Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
File: PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft (raw, json)
Hash identifier: kOjHErYQl2dhX6hnKailWVy77Wh4l24NTbJ8adWw0ZM=
Subject key identifier: 02:02:7F:48:6E:0B:08:E9:14:30:11:9A:F0:C0:3A:59:69:7C:57:3E
Authority key identifier: 3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
Certificate issuer: /CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Certificate serial: 0197469ED1AE646C056FE43E36F18AC4D92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 19:01:42 +0000
Manifest this update: Fri 06 Jun 2025 19:01:42 +0000
Manifest next update: Sat 07 Jun 2025 19:01:42 +0000
Files and hashes: 1: PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl (hash: H24MAUiExTl3tg3VN3bIFdWZm6T3rO/Uh5JlpqYN3NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:d1:ae:64:6c:05:6f:e4:3e:36:f1:8a:c4:d9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7bc6f0d465fee294fd62c850dcf38ec4ac1597
Validity
Not Before: Jun 6 19:01:42 2025 GMT
Not After : Jun 7 19:01:42 2025 GMT
Subject: CN=02027f486e0b08e91430119af0c03a59697c573e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4b:af:8e:54:36:ef:2b:22:6c:9a:83:0d:85:
e1:58:62:5b:d9:9d:74:5f:6b:0c:25:17:b8:e8:7d:
46:f0:d8:87:c2:53:47:ce:97:ac:f7:ee:54:a1:ed:
8a:97:e5:d1:c3:cc:5e:a1:02:b3:be:4d:aa:25:4d:
75:b4:a4:e6:90:e9:5c:1f:c0:ec:ab:77:01:be:72:
76:d1:bd:21:c3:99:0f:1a:1b:98:ed:26:f8:0d:a9:
40:7d:72:de:04:b7:5d:70:87:df:14:fe:43:d6:63:
e9:86:65:08:9b:b7:89:8e:b3:8f:14:6f:89:0e:1c:
20:df:df:70:7e:93:ef:a1:1d:1c:3d:51:79:e1:54:
c1:f6:c0:45:6f:cf:8e:e1:13:51:f2:5e:87:ca:67:
70:8c:e7:df:a2:0f:45:54:71:de:36:97:f1:3f:10:
c1:2a:c7:e3:13:1e:cc:bf:3e:bf:2c:c0:42:ca:89:
25:d2:25:ff:48:a9:53:d8:02:32:83:2e:14:d4:2a:
b7:7b:d8:02:3e:15:d3:9c:0e:90:b6:4e:9a:f1:ca:
db:c4:4f:c1:81:49:af:55:5b:0b:06:b4:91:2b:fc:
e0:09:f4:67:8f:b8:50:52:ec:f3:67:db:25:be:df:
23:5f:70:2f:81:94:ea:59:23:82:e8:7d:a5:3a:9f:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:02:7F:48:6E:0B:08:E9:14:30:11:9A:F0:C0:3A:59:69:7C:57:3E
X509v3 Authority Key Identifier:
keyid:3C:7B:C6:F0:D4:65:FE:E2:94:FD:62:C8:50:DC:F3:8E:C4:AC:15:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHvG8NRl_uKU_WLIUNzzjsSsFZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f74521-0718-4583-853f-0dbd232fd24e/1/PHvG8NRl_uKU_WLIUNzzjsSsFZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6f:05:87:19:3b:84:76:a9:2e:9c:86:ce:37:2f:ce:05:f5:
db:6e:01:fd:2b:cf:41:72:aa:7d:90:3b:48:7b:e2:95:32:3f:
ec:cc:40:59:3e:79:7f:a1:0e:30:5d:b1:44:11:08:05:e8:a2:
94:17:7f:2a:85:75:aa:84:eb:f9:ce:07:dc:41:6d:a2:3d:7c:
37:dc:e1:f0:d6:76:6a:12:64:62:4b:48:4f:4a:73:a6:0f:23:
61:4f:18:1c:ce:7b:87:92:33:e2:60:65:1e:e3:d4:17:4f:02:
26:78:88:90:ae:c9:72:f5:36:2e:61:df:19:09:33:d1:ef:a5:
8b:d1:74:0f:61:52:eb:bb:01:ba:9a:55:13:3a:8e:24:e4:41:
f6:be:0a:c0:65:7c:a1:50:56:ce:23:43:43:bd:65:f6:c9:84:
17:bf:94:4e:a1:4b:11:df:de:a2:4d:d3:79:62:96:77:6e:38:
18:e3:f9:01:6e:13:e2:ce:47:c1:1e:cb:fb:93:79:27:c9:e7:
20:09:ce:e8:cc:c3:49:d3:81:73:65:32:81:03:ba:65:9c:03:
d4:de:fb:ab:08:cd:4b:22:7d:f0:09:9a:1c:18:c1:5b:b8:83:
1a:f6:84:96:ee:03:e6:89:96:7c:8f:00:31:8a:66:7b:41:12:
cd:c3:e2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:52 2025 by rpki-client