Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.mft (raw, json)
Hash identifier: I9M+CCN+4EO+IMouXzGFLlbkIDZBSerz0HMypqllegk=
Subject key identifier: 00:5B:AE:6F:0C:49:BE:58:CE:49:2D:12:81:17:9D:2F:DA:AC:AE:C1
Authority key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Certificate issuer: /CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Certificate serial: 01988B0F87AAE6FEAF11520B81601421BAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 19:01:47 +0000
Manifest this update: Fri 08 Aug 2025 19:01:47 +0000
Manifest next update: Sat 09 Aug 2025 19:01:47 +0000
Files and hashes: 1: pcatcQWg6X4ZLw6I5mgYq2D33sg.crl (hash: jbYw4vfjM616Z9eR8GaK0Kay8hwuQl05vXWiXdrIHvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:87:aa:e6:fe:af:11:52:0b:81:60:14:21:ba:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Validity
Not Before: Aug 8 19:01:47 2025 GMT
Not After : Aug 9 19:01:47 2025 GMT
Subject: CN=005bae6f0c49be58ce492d1281179d2fdaacaec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:06:5e:28:1e:e3:ce:bb:a5:fc:b7:c7:b4:
b2:6b:00:23:68:52:9e:b5:14:18:77:f7:a5:4a:f6:
30:70:6b:2f:ca:93:f9:ff:c0:6a:b0:23:bb:8f:e5:
51:74:44:7a:6c:e4:c5:eb:32:80:f8:e4:28:3e:53:
44:22:4d:7d:95:b8:e1:d6:68:1b:51:63:cf:d3:8d:
71:a8:38:e9:90:b7:23:00:ef:b1:ac:3e:17:2d:a8:
5b:a5:aa:41:0c:98:51:86:bb:d0:04:53:b0:9c:93:
d4:0c:36:ca:31:b1:fb:14:cc:f9:96:b8:69:6e:22:
0e:57:31:37:b4:86:d4:b0:42:55:4f:80:c8:09:5e:
98:df:3e:b0:3c:ec:12:d9:c9:ab:0f:5e:24:92:7e:
91:3e:34:cf:19:82:c8:1b:a0:7d:17:9f:e7:21:5d:
10:be:f0:b5:4e:2b:77:d3:e7:10:b8:6e:f4:55:71:
06:5f:41:3c:58:6a:47:d9:d2:39:8f:75:35:39:17:
ff:d2:ab:1c:e6:38:86:3b:ce:d5:34:e4:cc:36:0a:
24:a8:59:b0:ae:a8:5f:65:4c:d0:5d:b2:2a:14:b7:
49:94:66:b0:3e:94:c0:0f:c9:a9:02:d4:df:96:1b:
d8:81:a0:b6:34:58:4d:a8:56:18:64:70:93:0c:64:
b5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:AE:6F:0C:49:BE:58:CE:49:2D:12:81:17:9D:2F:DA:AC:AE:C1
X509v3 Authority Key Identifier:
keyid:A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f3:db:03:25:b2:73:df:91:9c:be:3c:e8:78:ca:df:d9:ae:
82:31:a8:f1:3d:b7:7e:f9:a8:44:00:41:9d:94:77:30:37:a0:
31:13:eb:61:0f:46:e6:bb:5a:13:d3:89:a1:56:54:88:fa:64:
85:fc:cf:59:b7:01:d4:d1:8b:38:94:33:9b:ac:98:47:a7:d4:
a2:42:56:7a:16:21:97:d1:8c:45:29:ce:47:27:65:5d:ca:9d:
7e:4a:0e:3c:7a:f8:f0:d3:98:47:1b:25:f6:14:91:d6:e7:10:
22:e3:af:6e:46:75:90:b3:8f:bb:43:d7:7a:c7:3f:ac:f6:e9:
80:3b:40:91:df:f5:07:86:a5:24:7b:64:fd:25:4b:66:95:39:
52:3a:27:fa:43:a1:e3:ed:de:cd:80:85:3d:ad:f9:31:ad:04:
b8:9b:e1:ce:9e:72:d7:bf:cd:c5:0f:f4:05:38:d9:57:06:e7:
f6:b9:34:23:d5:dc:42:19:38:2a:4a:18:b7:86:7f:8e:5f:0a:
53:11:e4:90:63:48:8e:b3:01:92:ab:2c:0b:9e:7d:da:f5:ba:
48:3a:21:b5:be:c1:6d:a7:d3:d0:02:50:52:62:37:66:2a:4b:
4a:bd:35:c0:3d:65:35:4c:0f:b0:9e:f3:e6:6e:15:02:b5:d0:
aa:39:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:11 2025 by rpki-client