Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
File: pkLcUMWwgtCc5unHvqeug3EHPvI.mft (raw, json)
Hash identifier: T5I5KFlE6a1xs2HdH/kKSNuP5mtLZJ+hXCHon4IhFA8=
Subject key identifier: 98:66:C7:B8:E0:48:50:D1:E0:27:94:F9:9A:AD:6E:D2:84:41:7B:0B
Authority key identifier: A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
Certificate issuer: /CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Certificate serial: 01976D3D3FD746DA4334C81F27665E8C46B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 07:00:19 +0000
Manifest this update: Sat 14 Jun 2025 07:00:19 +0000
Manifest next update: Sun 15 Jun 2025 07:00:19 +0000
Files and hashes: 1: pkLcUMWwgtCc5unHvqeug3EHPvI.crl (hash: TkXgY9t1Leg+IFyNf6yns+91KusFjdcEVmE8bqMbiV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:3f:d7:46:da:43:34:c8:1f:27:66:5e:8c:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Validity
Not Before: Jun 14 07:00:19 2025 GMT
Not After : Jun 15 07:00:19 2025 GMT
Subject: CN=9866c7b8e04850d1e02794f99aad6ed284417b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:6c:52:da:2c:bc:1e:5d:6a:f1:dd:9d:49:
1c:9b:2d:2e:78:57:7c:3f:06:83:47:00:03:4a:38:
34:80:bc:e8:18:83:fa:08:14:38:3e:3f:7f:b6:fe:
6d:87:c7:b8:3f:19:94:61:d6:dc:c8:d4:2d:c4:a7:
2d:5c:2e:88:4b:28:f1:b3:03:82:6c:b5:3f:55:00:
33:e6:01:4a:b2:34:94:21:83:5b:a2:7d:2d:db:af:
9e:d9:a1:f6:3a:09:25:f7:10:d3:73:ae:26:38:a5:
1b:fa:5b:3b:de:1f:ad:25:04:b2:9e:2a:63:25:f3:
24:85:82:65:8f:b8:80:ba:61:c8:fc:03:7f:0a:b0:
eb:09:18:65:61:27:4d:d3:74:a0:18:77:1b:d8:c6:
48:84:2e:8d:39:49:b8:db:a4:5b:06:b1:6c:f0:d1:
52:17:2b:4f:7a:b1:eb:e3:2c:dd:e5:76:00:2a:57:
fa:b5:1b:73:2f:8d:a0:d3:54:99:3d:a2:3b:77:52:
a0:d6:b8:f6:c3:d0:4b:c5:0b:4c:c8:03:f2:af:fa:
f4:75:77:01:13:cb:ba:38:34:97:98:4d:fc:b5:ff:
86:32:d6:2c:ef:07:36:17:1e:0f:5e:40:7f:71:97:
d0:af:c6:5d:96:91:27:a6:6a:75:22:bc:9f:e0:b8:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:C7:B8:E0:48:50:D1:E0:27:94:F9:9A:AD:6E:D2:84:41:7B:0B
X509v3 Authority Key Identifier:
keyid:A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b6:f7:e4:f0:1f:ed:8d:d0:3d:22:ec:e6:5b:3e:25:49:51:
0e:76:b7:bf:f5:40:09:cc:03:e2:fe:66:f4:a1:b7:18:27:7a:
21:0a:5e:12:ac:d5:c1:79:71:cb:63:61:b7:4c:35:6b:ce:9f:
89:12:7e:a0:dd:14:e3:eb:ab:4e:2a:da:eb:26:40:fd:c7:32:
e9:1e:5b:f3:3d:28:dc:03:58:a7:1a:3c:eb:99:72:b3:23:12:
18:40:91:c3:c9:c1:c6:6a:01:58:5a:5d:c0:51:16:1b:ae:17:
60:72:3e:6b:82:ac:31:e8:76:7a:e6:45:48:b6:92:13:02:4a:
57:9b:f1:ae:e5:71:93:d7:aa:32:da:94:4b:d9:df:7f:78:df:
c0:0c:6c:36:2d:f2:82:ac:d4:69:1d:9e:73:3e:34:f9:6f:1c:
7c:69:80:2a:f3:bf:eb:52:27:08:5b:30:85:26:7d:a5:42:39:
b0:4d:33:5a:ca:d0:c6:eb:18:a2:74:34:cb:13:35:48:b7:3a:
6b:e8:0d:f0:df:ef:e0:d1:89:dd:05:1e:8e:e6:84:e4:af:b6:
b5:09:31:81:3a:65:50:7b:21:3f:1e:85:9f:56:f9:fe:7c:e0:
23:b6:d3:07:77:82:87:06:51:2c:c4:79:8e:70:21:72:32:6e:
d9:4c:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:02:13 2025 by rpki-client