Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
File: pkLcUMWwgtCc5unHvqeug3EHPvI.mft (raw, json)
Hash identifier: HD44YgXKf4YZVbxhvdj9ivrq7+tmxjGA7DK5SBxcy34=
Subject key identifier: 9B:22:91:C4:F0:5C:CD:5A:CA:B9:19:4C:7D:F5:D4:68:24:E2:B6:A1
Authority key identifier: A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
Certificate issuer: /CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Certificate serial: 01987D89CD78D3CA502F254D41B6A3F5ED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:00:39 +0000
Manifest this update: Wed 06 Aug 2025 04:00:39 +0000
Manifest next update: Thu 07 Aug 2025 04:00:39 +0000
Files and hashes: 1: pkLcUMWwgtCc5unHvqeug3EHPvI.crl (hash: jMGCxkOW59pjsfngZIR1rGNiL3tKFJe+qBZwWeO/16c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:cd:78:d3:ca:50:2f:25:4d:41:b6:a3:f5:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a642dc50c5b082d09ce6e9c7bea7ae8371073ef2
Validity
Not Before: Aug 6 04:00:39 2025 GMT
Not After : Aug 7 04:00:39 2025 GMT
Subject: CN=9b2291c4f05ccd5acab9194c7df5d46824e2b6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:22:23:56:3c:6c:0b:ac:0a:d4:e3:d8:ff:
ed:68:b1:63:60:9c:68:ca:1d:b4:18:3b:3f:62:25:
c0:68:f9:45:2b:79:00:dd:30:15:93:b4:42:08:f9:
04:03:e4:81:6e:26:5e:bc:86:fe:25:e4:bc:d8:4e:
65:1c:13:ac:b8:c6:03:1c:cc:9e:77:6b:de:4b:12:
f1:f5:c0:10:df:b5:7b:0b:13:0c:72:89:50:27:9b:
6d:04:b9:49:5f:d1:2b:d0:33:bb:ef:f6:dc:8a:0b:
e1:d2:f7:53:44:6f:e2:6a:85:de:54:3c:e3:d0:47:
0a:7f:a1:0f:74:92:8c:55:b4:56:57:9d:70:13:03:
52:81:a3:42:7e:4b:85:d4:d0:81:80:01:4a:ce:47:
a6:4e:ad:60:f6:f8:75:b9:49:9e:8d:4c:9a:ad:c2:
d0:96:3c:ea:e6:3d:2d:fb:83:e2:ab:ef:79:dd:4e:
7b:eb:e0:38:fb:ab:d4:96:07:5c:75:e9:f5:3e:0b:
0c:77:54:be:74:f6:7b:ee:b6:4a:4f:eb:5f:df:56:
f4:68:f8:96:da:9e:f2:fc:d0:18:c0:9d:59:54:94:
90:c2:ae:ea:6b:d2:f4:48:1f:2e:61:f6:c4:b1:84:
90:56:62:0f:ea:68:6b:e3:12:86:88:e6:06:50:bf:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:91:C4:F0:5C:CD:5A:CA:B9:19:4C:7D:F5:D4:68:24:E2:B6:A1
X509v3 Authority Key Identifier:
keyid:A6:42:DC:50:C5:B0:82:D0:9C:E6:E9:C7:BE:A7:AE:83:71:07:3E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkLcUMWwgtCc5unHvqeug3EHPvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6b2d86-7f7e-487b-9180-2ed8d28599da/1/pkLcUMWwgtCc5unHvqeug3EHPvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0e:84:cc:ce:9a:93:9e:e4:39:9a:a7:fc:81:dc:0e:d2:f8:
4a:a9:34:93:72:bf:2e:2e:37:3b:80:f9:01:4e:24:8e:e0:66:
38:b4:39:c5:22:cf:79:25:d4:a9:e7:69:f1:5f:e4:24:f9:a9:
8c:fd:22:d3:06:ff:f9:81:fe:e3:2f:64:6d:9a:d8:21:79:03:
d1:0b:d9:a8:a9:1d:a4:fc:0a:61:b8:bb:70:f9:70:d1:4f:3d:
c4:20:d5:0e:35:04:6f:01:86:68:5b:d9:0b:c4:0d:4c:01:66:
5f:72:ca:e8:17:89:82:e6:36:2c:6a:35:58:bd:f4:05:e9:27:
c0:98:4d:87:67:c6:e1:84:dc:62:f8:99:eb:c2:4c:2e:be:48:
2d:a3:11:73:6f:52:04:8e:27:d3:7a:c3:d2:92:d0:74:18:be:
9a:44:33:6f:8f:77:75:28:d6:b2:7e:13:57:86:c5:5f:85:b6:
fc:01:a8:91:57:c9:a6:23:b2:1b:53:52:eb:fa:de:6a:70:ff:
78:ea:d3:42:a6:ea:96:70:36:7f:2c:63:b7:c9:c0:8b:88:1b:
fc:b1:0e:13:f8:41:77:04:81:82:cd:dd:87:c9:13:85:7f:c4:
00:c9:7c:0e:e3:36:04:f4:e5:02:27:23:45:ab:f0:a3:04:e3:
17:11:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:46 2025 by rpki-client