Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: JaA8rodd0EMNBUfzHRnuC7Jwx1bUN9wAGXx+DDNR604=
Subject key identifier: F5:4E:80:F7:BC:F1:AA:3E:42:4C:1E:72:F3:70:D9:21:72:22:F4:FB
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 019874BDDDBF5EE175CEC3304D97C1E448E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 04EB
Signing time: Mon 04 Aug 2025 11:00:56 +0000
Manifest this update: Mon 04 Aug 2025 11:00:56 +0000
Manifest next update: Tue 05 Aug 2025 11:00:56 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: hi9BW/4nfv/JVnGWyNJa0rOmhmh4EPZ71U2LpOxaohs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:dd:bf:5e:e1:75:ce:c3:30:4d:97:c1:e4:48:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Aug 4 11:00:56 2025 GMT
Not After : Aug 5 11:00:56 2025 GMT
Subject: CN=f54e80f7bcf1aa3e424c1e72f370d9217222f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:45:91:a2:7e:12:f5:b3:30:e1:96:64:3c:
c2:10:d8:cc:15:b7:22:9f:d7:84:86:43:b7:23:09:
27:63:eb:30:ee:5d:ad:f5:e8:b4:2d:e5:1e:c2:13:
26:ba:24:4a:d8:5a:97:ad:0d:28:14:54:5f:c3:1a:
a2:b8:59:e3:18:ac:d9:e3:bf:7d:18:cf:5f:82:bd:
53:cc:20:7d:9c:87:53:f6:f6:a0:50:ac:58:31:d1:
3f:eb:e9:89:ec:22:17:d7:20:be:f8:a7:6d:4f:ba:
94:88:fc:bd:9f:f6:46:b1:be:77:68:34:61:4e:de:
0e:95:b7:ea:0b:54:e4:04:4c:ec:b5:d4:dc:23:a8:
1a:7b:b3:dc:e0:2a:6b:cb:20:3e:ab:33:d0:e9:39:
e5:48:b6:ed:82:5f:c0:0b:8f:38:c8:11:2e:ee:5c:
49:ac:28:1d:2e:0b:53:c7:e4:78:ff:55:ee:f5:30:
1b:38:6d:16:a9:d4:cb:79:ac:09:97:9d:ba:a2:f8:
a5:89:1c:6f:f3:08:b8:9e:85:72:83:e3:3c:d2:37:
6f:60:45:67:86:12:ce:92:ec:ac:0d:2b:bb:fe:f2:
93:5b:6a:fc:de:ce:74:19:1e:1a:aa:c5:d1:26:72:
2c:93:ac:3a:ea:50:3e:2a:81:75:59:5c:3a:eb:3c:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:80:F7:BC:F1:AA:3E:42:4C:1E:72:F3:70:D9:21:72:22:F4:FB
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b9:78:6f:cb:8d:f3:e5:97:aa:d1:86:f8:42:4f:ba:ee:06:
20:4a:a1:df:92:08:7d:c2:96:1f:f3:a9:d4:35:37:25:79:44:
0e:18:3f:e6:ff:5d:f9:e6:2f:08:10:f9:b7:a8:d9:af:6e:c1:
56:5a:cf:40:19:c5:62:29:4f:be:79:27:02:f0:34:88:68:5a:
bc:9c:70:4b:4e:19:06:20:cd:6e:83:d3:bc:57:0b:d5:49:83:
68:ad:f0:9c:72:e5:0b:e6:da:46:b6:d2:e3:86:03:ce:2c:49:
8f:7e:a4:3a:d2:ab:d2:80:df:90:90:c8:d9:92:a8:86:d0:33:
2e:be:95:ba:3e:9e:04:42:62:f3:66:61:3c:1d:f5:48:56:27:
31:fb:99:62:c7:f0:f5:0d:1d:3d:e8:95:3a:7e:9b:f7:23:f5:
c5:6e:fb:c1:8e:4e:24:9d:65:5d:3f:91:25:69:a2:41:96:bb:
ba:76:b5:26:ff:b9:7e:f4:23:23:b6:85:73:04:f0:32:40:41:
45:6e:6a:a3:4e:a8:e2:2d:a1:09:5f:97:57:da:77:32:3a:ea:
ce:ac:ed:5f:1a:d7:17:5c:29:58:6a:b4:95:c4:69:e1:58:4c:
0d:c3:cb:da:d2:c0:77:df:e8:29:1f:69:64:84:27:72:ef:9f:
93:c6:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:41:00 2025 by rpki-client