Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: 5zYzplAiStoniF7gceTXvjyQ2dDSeE0vXzm1NL3yyKk=
Subject key identifier: DE:A8:B2:6D:3B:6A:75:52:1E:7A:E2:9C:FC:E1:0E:B6:24:CB:02:72
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 019881D507B01DB051122CDA89F54F3EA5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 0655
Signing time: Thu 07 Aug 2025 00:01:18 +0000
Manifest this update: Thu 07 Aug 2025 00:01:18 +0000
Manifest next update: Fri 08 Aug 2025 00:01:18 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: o8F7Puncv22rtqHc3HJayKDMa9+abToRkjARxPuU8Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:07:b0:1d:b0:51:12:2c:da:89:f5:4f:3e:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Aug 7 00:01:18 2025 GMT
Not After : Aug 8 00:01:18 2025 GMT
Subject: CN=dea8b26d3b6a75521e7ae29cfce10eb624cb0272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:1b:78:06:60:1a:d0:ec:eb:e9:02:c0:3a:
33:b9:9f:c0:27:a0:cb:58:36:6b:ed:fc:d7:69:b5:
64:fe:92:23:a2:92:f6:3f:be:57:45:dd:b7:73:eb:
83:44:78:19:f9:e8:f0:33:fb:16:07:25:a5:44:cb:
a1:53:54:8a:45:d1:f0:b4:f2:34:72:37:4a:1a:35:
ab:38:cd:01:f8:60:ec:4d:e6:eb:89:f4:23:db:dd:
b2:71:b2:67:ef:62:67:92:0c:ae:a9:45:ed:b3:3c:
f2:5f:e0:33:d9:4f:f9:35:e3:50:c0:9a:e3:af:cb:
bb:04:b5:a0:0c:98:e3:f9:d3:32:3d:44:2f:bb:86:
7f:e9:6e:c8:df:a9:b0:0c:d1:e8:41:3d:47:62:54:
33:b4:8d:b0:cd:a7:fe:07:f8:d0:66:77:f8:00:06:
3b:61:79:c6:df:de:c5:41:01:0a:fd:04:2f:3e:2d:
11:36:60:f1:28:c6:14:7c:ea:44:d2:77:e9:9a:99:
f3:c9:8a:0e:98:f3:9e:b4:e4:77:3d:3b:86:d5:e1:
22:33:6d:9d:89:a8:c4:28:58:04:ca:55:77:f7:18:
cf:b0:34:34:32:2d:59:72:aa:85:a5:c5:b8:da:ad:
db:b8:21:7d:cd:7e:67:c0:99:39:c7:62:fc:0a:5c:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A8:B2:6D:3B:6A:75:52:1E:7A:E2:9C:FC:E1:0E:B6:24:CB:02:72
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:79:a7:f6:b3:cf:a3:42:60:10:e6:4a:2f:81:db:f0:12:67:
16:0e:6f:64:cc:55:4d:d2:16:c5:6a:06:1b:6f:38:96:17:f9:
9f:b4:09:ed:f1:b3:fa:4b:1d:90:10:be:76:64:58:58:e6:f0:
c3:66:f7:39:95:58:3e:1d:ad:4d:65:41:fc:73:07:b8:8a:d4:
fa:29:62:8c:4a:f5:df:6f:ca:7d:78:9f:25:b8:e8:c1:96:e5:
81:2c:e2:93:b1:93:76:1c:40:5a:5c:a0:37:9a:ac:b1:2a:71:
4a:28:3c:d3:e8:54:4b:40:79:47:e1:49:ff:9e:b8:9b:c2:b4:
c4:fb:cd:5f:f8:d5:0f:3a:b3:f4:a8:ce:55:fc:33:56:2d:2f:
29:17:47:86:99:dd:91:b5:70:5f:bc:cc:cb:d8:49:05:72:4a:
8d:60:05:87:d9:b7:56:66:ac:29:86:12:08:ff:c3:0b:97:14:
20:22:a0:c8:74:0e:85:a3:1d:94:73:d0:bc:ab:23:ee:b5:23:
da:be:82:31:92:a5:d5:7a:3a:e3:19:be:23:f3:87:a7:a2:1c:
22:9b:33:35:9f:3d:d4:5f:2d:bc:ec:6e:79:48:27:72:68:53:
ec:e2:2d:33:81:2b:51:16:a3:93:70:a0:78:3d:e2:1b:a4:dd:
57:71:cd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:18 2025 by rpki-client