2:e4:
6b:07:ee:e6:53:18:24:7a:f1:db:33:d5:28:95:6c:65:51:73:
47:6e:98:2c:89:ac:d0:a2:96:3c:65:2e:6a:3b:cd:86:c3:09:
2d:58:85:1f:a8:81:93:df:b0:52:0f:50:78:c1:e6:9d:77:4d:
96:22:46:68:86:b6:36:ad:9b:55:2c:07:92:9b:9b:81:bc:01:
e0:ab:2a:ec:d8:1b:00:21:48:59:74:44:2d:07:66:6d:ab:5d:
5e:e8:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:43 2025 by rpki-client