Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
File: PBC7uXtTnGv4MFlZhVZloOeqbZU.mft (raw, json)
Hash identifier: kNpZZA0qfCjB07tVo2xXoPr6ZJD8K6a0UjQ/Wu20kbo=
Subject key identifier: 1D:7A:88:7F:A0:EA:05:29:80:19:32:F0:C7:FF:00:C9:AF:92:72:13
Authority key identifier: 3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
Certificate issuer: /CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Certificate serial: 01988167BABA0EA6A55DB226AACE7B28CC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
Manifest number: 0A24
Signing time: Wed 06 Aug 2025 22:01:55 +0000
Manifest this update: Wed 06 Aug 2025 22:01:55 +0000
Manifest next update: Thu 07 Aug 2025 22:01:55 +0000
Files and hashes: 1: PBC7uXtTnGv4MFlZhVZloOeqbZU.crl (hash: n1bAAu3UWXvENzS/jWEU+F/d0x/iPYNBoI/erGUzu3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:ba:ba:0e:a6:a5:5d:b2:26:aa:ce:7b:28:cc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c10bbb97b539c6bf8305959855665a0e7aa6d95
Validity
Not Before: Aug 6 22:01:55 2025 GMT
Not After : Aug 7 22:01:55 2025 GMT
Subject: CN=1d7a887fa0ea0529801932f0c7ff00c9af927213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:1e:14:bb:02:68:3e:ed:06:c0:d4:3b:f9:
15:2a:d0:5f:05:fd:7f:c3:af:d1:e6:50:3a:e8:07:
b3:d0:f0:b0:37:98:4c:51:ee:6e:7b:87:9c:68:9a:
47:f5:3d:ce:47:a0:e8:fd:9f:e2:bc:c6:d3:be:9e:
b5:ab:48:5e:56:83:14:b2:d9:22:8d:3e:47:7a:e7:
52:98:dc:4a:3f:7a:f9:e6:51:46:b5:6c:82:9f:9b:
6b:a8:39:d0:a8:15:1c:2d:16:3e:5e:82:3c:79:80:
40:fb:45:4f:a8:23:d8:34:fb:b3:e5:c8:6a:96:b9:
16:ef:0f:31:46:f4:7e:bb:98:dd:3d:ee:a3:a5:b8:
6b:db:12:4f:f2:a2:93:c3:2d:18:af:2b:66:d1:dc:
bb:ad:5a:24:9a:4c:95:17:c4:9f:e4:30:b5:bd:95:
45:d9:87:c9:2c:0e:61:b8:ce:a1:6d:f4:84:24:9e:
d3:fc:f7:3e:1d:43:d6:c3:f1:12:c4:2a:8d:0b:9e:
ef:7c:d1:ea:c9:bc:07:e9:e0:74:8c:99:b1:80:1b:
ca:e8:ca:83:2a:44:0d:2e:93:43:ac:62:42:0b:85:
22:a1:b9:15:01:9b:b6:e0:54:0e:09:6d:7f:0e:6a:
b9:fb:f0:a5:50:68:3c:50:98:14:20:dc:9c:41:86:
8e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7A:88:7F:A0:EA:05:29:80:19:32:F0:C7:FF:00:C9:AF:92:72:13
X509v3 Authority Key Identifier:
keyid:3C:10:BB:B9:7B:53:9C:6B:F8:30:59:59:85:56:65:A0:E7:AA:6D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBC7uXtTnGv4MFlZhVZloOeqbZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f763a9-7176-4f32-9760-220165c3e6df/1/PBC7uXtTnGv4MFlZhVZloOeqbZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e2:eb:82:f0:08:14:0d:e0:df:46:9a:26:5a:b4:5d:5a:d5:
04:d3:ea:41:89:a9:0a:c9:ae:b2:64:d9:74:8f:57:53:07:2d:
eb:72:0e:a7:b8:33:6b:d4:72:93:8b:82:c9:c5:c3:3b:d9:67:
fd:39:aa:b5:71:05:ee:58:b5:7d:e7:2e:92:fc:47:25:09:80:
c2:84:75:ee:8f:e1:12:35:39:81:a4:8d:4e:ce:eb:9f:21:fc:
75:b2:cb:93:9f:17:b4:a3:17:f8:62:27:4c:56:8e:d0:4a:42:
26:cd:4e:13:91:7e:84:5e:df:ba:6c:62:fb:11:60:04:64:c0:
d5:39:4a:23:64:3d:10:73:db:ed:90:43:44:36:fb:9f:85:bb:
7e:cd:fd:cd:c2:fe:07:0d:d7:41:7b:b4:56:01:7b:e6:63:c5:
74:66:3a:d4:2b:74:05:b9:5b:64:7a:fa:15:c4:15:2e:18:c7:
08:4d:08:fa:ad:8e:32:f3:58:c4:98:4e:e4:fa:ba:95:da:4d:
0a:25:34:f9:53:91:f6:93:03:f7:64:88:b3:01:13:13:40:73:
0f:59:1c:5e:32:d4:02:07:b4:f0:a9:30:f2:0b:6e:61:e9:bb:
ca:1e:4b:b1:27:95:77:6f:a7:8c:80:c6:8a:dd:f0:f4:9a:6c:
92:37:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:36:52 2025 by rpki-client