Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
File: pMqKz4g4TsU94Z4om10mQqEf9_0.mft (raw, json)
Hash identifier: KO9vdcy2RIZ4TV4kKZNMF5315251iNZY0R+/NdfXWkA=
Subject key identifier: 5A:15:EE:52:C8:26:E0:77:BB:D8:6D:DE:FD:6B:64:E3:B8:7C:D6:B5
Authority key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Certificate issuer: /CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Certificate serial: 01987A893414AFAD73C982A7307FA89DC38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
Manifest number: 03EC
Signing time: Tue 05 Aug 2025 14:01:08 +0000
Manifest this update: Tue 05 Aug 2025 14:01:08 +0000
Manifest next update: Wed 06 Aug 2025 14:01:08 +0000
Files and hashes: 1: pMqKz4g4TsU94Z4om10mQqEf9_0.crl (hash: +dpqvUTPsFetudO5l9O8XqYguP7tJocexNE3CUFB0d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:89:34:14:af:ad:73:c9:82:a7:30:7f:a8:9d:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Validity
Not Before: Aug 5 14:01:08 2025 GMT
Not After : Aug 6 14:01:08 2025 GMT
Subject: CN=5a15ee52c826e077bbd86ddefd6b64e3b87cd6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ab:68:bb:c0:7e:66:8c:4e:e4:33:2a:1b:98:
53:35:89:2a:dd:05:2e:44:bf:56:9f:58:d5:84:71:
8e:48:38:1f:b4:a8:9c:4e:0d:da:8a:b4:4a:e4:03:
79:fe:ff:da:2c:f3:c9:7e:f9:7f:bc:cc:a6:20:5d:
29:55:31:6c:a8:53:24:73:ae:96:46:17:b3:5c:b0:
5e:ce:6d:0e:89:d5:9a:82:fe:db:ae:ea:79:c3:98:
80:d8:5d:df:5b:91:d1:e2:c9:e4:f4:8d:82:76:ba:
14:7b:08:2b:7f:1f:63:13:34:02:30:25:c5:2b:9f:
5e:5d:9d:06:d2:61:57:04:d1:d0:c8:58:9f:65:89:
7a:cb:fa:4c:6d:bf:49:f2:77:2d:1c:3a:7f:de:09:
97:53:10:04:2a:1a:9d:e9:14:b3:29:7c:04:95:df:
9f:1c:e9:5a:29:71:80:f1:03:8b:69:98:e7:60:3c:
77:13:c4:25:fa:ce:50:bc:fc:f1:bb:db:9c:6a:ae:
e6:f4:19:29:bb:3d:69:d9:7e:3f:7c:11:3e:17:2b:
d5:a9:9d:9c:05:71:f2:80:a3:df:37:3f:3d:72:e4:
2f:85:73:66:15:ab:de:dd:57:b9:02:d3:0d:63:6e:
b5:4b:68:00:93:db:5c:55:a1:2a:8b:0a:bb:28:67:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:15:EE:52:C8:26:E0:77:BB:D8:6D:DE:FD:6B:64:E3:B8:7C:D6:B5
X509v3 Authority Key Identifier:
keyid:A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c9:bf:4b:b6:76:33:08:2a:c6:5c:cf:7b:a7:ca:56:81:fd:
f1:84:44:ca:39:ec:d8:1c:6e:44:03:20:bd:b0:cd:88:f0:6b:
d8:d6:83:d0:e3:8c:8d:94:ce:a9:3e:1e:44:0c:f1:ed:4d:e8:
a9:df:55:7d:15:fa:96:89:da:c3:55:bb:6a:c8:fc:a9:e1:ca:
1a:3c:60:e7:92:df:49:08:49:39:6a:fd:bf:b0:01:b3:b7:20:
75:2c:50:ce:32:51:b1:ce:5d:e5:46:5f:26:9c:55:71:b3:21:
36:42:86:0a:94:bc:13:7a:52:59:ba:5e:7f:b7:27:c3:4e:fc:
5c:7d:43:4d:ea:36:e2:d1:1b:d9:d5:5e:ce:78:f7:97:c9:db:
7a:51:0b:47:5b:d6:6e:fa:e9:1a:93:40:f0:70:38:47:8e:26:
73:ac:54:de:58:64:17:61:6f:42:b7:36:c2:8e:4a:f3:0d:13:
9a:e1:de:a3:9a:c2:e2:fd:e9:b7:de:ab:0a:22:73:d7:dc:d9:
b2:0d:dc:ef:24:39:d9:7c:06:6e:e5:de:f9:69:fa:a4:c0:08:
fa:ba:82:64:fb:7b:cc:68:d3:29:d6:3d:4d:95:0f:9d:f1:f9:
30:22:52:92:49:42:c3:84:34:f6:76:81:58:db:ec:ec:8b:3a:
b7:97:ff:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 19:56:14 2025 by rpki-client