Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
File: pZCvyl_rSsOMGnOFetdW9_M-Nos.mft (raw, json)
Hash identifier: xue7G3iSv63VXbP5yxiR9MRi31mUMDGdgvX/DMijJUs=
Subject key identifier: D3:99:12:7A:07:5C:A6:51:9D:F4:DF:58:54:89:AA:3C:C6:6E:5E:58
Authority key identifier: A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
Certificate issuer: /CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Certificate serial: 01988355F14594C4CE368F6F7ABB44A627FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
Manifest number: 07AD
Signing time: Thu 07 Aug 2025 07:01:44 +0000
Manifest this update: Thu 07 Aug 2025 07:01:44 +0000
Manifest next update: Fri 08 Aug 2025 07:01:44 +0000
Files and hashes: 1: pZCvyl_rSsOMGnOFetdW9_M-Nos.crl (hash: wNcjh05dmqsM1p8PSIy2GEIHT/jW9dnkIs92L3fxzao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:f1:45:94:c4:ce:36:8f:6f:7a:bb:44:a6:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a590afca5feb4ac38c1a73857ad756f7f33e368b
Validity
Not Before: Aug 7 07:01:44 2025 GMT
Not After : Aug 8 07:01:44 2025 GMT
Subject: CN=d399127a075ca6519df4df585489aa3cc66e5e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:9d:82:a2:9a:55:91:7b:06:7a:46:ed:9d:
5e:82:77:5d:a6:a8:a1:c4:05:4d:f0:7a:8e:17:fa:
27:93:c4:2a:51:0d:7a:b6:79:b8:01:55:4a:95:f6:
eb:f6:eb:c8:53:6a:0f:43:bd:0c:d4:4b:4e:cc:04:
f3:95:9f:d0:27:d6:97:1e:43:a0:8e:49:f0:2a:db:
13:6a:ba:e1:68:c8:cb:b3:9a:43:ff:37:07:c8:1b:
5e:c9:11:4c:6f:16:21:a3:0c:34:fe:04:67:44:bd:
c4:05:9a:48:ae:70:7e:68:a4:a5:20:eb:cd:c3:48:
9a:05:08:30:6e:1f:c3:1d:c0:31:c8:73:27:62:99:
b9:85:76:27:b4:2a:53:69:da:75:41:22:2f:49:48:
16:67:55:3c:ba:ee:a4:bc:79:90:c0:6d:e7:d1:67:
33:2b:65:7d:37:4f:68:32:ab:86:57:0b:c8:ec:9d:
3e:97:22:a4:b8:ad:e0:1f:c3:fb:7c:3d:85:ab:6e:
81:f4:8d:5a:b6:76:f8:7e:54:1e:50:c6:1b:d1:5b:
de:60:4b:f0:9d:f2:f2:56:54:4a:43:30:4b:ee:5d:
da:62:fb:39:85:6e:f6:30:cf:93:6b:de:f4:b9:74:
b2:c3:d4:da:44:2e:90:47:b2:ec:53:fa:b3:98:01:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:12:7A:07:5C:A6:51:9D:F4:DF:58:54:89:AA:3C:C6:6E:5E:58
X509v3 Authority Key Identifier:
keyid:A5:90:AF:CA:5F:EB:4A:C3:8C:1A:73:85:7A:D7:56:F7:F3:3E:36:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZCvyl_rSsOMGnOFetdW9_M-Nos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/672b25-6198-483e-a05f-8f063a5f6a86/1/pZCvyl_rSsOMGnOFetdW9_M-Nos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1a:96:a3:58:f0:b3:e9:90:d9:07:4c:68:21:cf:d7:f3:30:
e4:16:14:54:4b:4a:d5:fc:9f:2a:7a:c8:98:34:b4:f9:f0:6b:
a5:bd:ae:8c:e0:d2:ad:96:8e:ed:d6:05:21:9d:bb:20:75:85:
ae:2d:94:8a:66:9b:35:5a:4e:2a:db:4b:b3:4e:8e:23:10:7d:
2e:c4:17:40:a6:9a:4a:d2:92:a3:d6:b0:a4:f1:70:7e:93:09:
5e:b0:80:6d:08:ec:e5:e0:37:84:27:b0:1a:b8:4c:71:23:76:
1f:58:78:70:79:20:5d:a2:d6:d9:98:f5:10:75:91:f0:26:dd:
7c:cd:d0:52:07:0f:6d:4e:d9:0d:c0:0f:13:5a:83:09:56:e1:
53:69:3c:97:11:bd:9e:4b:f0:75:77:2a:cf:3f:03:52:61:8a:
ac:51:7a:1b:c5:3b:95:43:68:0c:3e:f5:b5:d5:28:b1:8e:fc:
af:ff:95:9a:cc:1f:ea:73:bc:d0:9c:1e:db:00:a1:81:e5:14:
92:68:51:3d:f1:e2:61:23:5a:78:0d:8a:c7:aa:eb:c8:25:86:
b6:fe:7b:2f:90:5d:fe:44:8f:ee:97:37:98:95:b1:8c:63:89:
b9:65:3b:0d:68:b0:2e:01:41:0e:a2:ed:f7:1c:ce:98:87:7d:
77:2e:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:27 2025 by rpki-client