Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File: PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier: YjpF5cNJ9/7pOz6VFXZshhnR+JtPfEgDvnMIzV2zChw=
Subject key identifier: 55:45:FC:AD:DA:7C:71:0C:2C:DD:A0:17:0B:6A:34:79:AC:D2:C3:BF
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer: /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial: 01987D1C04BA7C4C90B0BF52776F0F7CA514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number: 01D0
Signing time: Wed 06 Aug 2025 02:00:44 +0000
Manifest this update: Wed 06 Aug 2025 02:00:44 +0000
Manifest next update: Thu 07 Aug 2025 02:00:44 +0000
Files and hashes: 1: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: +qCE9LIu7tw10UWtCqCqrAoRGGtlXiBSobmHsLXRsL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:04:ba:7c:4c:90:b0:bf:52:77:6f:0f:7c:a5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
Validity
Not Before: Aug 6 02:00:44 2025 GMT
Not After : Aug 7 02:00:44 2025 GMT
Subject: CN=5545fcadda7c710c2cdda0170b6a3479acd2c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:ee:a7:72:3b:be:f9:63:90:e9:75:6b:b0:
ff:e9:92:91:97:6d:27:97:5b:3e:32:0e:d2:56:6b:
7f:f9:3d:07:5e:12:71:6b:28:d9:9a:7e:0c:3a:41:
ac:f4:e5:fe:98:81:4b:5a:d8:ef:23:40:7c:7d:ef:
b8:13:51:65:37:7d:c1:fb:98:e7:79:73:51:e1:d9:
f3:d7:41:a7:db:19:d3:94:fc:16:c7:cc:55:51:8e:
ac:56:89:f2:9a:08:8e:d7:15:b7:16:c5:d0:10:a0:
51:ae:28:e3:7d:1a:33:fb:33:f5:fb:35:93:4b:e9:
46:86:a4:e1:91:33:f8:03:08:9a:6c:91:89:27:92:
ed:ea:a6:05:dc:81:45:94:00:61:d2:f2:4c:eb:0f:
1c:a0:82:fd:22:9f:19:47:6e:21:4f:29:65:a5:45:
04:f6:64:c8:41:55:09:92:a1:5a:56:7c:05:3d:44:
8a:8a:e4:9a:9d:93:21:ff:89:c0:7e:45:4c:9e:f5:
13:0d:49:65:76:75:95:71:ba:55:20:6a:4f:72:c8:
e5:5d:11:d2:b0:55:c0:73:d9:11:44:65:77:36:0b:
ab:d3:ed:e8:8c:8d:57:93:3f:34:89:ca:fa:97:d6:
3a:7e:69:74:2c:b8:be:82:da:bf:b2:f5:b3:a7:ec:
af:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:FC:AD:DA:7C:71:0C:2C:DD:A0:17:0B:6A:34:79:AC:D2:C3:BF
X509v3 Authority Key Identifier:
keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:0c:44:7e:ec:19:ce:6a:c7:d0:47:6c:c6:09:39:37:ca:00:
7a:df:f5:18:4c:98:97:01:33:fb:ef:88:94:0b:d4:0d:b8:9a:
71:3b:a0:97:34:9d:26:2f:61:ce:6d:6f:0d:83:af:27:f6:f9:
d6:03:95:ff:22:c8:56:eb:a2:f6:8a:2d:c2:b8:97:93:01:20:
5f:c9:92:a6:9e:5c:2b:4b:15:76:c4:af:57:a6:a9:2b:1c:3c:
08:bc:1c:9b:0e:a1:4c:5b:bb:37:df:bb:ad:8c:a0:42:49:3e:
61:8c:6b:24:fc:9e:5e:22:0f:b7:75:4a:6c:6b:e2:89:d2:4c:
9f:0d:12:1e:2d:ae:50:12:4f:d3:5d:d4:44:b3:09:7c:f6:fc:
85:18:aa:50:09:2e:45:01:f4:27:63:a8:fe:14:31:b2:95:88:
a5:65:d6:27:2a:b2:5b:45:29:e6:07:40:03:44:a8:61:cd:eb:
ed:f5:ca:bb:2a:cb:51:7d:75:5f:23:63:c8:83:15:c7:37:4c:
dc:13:8b:32:d6:e2:3b:20:88:58:52:26:56:13:86:84:e5:ae:
28:f6:e8:15:56:09:98:d9:1e:00:76:a6:93:f0:88:bf:a7:43:
9c:26:6d:aa:e6:b7:ab:7e:b3:cf:b3:02:40:dd:22:77:71:20:
2d:4b:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:19:27 2025 by rpki-client