Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: wGDVNRBCAAcwdCa7uDOuW7VlrA9i0RNcHBSGm8KeubA=
Subject key identifier: F6:CD:2E:E7:26:95:81:DD:F3:87:F2:2E:19:13:9B:57:3C:FB:13:E3
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 0198733CFAED3B240CA8953F1F1602A8F7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 04:00:32 +0000
Manifest this update: Mon 04 Aug 2025 04:00:32 +0000
Manifest next update: Tue 05 Aug 2025 04:00:32 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: qRyECWgP+yoplUaFgTGWXTIaxquV50oAnQ8UsMEF+kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3c:fa:ed:3b:24:0c:a8:95:3f:1f:16:02:a8:f7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Aug 4 04:00:32 2025 GMT
Not After : Aug 5 04:00:32 2025 GMT
Subject: CN=f6cd2ee7269581ddf387f22e19139b573cfb13e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:b2:f6:14:37:4c:11:ff:b6:89:eb:45:dd:
34:c9:e6:cb:92:17:ec:36:4e:33:3e:36:94:a6:94:
6e:22:ec:14:b2:5d:f1:2b:0d:ce:c5:5b:20:66:b6:
0d:77:34:ec:c3:a5:58:a0:37:60:f8:e7:b2:1f:a0:
c7:08:4d:77:47:49:8e:26:80:af:66:69:4b:07:32:
14:19:a5:be:11:76:5a:fe:e2:58:d4:7a:6c:16:e9:
51:81:36:af:3e:93:aa:77:ce:76:dd:f2:7f:d9:2e:
5a:ac:1f:9a:d4:07:ae:86:7a:2c:c2:e6:ca:7c:bc:
d9:3e:02:9d:ac:4f:45:c7:b4:c1:04:31:5c:46:c9:
cf:57:50:a4:d1:1b:b4:31:dc:fe:66:26:8c:dd:67:
11:94:a6:dc:a9:d8:c4:a1:0e:79:63:cb:f4:40:3b:
f0:2d:2c:82:25:d1:ad:d3:4e:4c:bc:ff:f1:3d:22:
a0:42:74:53:0e:0f:15:25:20:b0:59:d1:78:61:a7:
b2:67:d1:67:29:f3:2d:bc:bd:12:2a:e7:49:c4:dc:
50:ed:5d:dc:de:bf:75:1b:26:9b:2c:0e:6f:08:ef:
5d:e1:61:53:2c:d5:f1:15:8f:d1:47:09:81:22:1f:
2c:30:00:03:65:d4:42:01:e2:0a:2e:a8:c1:dd:af:
a3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CD:2E:E7:26:95:81:DD:F3:87:F2:2E:19:13:9B:57:3C:FB:13:E3
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:26:54:99:88:bb:33:4c:51:aa:a4:63:84:16:05:0b:9e:5e:
d2:25:83:86:5e:b5:00:c8:fe:99:d8:f8:c5:6a:80:58:39:1d:
4d:0b:60:79:de:ea:2c:35:9f:94:0f:05:0e:1e:11:d4:4d:8e:
b8:48:e5:95:8e:b7:51:4c:4d:39:80:ac:74:38:dc:87:01:59:
07:b7:39:eb:11:66:f9:16:19:d9:3e:75:88:b1:03:6d:1f:b5:
9a:0d:17:c9:1d:46:cd:d7:8b:3d:1a:79:9b:c1:7e:14:6a:73:
72:67:ec:56:d2:05:3a:f5:a2:28:3a:64:c3:ee:70:45:c2:21:
b8:a3:ef:5e:5e:ff:76:71:47:81:41:2b:7a:a0:8b:4d:d1:4b:
f0:55:41:66:43:cc:98:a9:4d:92:35:b6:53:7a:ea:18:4f:0a:
90:28:63:81:55:b4:a8:7d:03:96:e7:d2:f3:4e:1f:63:38:76:
73:0a:18:f1:1c:f2:fc:c0:3e:5e:86:5a:1d:bb:8d:03:80:f0:
f3:92:dc:81:6f:e6:fb:72:51:1e:d6:2d:81:69:f1:36:95:69:
dc:1b:00:6c:d1:6b:4f:b9:e9:a4:83:06:9a:d3:8d:9e:d7:7a:
fc:7c:65:49:fa:dc:7e:79:0c:3a:f3:60:9b:c1:0f:bc:7d:e9:
25:bb:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:09 2025 by rpki-client