
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
File: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft (raw, json)
Hash identifier: 8YeW2VUCBPEO4MEcV6CEu9+gjvjXE2I6dw7WVnyAX3w=
Subject key identifier: 17:11:E8:AD:05:3E:AD:3C:33:14:04:BB:67:7E:30:AD:9B:E3:26:29
Authority key identifier: A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
Certificate issuer: /CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Certificate serial: 0198820B6F747FDFCAD018C940652787DF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
Manifest number: 0276
Signing time: Thu 07 Aug 2025 01:00:44 +0000
Manifest this update: Thu 07 Aug 2025 01:00:44 +0000
Manifest next update: Fri 08 Aug 2025 01:00:44 +0000
Files and hashes: 1: pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl (hash: 2hqZ0EYA+BFTWlRYxzyGfzMNRq/nNeBDx4E/hJolef4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0b:6f:74:7f:df:ca:d0:18:c9:40:65:27:87:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43e2b9fbc8b4772cf8000748c47dd437b3c598f
Validity
Not Before: Aug 7 01:00:44 2025 GMT
Not After : Aug 8 01:00:44 2025 GMT
Subject: CN=1711e8ad053ead3c331404bb677e30ad9be32629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:34:79:80:27:76:7d:85:f5:71:1e:05:16:09:
a4:46:a3:b6:60:ad:6e:08:61:af:01:9b:bb:fa:49:
87:1f:f9:8d:3c:2b:43:72:86:03:03:5b:fd:85:86:
db:97:2c:de:3a:11:27:b9:1a:3b:c6:44:48:aa:0e:
f8:22:55:5c:ca:b9:e1:b6:5f:14:27:bf:44:f0:82:
5d:0b:4d:a4:a3:12:2a:68:51:dc:22:2e:c2:8f:82:
5c:20:b6:da:84:00:7e:c7:fd:e5:a8:db:58:e1:b2:
6e:79:75:21:23:cc:8c:da:9b:47:2f:c6:e0:b4:79:
38:94:82:bf:40:66:3e:d6:9c:bd:89:83:f9:b6:e5:
70:7a:07:f8:92:3c:0d:ed:1f:22:87:86:69:86:9e:
48:61:9e:ed:54:2d:dd:3a:74:04:33:89:f4:fe:f4:
d6:e7:53:a9:86:c2:e5:c0:51:53:f9:9c:23:bb:42:
91:23:86:63:04:28:1b:92:b7:c9:bc:86:ce:d4:95:
cc:e9:49:f0:bf:f4:03:a1:3f:45:d3:49:7d:39:79:
62:88:0f:b8:10:d7:d7:43:2c:6b:fe:2b:a0:46:96:
7a:62:7b:32:9f:da:17:2d:34:58:5e:02:3b:ae:16:
b9:40:8c:f4:e4:76:af:ed:ed:6b:40:e3:f8:b1:7b:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:11:E8:AD:05:3E:AD:3C:33:14:04:BB:67:7E:30:AD:9B:E3:26:29
X509v3 Authority Key Identifier:
keyid:A4:3E:2B:9F:BC:8B:47:72:CF:80:00:74:8C:47:DD:43:7B:3C:59:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b8f9d9-4f25-4818-b33c-b001e5bad017/1/pD4rn7yLR3LPgAB0jEfdQ3s8WY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0d:1d:2a:ed:c4:e1:8b:33:dd:d7:20:94:a0:8a:c3:c0:ca:
ab:cc:99:ae:f4:aa:9c:7d:1c:2f:56:22:2c:f4:3c:b0:71:90:
c8:4e:2d:f7:89:e9:77:55:cf:bc:e5:7c:05:6d:3a:b1:5d:7e:
f0:96:9d:78:48:2b:96:e0:8a:f1:cc:74:55:fe:83:27:f5:0c:
32:dd:b7:96:48:16:92:83:10:43:e5:74:52:da:64:7a:d4:39:
b1:5c:db:4c:2b:99:fb:0c:8f:fd:81:cc:40:a7:84:90:8d:4b:
a5:fa:a6:ba:3f:d8:fe:0b:e3:c2:45:35:af:e9:32:3d:c4:a9:
2e:33:6f:a0:3c:ec:51:ef:b6:68:37:5b:ac:ae:b2:94:f5:61:
dd:65:ab:bf:7f:21:1d:6f:6d:19:9e:00:08:2b:46:b4:5d:6e:
dc:7e:f0:ea:17:72:47:16:c4:1e:4e:d5:cb:33:ea:07:92:fb:
af:b5:1b:0b:f9:22:1b:64:07:9b:9f:cb:93:14:40:89:bc:78:
3a:dc:05:4b:77:17:80:78:bc:46:e0:78:c5:59:e9:19:46:4b:
21:c1:c6:df:d8:b9:ac:db:e3:57:e8:92:6d:32:34:3e:54:22:
e3:f5:e5:3b:15:4e:1e:c9:25:c3:ad:c4:4f:47:d7:aa:b8:e1:
ee:bb:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:43 2025 by rpki-client