Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: eOcEbOcA6di7lMpLUwhGieyENHcOpP2h/p3Kj6OKuj0=
Subject key identifier: 72:EA:74:F8:12:57:00:29:0D:7E:80:DE:E4:94:AF:D0:0D:ED:C8:F4
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 019873E3483F000BDBE3D4B7ACF429ACBF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:02:11 +0000
Manifest this update: Mon 04 Aug 2025 07:02:11 +0000
Manifest next update: Tue 05 Aug 2025 07:02:11 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: 0dEgRhmMPNIpvq3Gg1hlxO2U2otUi1EDWtnjHIeUlXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:48:3f:00:0b:db:e3:d4:b7:ac:f4:29:ac:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Aug 4 07:02:11 2025 GMT
Not After : Aug 5 07:02:11 2025 GMT
Subject: CN=72ea74f8125700290d7e80dee494afd00dedc8f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:37:15:db:1d:bf:28:19:ee:c3:be:bb:07:
db:aa:e9:d5:90:7e:14:84:f2:40:36:a5:0f:39:be:
88:db:98:25:6d:a4:e5:d3:93:c4:8c:0f:73:5d:1a:
49:c9:80:d2:88:c5:14:d3:a1:71:f5:4c:11:f9:55:
73:73:82:0a:e7:0e:ee:e8:b1:3e:1b:07:94:1a:8a:
aa:d7:a7:8f:f2:68:62:18:3f:cc:71:4b:88:e8:2f:
b1:38:e3:0a:90:6f:0b:43:02:bb:07:6e:bd:23:54:
69:66:89:81:36:ac:79:77:d1:e3:7f:9b:98:40:53:
6f:d9:d5:c6:66:ff:3c:e0:19:b3:c6:37:11:da:66:
9f:21:c3:61:36:97:ea:dd:9c:37:9b:ee:db:fe:32:
a3:a0:6d:42:e2:54:4c:3c:cc:4f:75:13:81:96:9c:
8d:9f:74:22:c9:fc:3b:0a:87:97:37:1c:63:23:3e:
00:fd:ad:22:0a:06:55:8b:83:8e:80:f2:70:25:4d:
51:ec:37:26:03:71:e5:6a:21:55:4c:17:2e:59:be:
90:f4:18:23:57:40:8f:e5:9d:2e:ec:7f:d3:59:ad:
7a:b9:17:ff:2f:d3:0f:aa:41:70:37:44:a0:d5:80:
c1:28:1d:da:a3:4c:df:6a:22:1a:77:c2:24:87:27:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:EA:74:F8:12:57:00:29:0D:7E:80:DE:E4:94:AF:D0:0D:ED:C8:F4
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:45:e1:64:e1:f3:81:83:58:7a:52:23:ec:da:cb:5b:d7:a8:
95:10:47:b6:e1:07:83:ed:d2:70:d4:58:3e:8c:2c:09:30:4a:
cb:cb:b0:a6:f2:b1:32:7c:e8:10:06:27:bf:8f:87:11:b2:18:
d9:23:89:28:36:2d:0d:96:10:d5:07:81:b6:b3:c5:df:2c:e3:
ab:cc:f3:f3:f2:13:ea:2e:ee:a7:3b:c3:61:53:1a:8a:e9:b0:
1a:72:54:78:ff:e6:97:a7:2c:f1:ce:30:79:ba:15:ee:5b:19:
21:05:57:68:f8:e4:a5:78:e5:63:cc:9a:4a:56:64:9f:9c:da:
f9:8e:87:f0:17:a8:e3:a7:4f:61:20:89:3c:17:6a:34:4c:bf:
b1:3b:29:b9:31:a7:2e:3d:72:bf:5e:23:8f:0a:25:3e:49:7f:
e9:01:7f:c5:19:2a:7c:f3:0f:43:ad:b4:7f:96:ee:02:7c:68:
16:fe:de:1e:6f:f8:61:9a:84:64:9b:dd:24:10:69:9d:3a:ef:
ac:d4:9f:f8:91:0f:0d:40:1f:49:17:0b:36:c7:78:80:8f:1a:
69:d8:0e:75:c5:8b:3b:6a:37:25:aa:4d:03:7a:ff:f2:53:df:
3e:98:7c:b7:b4:cd:ff:db:c7:5c:58:e1:7c:d3:88:c2:c4:be:
74:9f:c1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:24 2025 by rpki-client