
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File: pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier: aOCEmXKOxvyiZxaPLa8rycROdw0QaeQZWrI/ylkeiGY=
Subject key identifier: A7:A2:99:DD:9B:0F:76:F6:BF:4A:F6:F1:C0:E1:D2:EE:79:68:42:F9
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer: /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial: 01987D89BF87E2B99EE4E9523E4C4EE65A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number: 161A
Signing time: Wed 06 Aug 2025 04:00:35 +0000
Manifest this update: Wed 06 Aug 2025 04:00:35 +0000
Manifest next update: Thu 07 Aug 2025 04:00:35 +0000
Files and hashes: 1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: XhztTX/qHp4dYl+hpFMi1vNOS/CjblKzTwPcRrIIJqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:bf:87:e2:b9:9e:e4:e9:52:3e:4c:4e:e6:5a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Validity
Not Before: Aug 6 04:00:35 2025 GMT
Not After : Aug 7 04:00:35 2025 GMT
Subject: CN=a7a299dd9b0f76f6bf4af6f1c0e1d2ee796842f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:ac:05:29:d1:52:4d:83:92:4f:57:6f:78:
08:3f:40:0b:de:c2:d6:aa:f6:68:6c:f7:ab:d6:72:
a4:ef:37:60:b7:90:ee:e7:10:7e:ac:53:a0:95:0c:
51:88:ca:f9:e1:e5:b9:3b:72:a9:5d:e6:08:cf:3b:
fe:7c:f7:46:7b:a3:6e:77:e1:95:14:ef:35:e5:21:
8c:da:4d:95:69:81:e3:e0:b3:29:62:cc:5f:df:67:
66:70:94:ba:06:07:c3:2d:5d:36:d2:ad:a8:02:4e:
d6:79:7d:3d:55:bb:ab:17:6d:31:f7:a0:15:11:f4:
0b:e0:3c:7b:7c:15:32:5b:5e:ed:04:b6:c1:aa:44:
36:b7:83:4b:29:a5:46:61:6e:a8:bf:94:5c:66:56:
36:8b:aa:c3:8a:56:7a:61:09:98:21:5d:83:44:ce:
ae:f2:0c:ff:46:89:d7:6d:d4:a9:c9:9c:3d:c3:99:
02:3e:c2:d4:a0:ac:77:33:93:36:cc:bc:3d:f9:76:
81:84:e8:7d:e4:8d:71:45:40:18:e5:5a:35:35:3e:
82:7f:34:80:39:66:6f:23:cb:a0:1a:44:7e:45:f5:
88:63:40:fc:12:f8:20:d3:f8:d7:a7:94:07:5c:c2:
00:70:82:db:d8:65:8c:4d:a7:54:cb:c0:61:59:30:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A2:99:DD:9B:0F:76:F6:BF:4A:F6:F1:C0:E1:D2:EE:79:68:42:F9
X509v3 Authority Key Identifier:
keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b8:ca:d7:8d:3f:98:20:e4:bc:c1:43:c5:ff:83:a6:89:af:
6a:34:e6:9b:d8:ef:3f:67:c7:fe:07:76:2d:2d:5e:c7:a3:f4:
95:25:78:4a:ac:17:fe:54:9e:48:8c:32:b5:d9:0f:79:4a:e0:
c4:54:da:e3:88:4c:35:6c:aa:ba:aa:f4:80:3d:40:bd:2f:c2:
57:52:99:30:d5:05:0b:1f:68:a6:31:a3:9d:f3:e0:9d:0c:6b:
35:82:36:2f:e2:cc:7c:9b:6e:a7:08:35:e8:2b:16:34:e3:34:
3b:f0:ee:3f:25:9b:32:a8:87:aa:94:72:67:fe:9e:24:20:c5:
4f:aa:99:1b:2f:ae:43:f7:34:d9:bf:26:2d:d2:8d:ac:8c:b2:
71:2d:77:78:84:30:b7:61:f4:83:4c:e9:2e:0b:f6:0d:8f:a3:
d9:7e:71:ba:53:d7:ef:7c:e9:cb:7b:30:0d:9f:80:de:fa:15:
1e:7b:f7:f7:06:7e:3b:15:fd:b0:04:7a:79:7f:fb:f0:f2:f5:
f5:d5:b8:29:3b:1a:3b:1c:69:9a:fe:4c:8d:a5:f6:8e:4a:97:
2b:1e:cc:4e:76:69:db:b6:f0:31:29:77:87:9c:f3:0e:3a:f0:
1b:a9:ef:c0:b0:2c:58:68:a6:f1:96:90:c4:ce:6b:2e:86:31:
25:2c:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:29 2025 by rpki-client