Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: 8PI6NyBm92seKEGNCHFLtxAU7mJfEWmRfBRjpb5Oolg=
Subject key identifier: 6E:E3:A5:21:DE:9C:5F:B5:D5:23:EE:C4:39:AE:5F:E1:69:82:56:72
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 0198963760600E762B3BA6A243546BFE2508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 04B8
Signing time: Sun 10 Aug 2025 23:01:08 +0000
Manifest this update: Sun 10 Aug 2025 23:01:08 +0000
Manifest next update: Mon 11 Aug 2025 23:01:08 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: eZgYfs8lctUJzbz5EqTnyWxBccrAQm8IQJEJCenTnCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:60:60:0e:76:2b:3b:a6:a2:43:54:6b:fe:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Aug 10 23:01:08 2025 GMT
Not After : Aug 11 23:01:08 2025 GMT
Subject: CN=6ee3a521de9c5fb5d523eec439ae5fe169825672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1a:7c:69:f2:84:52:6d:c7:7d:4b:01:44:5c:
2b:27:2b:2d:c0:db:de:77:a8:a0:e8:11:d8:00:86:
c1:59:42:9d:cc:79:c2:7e:90:a0:65:c0:fb:53:a3:
75:25:9c:1a:66:ad:93:e1:e5:93:b1:45:c0:87:26:
19:61:f1:cf:0c:e1:55:a6:53:b3:c9:bc:63:d7:f0:
6b:e0:a5:f5:77:2b:73:e1:b3:23:3e:66:19:19:45:
ac:9f:73:f2:00:f6:40:7c:8b:ac:92:c1:c4:cc:7b:
05:50:58:4b:04:0a:f9:b3:35:30:55:d6:db:29:87:
40:28:f0:9c:0e:15:d6:72:46:0e:7b:0a:7f:b3:d4:
c2:df:a8:76:3e:22:2a:24:b4:52:d4:c9:b6:3a:4f:
db:69:d2:cf:94:8f:1f:0d:e6:dd:72:9b:d7:23:8e:
46:c1:70:ac:68:5c:29:7b:7f:f3:6c:d4:1b:1d:dd:
0e:f6:5f:6b:4e:a9:d6:6e:a1:ef:99:f9:fb:56:56:
96:f0:dc:da:f7:44:29:a0:b5:3d:10:7e:f5:22:29:
c8:43:08:2f:c7:1a:5e:be:e3:de:14:3a:7b:06:1d:
1f:b8:f0:b6:39:a4:4a:46:a2:90:8f:52:0f:1b:05:
bc:ae:f1:24:50:78:f8:f6:67:3d:7a:28:ff:09:aa:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E3:A5:21:DE:9C:5F:B5:D5:23:EE:C4:39:AE:5F:E1:69:82:56:72
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c5:ad:d4:d1:5b:eb:2c:c3:14:dd:22:36:b8:79:76:c8:0d:
e0:52:9e:7f:60:8c:fd:c0:09:d6:d7:7c:09:ba:83:c3:2d:8b:
53:f5:1a:7c:36:a3:a5:d6:db:4d:31:3e:83:b1:41:47:36:b2:
60:42:83:88:8d:4e:10:1f:8c:7a:eb:9c:9a:0d:15:02:e5:1a:
ea:07:3e:a2:9a:38:81:a9:9d:22:2a:d7:f6:a5:9f:d3:4b:09:
d6:87:aa:3e:2c:0c:3b:57:15:59:ef:97:80:ea:79:86:c0:8c:
14:6b:1b:58:f0:53:80:3b:f9:7b:c2:d0:11:ed:12:b0:5c:ea:
93:4c:a0:03:07:98:70:4a:c0:ad:f1:17:a8:29:c8:5c:58:bc:
84:d5:e2:ca:49:37:1a:a2:c9:83:dd:99:cb:25:69:83:8e:59:
44:91:ef:63:c0:86:d4:70:84:67:ce:88:b2:e6:ed:2a:f1:e4:
da:46:4a:46:83:d6:0b:52:04:7d:73:2d:85:30:4a:d5:60:99:
50:4a:a2:eb:6a:19:0a:01:b3:fd:e8:67:45:8d:20:20:9f:b0:
e1:4d:97:d6:3e:9c:39:0a:34:3a:46:4d:4e:4d:11:40:4b:8f:
1a:c0:39:65:5c:df:f1:10:76:d2:c2:a3:8c:c2:52:5f:99:8d:
53:02:e4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:25 2025 by rpki-client