
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
File: pj6AVRuSNrvAzXHFHRlZGA58j3w.mft (raw, json)
Hash identifier: ZH+0CY5fTEnnebViRKV4ZjGy6oQpjbS+fsuBVDcWHF4=
Subject key identifier: 72:BA:9F:A5:F7:D3:50:F8:EB:E6:BC:09:79:83:2E:40:A4:E4:87:18
Authority key identifier: A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
Certificate issuer: /CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Certificate serial: 019873E24838518724A9F33A78A38BD64873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
Manifest number: 1358
Signing time: Mon 04 Aug 2025 07:01:06 +0000
Manifest this update: Mon 04 Aug 2025 07:01:06 +0000
Manifest next update: Tue 05 Aug 2025 07:01:06 +0000
Files and hashes: 1: pj6AVRuSNrvAzXHFHRlZGA58j3w.crl (hash: aPsGXwLoYz78qifv/IRzQ8PBnu/L/nuh7AshqkwdG+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:48:38:51:87:24:a9:f3:3a:78:a3:8b:d6:48:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63e80551b9236bbc0cd71c51d1959180e7c8f7c
Validity
Not Before: Aug 4 07:01:06 2025 GMT
Not After : Aug 5 07:01:06 2025 GMT
Subject: CN=72ba9fa5f7d350f8ebe6bc0979832e40a4e48718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:16:7d:7e:67:4f:62:bb:fa:b5:14:6b:b7:78:
82:07:e1:4f:58:e0:d1:16:a8:09:09:7f:79:e1:bb:
13:d7:61:d6:84:00:e6:bb:63:ed:df:31:8e:72:67:
f9:78:e3:fe:88:27:c7:25:12:fa:31:53:2a:73:81:
c8:47:77:68:26:fb:c9:b6:c7:2e:b5:b6:09:10:b3:
2c:a0:c4:ea:1f:77:2d:e1:a0:6c:34:1d:19:23:44:
c8:e5:27:85:77:1a:8a:01:7a:3c:1b:95:b6:ae:92:
17:a4:a1:e2:c7:98:3e:57:89:9d:a9:21:04:0b:20:
7b:ea:0b:6c:66:80:75:29:50:19:a3:72:b8:46:d0:
1e:18:e3:e8:d0:9a:6b:40:5f:ce:24:14:ee:a5:11:
0a:80:51:1c:5f:3d:81:e9:81:68:56:b9:aa:b3:5c:
b3:8f:3c:8e:90:fa:1e:6d:96:88:7e:9e:b9:55:cd:
29:ec:28:ad:18:41:17:1c:73:7f:33:bf:8f:68:0b:
f5:f1:43:2d:30:d7:ee:97:b9:90:fa:97:9f:55:a1:
6d:9c:25:1b:2b:ea:68:5d:d2:c2:d0:82:9e:01:26:
8c:95:8a:b4:a1:a2:6c:60:62:4f:8c:1e:fc:44:44:
c3:a8:7b:0f:77:60:93:30:64:8d:af:ac:c1:ba:3b:
13:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:9F:A5:F7:D3:50:F8:EB:E6:BC:09:79:83:2E:40:A4:E4:87:18
X509v3 Authority Key Identifier:
keyid:A6:3E:80:55:1B:92:36:BB:C0:CD:71:C5:1D:19:59:18:0E:7C:8F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pj6AVRuSNrvAzXHFHRlZGA58j3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f584cf-e8f2-44cb-bdce-41b61069a7e2/1/pj6AVRuSNrvAzXHFHRlZGA58j3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a4:99:b8:20:d8:e0:76:22:15:ef:57:20:3a:e0:f2:e1:9e:
2e:b6:6e:fc:d6:39:e6:98:0a:d2:bc:31:77:43:d5:43:da:fd:
04:35:60:5f:e4:6c:35:10:ad:8f:a6:0e:91:3a:ab:ad:ec:cf:
de:53:57:e4:7c:6b:7a:e6:60:e3:93:72:0d:b8:7e:17:65:7a:
c5:d7:3e:68:de:f9:38:96:1e:a2:81:c0:df:c1:ee:e1:bf:9b:
66:e1:4b:2e:40:62:16:2d:ec:1c:95:f2:aa:be:a4:4c:9f:d3:
a2:4f:9c:a0:ab:8c:c4:ed:fe:bd:bb:d2:35:4d:42:1d:7c:d8:
bd:33:b3:e5:44:8b:11:28:38:a8:ff:37:ec:ff:3a:5a:50:dc:
3d:95:29:e5:58:d8:4e:b5:ff:3f:6c:55:b6:b8:29:86:c1:8e:
ce:dc:ef:7b:b3:e7:33:f9:27:19:3e:f6:b0:24:a9:51:39:0d:
3e:d6:c0:e0:38:28:f0:1c:c7:34:a4:62:8c:e4:f9:d2:ba:22:
95:f9:5d:ea:c0:fe:88:c8:65:19:72:33:1d:21:85:0c:8b:c1:
20:d5:11:6a:0b:16:bc:33:d7:dd:a2:6b:e0:c2:d5:21:2c:d5:
89:a6:75:f7:8f:3f:55:3b:e6:89:cb:46:26:30:d9:67:08:b1:
37:5f:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:35 2025 by rpki-client