Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: ZS5pqcfMZH6mqAGL2rUyp7r87V3YC0K8PBjEmd+M2Sc=
Subject key identifier: 28:E2:A7:0F:B6:E2:13:B1:9A:D9:AC:AB:5C:0F:65:75:89:71:A9:0C
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 01988CFD5E9316420D6A4E49FDD647F82FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 064E
Signing time: Sat 09 Aug 2025 04:01:11 +0000
Manifest this update: Sat 09 Aug 2025 04:01:11 +0000
Manifest next update: Sun 10 Aug 2025 04:01:11 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: q1MqM8GyZUy06GKYgl5gBLuVwLwRNRvCRvi02zZtZ50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:5e:93:16:42:0d:6a:4e:49:fd:d6:47:f8:2f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: Aug 9 04:01:11 2025 GMT
Not After : Aug 10 04:01:11 2025 GMT
Subject: CN=28e2a70fb6e213b19ad9acab5c0f65758971a90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:be:43:d0:95:63:00:d5:d3:5b:35:fd:bd:
83:b3:7e:b8:3a:d9:5b:54:2d:f6:21:2e:5e:b4:e9:
95:03:e2:15:78:fe:62:e1:67:09:70:52:4c:a5:b9:
92:b6:20:f2:3d:0e:cd:b3:57:fb:90:67:5a:8e:b5:
0e:f3:11:10:1d:ff:1a:ef:31:cc:73:1e:6e:9f:19:
3f:3c:eb:7a:fb:ca:a8:48:ad:0c:bc:5c:b6:77:3f:
41:39:d4:80:92:52:93:bf:ac:05:0c:12:a7:b9:d2:
7e:36:de:78:d8:ff:03:73:23:63:e9:6d:06:ae:f4:
ea:97:76:8d:71:eb:09:47:b4:c1:75:04:ad:d4:e3:
a0:ed:dc:57:ec:73:8e:b3:f9:ae:bd:45:03:1c:ce:
3c:d6:f2:b1:ca:de:99:57:a3:7b:e8:37:7a:cb:da:
e5:01:cf:ae:65:c9:c7:fe:f3:81:90:d3:dc:4f:9a:
bd:90:a8:7b:e2:9e:62:9d:5c:df:d7:fa:32:dd:b7:
5a:d9:98:a4:d6:86:51:d3:a7:76:b3:04:2a:46:50:
b7:9a:88:74:4b:73:93:1f:6c:13:b5:dc:bb:68:eb:
ef:0d:ee:28:13:13:ca:fb:b3:e6:ac:e9:83:a3:6f:
a7:cb:11:2b:a0:56:cb:5c:f2:08:b2:1e:eb:d5:ae:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E2:A7:0F:B6:E2:13:B1:9A:D9:AC:AB:5C:0F:65:75:89:71:A9:0C
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ec:37:c2:9e:c1:f6:08:d1:c5:b0:87:d0:25:21:7f:67:7e:
70:9b:a3:ff:f8:af:8c:49:83:74:8c:dd:82:e8:c0:52:0a:c2:
95:16:a2:4d:5f:1a:ad:2d:f7:93:c6:94:73:6d:76:84:55:7a:
3a:9c:82:3f:76:e3:9f:30:94:c9:9b:9e:b8:86:46:d7:d5:18:
22:f3:dd:96:d3:84:94:da:6d:3b:4c:cf:66:27:0f:88:ed:25:
f4:36:02:53:08:66:24:c4:dd:1b:43:fd:c1:2b:13:e2:c7:dc:
39:76:24:93:db:c5:3f:e4:f4:8b:a4:50:b7:4c:45:31:95:92:
70:c0:96:e4:30:58:28:8f:0d:dc:07:a7:e9:66:41:25:97:26:
5c:34:db:40:a6:78:96:a1:39:a7:f6:ac:50:dd:7d:a4:7a:d6:
cc:93:5a:53:ee:a4:94:6f:62:fa:05:74:5a:7e:8f:fb:a0:1d:
08:bf:55:af:fa:6a:38:d6:ea:a8:38:da:20:12:53:2b:89:d5:
27:91:b0:61:b0:1f:aa:7c:81:11:c3:04:36:e7:f6:c8:9a:75:
a7:7b:ec:51:57:cc:ae:35:f6:13:f3:4c:c0:86:fc:84:fd:9c:
30:73:f0:a0:0f:d0:ff:e4:b7:26:eb:24:55:7f:95:bf:d1:8a:
6d:2c:3d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:51 2025 by rpki-client