Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: iyyFSmlLmPsQ0UHndfJRCLhtKvJiL7XvkwC2GVv3yJc=
Subject key identifier: C4:30:0F:56:62:87:A3:2E:B2:B5:CC:0E:0A:0A:35:6B:10:1C:C5:7B
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 01977A544F643BDB677123D97D09FD9084D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 0425
Signing time: Mon 16 Jun 2025 20:00:35 +0000
Manifest this update: Mon 16 Jun 2025 20:00:35 +0000
Manifest next update: Tue 17 Jun 2025 20:00:35 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: wDTeULKN4Jih1caLqSmKTcsOaK7IreGC0RxqOFbdM+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:54:4f:64:3b:db:67:71:23:d9:7d:09:fd:90:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Jun 16 20:00:35 2025 GMT
Not After : Jun 17 20:00:35 2025 GMT
Subject: CN=c4300f566287a32eb2b5cc0e0a0a356b101cc57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0e:33:bd:2a:30:83:fd:c2:df:9b:7b:ca:6f:
f4:c9:d1:c2:21:06:4f:53:2a:72:bc:b1:24:1b:da:
c0:2e:c5:91:1c:7d:d7:d4:cc:4c:94:c6:fb:e5:09:
42:9d:7b:f5:d4:2d:c6:07:05:3b:a3:57:2c:37:7f:
b7:d2:71:b9:3b:2a:42:a1:e8:02:33:57:9b:9d:37:
3f:8c:ef:cc:b6:2d:b1:8e:2c:5c:c6:26:11:9c:be:
1d:00:17:7f:4d:06:ae:19:09:9a:e8:53:b1:d1:ed:
79:7b:40:b7:8d:08:b4:2e:7c:14:95:c9:38:8d:7a:
91:00:5a:d1:41:c3:69:cd:0e:fa:78:90:40:85:39:
b0:7a:bc:77:85:38:4b:67:11:2a:73:d5:2c:32:2c:
6f:8d:8f:b5:e0:2f:ad:09:91:ab:77:13:13:74:28:
0e:90:52:ab:07:f0:20:4d:e8:f1:4b:33:f5:7e:21:
d5:52:d3:f9:e5:f0:10:00:1b:96:6c:b7:80:ad:34:
b7:d3:2b:95:1d:f2:c4:37:8e:be:56:36:33:de:3a:
c4:cd:fe:04:29:89:73:bb:f0:4e:9e:d3:7a:0a:8b:
fe:71:3a:94:ce:17:10:3d:bd:28:fb:6b:f1:ff:2d:
4f:7b:fd:14:a1:2a:ab:70:77:83:72:41:1d:c9:c6:
25:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:0F:56:62:87:A3:2E:B2:B5:CC:0E:0A:0A:35:6B:10:1C:C5:7B
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:46:7a:8a:5a:42:df:c7:e2:97:56:9d:3c:c9:78:2b:7f:
dc:6c:9f:4f:42:d8:27:ff:42:b3:09:49:6b:85:49:1e:99:43:
5c:aa:89:24:61:bc:79:f0:81:b9:e1:b9:e0:8e:b4:49:54:cf:
3c:66:23:56:f1:7e:6e:38:b3:19:55:f8:54:e7:a6:f1:fa:98:
35:77:7f:68:3e:75:4f:f0:73:51:e6:23:21:14:df:1f:ac:a5:
0e:1b:14:c7:87:d3:64:12:48:6a:90:c4:ee:55:3d:3f:5b:e8:
aa:24:03:e6:35:c5:54:e3:2d:49:d9:48:bd:a1:8b:04:71:cb:
07:62:36:c5:1b:88:74:2b:76:13:30:a2:3f:ca:01:72:81:14:
13:9f:eb:d8:bb:de:4c:f7:4e:de:d0:e8:3f:18:6f:89:da:a8:
7f:54:41:fa:d1:08:09:22:35:e6:3a:33:f3:72:f0:cf:20:53:
8a:0a:ae:3c:73:87:34:9c:66:bd:f3:33:d5:cf:f7:f8:e2:92:
3e:45:ac:32:92:a5:86:f5:f5:af:7b:56:6c:12:7d:cf:1e:34:
0a:3c:46:da:c1:b6:1f:bb:7d:13:e3:4a:47:66:ef:58:ed:e8:
68:d2:83:2d:56:6f:90:96:d3:d7:46:14:ec:dc:6f:bc:44:c4:
e7:4b:ef:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 07:22:14 2025 by rpki-client