Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: 4qiK5OsXc8AL9xt4CohpGxGbqHtJOKh7sdZEqhKX0AM=
Subject key identifier: EC:AF:05:D8:C1:2B:1F:45:C5:1B:FA:DB:1B:03:E2:9C:B6:82:BE:1D
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 019873E26E918DB171C8711124A17B5B2BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 0759
Signing time: Mon 04 Aug 2025 07:01:15 +0000
Manifest this update: Mon 04 Aug 2025 07:01:15 +0000
Manifest next update: Tue 05 Aug 2025 07:01:15 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: 8sAPsodg+VM6GFzkQNCTs9EDphB/KwcbUGRxRQXRF7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6e:91:8d:b1:71:c8:71:11:24:a1:7b:5b:2b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Aug 4 07:01:15 2025 GMT
Not After : Aug 5 07:01:15 2025 GMT
Subject: CN=ecaf05d8c12b1f45c51bfadb1b03e29cb682be1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:00:26:1b:fc:b0:5a:60:19:90:15:fd:8b:
66:a9:ca:e1:e0:ee:bc:95:8f:52:24:3a:5d:f8:81:
c4:9e:b1:ef:45:0b:cc:51:d7:d4:9c:a4:c3:9b:61:
2d:0d:96:31:ec:fc:d0:77:54:49:85:75:99:e7:e9:
eb:fd:e2:f8:f9:1c:36:b9:7a:d7:f9:fe:e0:cd:f3:
1d:1c:0b:10:06:78:3b:ed:46:9c:2f:5a:9c:a5:d4:
07:2c:db:1c:12:57:23:2f:fd:f2:2a:23:d9:a9:69:
75:22:35:29:67:bb:f0:10:7c:07:28:cd:18:44:17:
02:be:61:aa:03:78:ba:b8:10:02:3c:d2:3a:e7:e9:
60:30:5e:6b:a0:b1:01:c9:f8:0e:d4:ab:33:26:be:
19:2b:21:78:a6:0c:c6:0f:ef:a3:71:ac:81:b3:27:
bb:fa:f5:e7:ee:a5:23:21:48:b2:12:0e:1f:c1:cf:
c6:6c:7a:69:84:d9:6a:33:ad:e4:fc:71:77:de:55:
ff:6a:66:07:bb:1a:b5:16:4a:76:98:3a:98:cc:25:
f5:35:bb:78:41:53:90:69:3e:fe:52:8d:cd:64:80:
aa:c2:ac:aa:37:f3:a9:87:60:97:80:60:fc:40:0a:
b1:c8:d0:2d:48:dc:d0:c9:7f:c0:37:98:87:39:d0:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AF:05:D8:C1:2B:1F:45:C5:1B:FA:DB:1B:03:E2:9C:B6:82:BE:1D
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c8:bb:c7:fa:72:ac:21:d5:4c:a4:6a:62:c4:3f:04:35:44:
79:d0:c1:a9:98:ec:50:0c:5f:76:74:42:73:06:6b:1c:90:95:
51:0c:55:94:36:71:86:67:05:a3:0c:cf:b2:cd:55:6f:63:1c:
bd:09:18:1b:98:58:2b:ce:a4:c7:f2:76:e7:b8:f5:3a:9f:d2:
29:da:71:05:e6:0a:68:86:5d:7d:ef:f2:e5:e1:5a:af:da:51:
75:ea:93:5f:a4:07:ff:19:ee:72:ab:44:be:ee:82:a1:82:da:
17:c1:24:7d:b9:95:54:0f:32:3d:4a:d9:06:3a:4c:54:4f:65:
4d:7e:7c:7e:52:8a:c6:8c:41:99:69:5c:d9:74:1b:fe:e5:cc:
aa:e5:5b:27:f4:23:6b:bf:eb:55:aa:82:af:8a:ff:ea:ab:fc:
1a:4d:42:51:2a:b6:9c:2d:53:c3:62:9d:3e:32:d0:13:14:31:
6a:49:be:7e:bd:56:d4:dc:1a:ca:5f:ba:8b:ff:7e:4a:fd:75:
2d:e9:16:88:9c:0d:7e:24:86:a1:45:66:5b:42:f3:ef:b5:ae:
47:d2:e5:04:ab:93:2a:d5:2d:23:8e:9e:9b:02:3c:0f:86:be:
8b:81:fb:30:2b:4e:0a:40:ca:d4:42:49:e1:58:76:f8:0e:6c:
d0:5d:aa:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:08 2025 by rpki-client