Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
File: pcvT2g02IF_SyP0d-VXFC1UB7dE.mft (raw, json)
Hash identifier: mwuIoTHDEm5U6TPgeVXTIGHUWJTRMCG2/HDyXFwmZt0=
Subject key identifier: 63:C8:CA:A8:82:84:5A:39:3A:0D:10:AB:B8:C7:84:B0:5E:1E:4A:AD
Authority key identifier: A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
Certificate issuer: /CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Certificate serial: 01987ED3CFB39BBA35F8DAB507D5532516D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
Manifest number: C9
Signing time: Wed 06 Aug 2025 10:01:07 +0000
Manifest this update: Wed 06 Aug 2025 10:01:07 +0000
Manifest next update: Thu 07 Aug 2025 10:01:07 +0000
Files and hashes: 1: pcvT2g02IF_SyP0d-VXFC1UB7dE.crl (hash: 6+oVw/HT/7kbe5ZVtjCq183ynX9+11ttAbOS8IPMIFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:cf:b3:9b:ba:35:f8:da:b5:07:d5:53:25:16:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Validity
Not Before: Aug 6 10:01:07 2025 GMT
Not After : Aug 7 10:01:07 2025 GMT
Subject: CN=63c8caa882845a393a0d10abb8c784b05e1e4aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:25:1b:35:fe:8b:4d:f8:37:c8:68:9c:78:3f:
64:4d:5a:2a:f7:7c:24:59:19:e3:68:e9:91:cf:f6:
c6:4b:d3:f2:71:c3:91:dc:16:23:33:33:6e:b5:57:
06:5c:4c:ba:53:a4:63:95:6f:5c:99:2e:36:c0:85:
30:e9:3d:4c:5c:31:a0:12:12:53:ac:b3:8a:27:5e:
e8:76:c7:3f:e2:02:b4:40:cd:85:5c:be:de:18:2f:
b6:94:d1:7f:29:7a:48:90:db:cf:b0:dc:f7:7d:07:
6d:7c:ab:af:0e:80:16:04:2a:d8:cc:f5:a2:4d:b8:
d3:00:84:29:eb:02:c7:19:8f:09:5d:6b:06:bf:16:
68:2f:2d:df:8d:09:a6:dd:49:c6:39:03:af:60:fa:
cb:b3:6e:c5:52:df:8e:ac:71:0d:f4:1f:57:17:fe:
81:4c:ff:8e:9a:50:6b:f9:2d:c5:5b:4a:f8:a6:9b:
6d:48:ae:8c:a6:ba:50:16:90:7c:1a:19:bc:00:e8:
1a:c5:59:af:c4:5d:1d:5d:0d:57:91:6d:28:45:94:
17:93:15:99:ad:a6:6d:8e:79:eb:07:5e:d1:a0:88:
39:99:15:30:c1:66:fe:7f:3f:92:fe:ba:70:86:34:
5a:11:90:0d:be:d2:05:c8:df:d0:b9:c7:4a:14:bb:
9b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C8:CA:A8:82:84:5A:39:3A:0D:10:AB:B8:C7:84:B0:5E:1E:4A:AD
X509v3 Authority Key Identifier:
keyid:A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7a:47:d1:44:cf:8b:6b:14:b4:e5:e6:1c:e0:b6:90:9d:38:
1f:c5:72:2f:b7:3a:f3:23:38:f9:0b:fe:0c:d1:bf:91:f0:a7:
f1:80:0d:f3:1c:1e:fa:cd:20:15:53:01:18:6d:29:10:d7:3e:
56:2a:a0:a0:b0:d2:bb:56:12:ff:6b:85:d1:89:df:92:89:97:
f1:be:34:5b:27:79:e4:fe:56:2b:82:39:40:dd:84:00:c4:2d:
97:0f:7e:03:47:48:4f:01:65:e6:04:82:35:ce:ce:9c:11:34:
39:b8:07:92:40:12:25:fb:66:98:53:f5:aa:0b:41:29:95:e7:
fd:c9:06:24:49:c0:1f:af:22:2e:0a:d5:27:65:92:36:4d:ad:
aa:de:5f:15:c4:65:89:96:71:43:fe:43:ff:9c:26:1f:52:63:
de:4b:1c:a3:a3:e5:e6:07:f6:73:73:2e:00:83:98:05:82:51:
cc:97:25:65:7d:5c:5b:88:b9:9b:d8:6d:b4:76:5e:8d:b7:99:
b2:a4:ae:83:75:df:90:52:15:36:0d:40:97:c4:5e:39:81:f7:
59:ea:7e:6b:a8:1e:cc:9a:87:bf:4e:b3:8c:15:2d:82:6a:70:
a1:64:02:89:cf:24:25:c6:52:fb:1c:91:c5:21:9f:04:07:f1:
dd:5c:14:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:16 2025 by rpki-client