
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: URLZu6UCRBJZk5XgE5Qe07oVANxaaisO4KTBgtoVAto=
Subject key identifier: 11:BC:54:9F:28:D4:1F:23:38:E7:F0:B0:1B:E7:42:2F:57:8B:F3:93
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 019757915C6F5985F9E918026A23E5564036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1581
Signing time: Tue 10 Jun 2025 02:00:33 +0000
Manifest this update: Tue 10 Jun 2025 02:00:33 +0000
Manifest next update: Wed 11 Jun 2025 02:00:33 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: PvCCDA67r9zoxgHoqdiF8b3vfnXx/A6/jXUlCaTnZys=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:5c:6f:59:85:f9:e9:18:02:6a:23:e5:56:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Jun 10 02:00:33 2025 GMT
Not After : Jun 11 02:00:33 2025 GMT
Subject: CN=11bc549f28d41f2338e7f0b01be7422f578bf393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:84:11:75:18:23:ba:ce:31:8e:b3:b5:c6:
e6:8c:37:1c:0f:5b:96:6f:2c:1c:02:f7:5f:86:d1:
c7:85:24:8e:ce:b0:2e:30:ed:62:55:fc:a7:50:49:
9a:dc:13:4c:9f:95:e4:7f:54:b1:ef:a2:9a:0e:e8:
f9:2c:45:61:4f:a5:6a:86:a4:70:1f:83:fd:b8:88:
db:ea:7a:24:ea:4e:ba:7d:2a:2a:5f:7a:d8:b1:30:
3e:e1:a8:c3:ac:2b:e9:b6:98:c1:15:14:ef:43:f5:
40:e1:f5:d9:7b:6a:17:39:aa:19:66:f4:c4:81:dd:
28:41:8e:b2:47:ce:34:d1:e7:fa:41:ac:c5:e9:d7:
82:a7:4b:64:65:19:03:6b:a9:d6:17:7c:b9:78:89:
39:5e:0e:0e:4f:7b:f8:90:c4:ae:38:1b:82:ab:97:
e9:d4:02:e4:19:ae:14:66:d3:52:93:74:fb:ab:2c:
55:31:1a:b9:b3:26:02:9a:31:ce:5a:8e:2a:16:2b:
89:3d:bb:0c:44:47:ec:78:26:e3:73:2d:4d:a0:4f:
82:35:36:0b:a5:83:ff:5e:00:84:39:ee:b5:5b:b5:
9b:4b:69:2b:54:af:71:23:ee:a4:66:8d:72:44:e9:
68:39:94:4e:36:1d:6d:d9:56:24:2c:6f:66:e1:6e:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BC:54:9F:28:D4:1F:23:38:E7:F0:B0:1B:E7:42:2F:57:8B:F3:93
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:64:9d:24:be:0e:d3:cc:03:92:e0:d0:82:9f:59:75:bc:e5:
b6:7c:36:82:28:04:6f:01:26:55:9d:d8:7c:9c:4c:43:3c:9f:
6a:fe:b8:a0:1a:fb:30:16:f3:39:e0:97:ff:8c:00:20:2d:21:
3b:45:0a:dd:31:73:50:3d:6a:a4:46:8d:13:7c:96:27:ad:d3:
1a:c9:63:08:14:f9:f5:4e:99:28:e4:5f:26:ba:7c:bb:5e:aa:
3f:94:10:71:46:93:50:c4:f8:1e:22:b8:2b:71:d8:09:f0:61:
11:33:17:e8:3c:ad:eb:c4:f4:b0:56:d8:9f:f8:b4:b7:81:23:
f7:20:0c:e5:ec:4e:26:95:3b:79:83:6a:f6:86:c9:2e:1a:ad:
67:67:21:2e:f3:cd:c1:80:9e:b3:40:ec:aa:3d:94:79:a4:b4:
09:e8:33:3e:83:b8:a1:20:83:ed:a4:52:33:34:32:0b:04:71:
4c:bb:b2:b7:94:72:67:7b:af:ba:da:e2:bb:df:41:6c:c0:c3:
34:5e:61:25:97:03:40:d2:4f:7f:28:f0:45:f9:88:4e:af:b9:
40:a9:b1:10:73:4d:1e:fd:a3:b4:58:9e:ab:94:5a:44:ce:7f:
c6:b0:d9:f6:81:7c:78:db:26:b3:09:0b:d0:81:f3:e0:89:bd:
38:12:b4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:56:49 2025 by rpki-client