Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: ha7LDcA7h8+EoEshfJO1Jh5rXr49hdXwiRCwKGknpOk=
Subject key identifier: B8:72:D4:F4:25:97:93:46:DB:5D:A6:F6:32:51:3E:E2:08:F7:9E:A2
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 0198752B9D9CF8A4CC5894C75C81B94CC5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 1550
Signing time: Mon 04 Aug 2025 13:00:49 +0000
Manifest this update: Mon 04 Aug 2025 13:00:49 +0000
Manifest next update: Tue 05 Aug 2025 13:00:49 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: LEwsMxmCQXpcYyu2RMOPu8zuiUsyhNaRHsSO9lDNrg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:9d:9c:f8:a4:cc:58:94:c7:5c:81:b9:4c:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Aug 4 13:00:49 2025 GMT
Not After : Aug 5 13:00:49 2025 GMT
Subject: CN=b872d4f425979346db5da6f632513ee208f79ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7f:98:01:7d:27:03:e9:e5:6a:18:c1:5c:f4:
b4:41:fe:44:3b:54:78:79:22:2e:8f:b9:a1:96:10:
49:b4:9a:5b:dd:3e:88:47:fd:df:b2:19:2e:05:09:
53:06:6e:20:6b:9c:1a:34:f7:0d:b5:01:dd:92:d4:
d3:36:c1:68:bd:97:e0:56:bf:0e:aa:3d:36:c1:e8:
65:1e:23:b2:2f:2b:df:78:c8:1d:13:98:e2:c7:41:
f9:8a:cd:61:1c:08:37:62:6b:23:2b:14:ac:62:40:
0b:d0:25:fc:9d:a6:1b:20:89:18:f3:41:7f:b9:9c:
8a:f9:51:de:a1:81:21:17:f3:11:9d:1a:d7:3f:41:
73:d6:76:4e:d5:e3:b2:0e:1c:b1:a4:e0:98:c9:52:
74:9d:a9:91:f6:72:ea:d1:f1:89:bb:2c:21:a8:14:
7f:b9:58:29:b7:58:5a:dd:79:a7:9d:a2:5f:62:a5:
94:80:62:65:5b:65:a6:08:0e:cc:a8:0f:8c:f0:42:
97:52:c0:a3:09:96:9b:11:21:be:0b:5d:79:70:e3:
8b:8a:a3:f2:81:f8:ac:b1:6f:c8:4a:92:07:cd:6c:
db:8c:64:45:f6:33:67:97:2d:83:df:56:47:29:42:
8a:dc:b8:81:a3:90:32:3a:2a:14:5f:ee:62:82:76:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:D4:F4:25:97:93:46:DB:5D:A6:F6:32:51:3E:E2:08:F7:9E:A2
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2b:c0:29:94:5e:3a:ae:5e:2b:e7:7a:8e:6c:6f:fc:7e:99:
a4:c8:c9:f2:4d:4d:e2:79:ea:da:90:4e:c8:2c:5f:48:48:85:
a9:0f:55:4f:c3:6f:3e:0c:4c:95:1d:51:5d:c2:3a:a3:64:f9:
92:36:98:a7:63:d5:52:f4:60:5b:82:39:6a:c3:56:5a:15:ce:
8b:7e:a8:f3:90:fb:d7:e4:f4:19:b1:71:5a:89:14:0e:14:bd:
24:6d:c1:51:65:d4:7b:9e:14:0b:89:0f:d4:6d:b8:72:86:73:
59:6c:06:ad:ef:a1:c8:5a:40:9a:b8:0b:36:37:d0:e3:ea:28:
2b:4f:40:a2:74:27:6a:13:5f:4a:b4:52:11:13:e3:2f:4c:b9:
85:91:7d:2b:f8:b1:b3:a6:11:1e:33:de:84:d5:5b:31:f9:4d:
64:af:a4:e1:1a:8f:53:c0:97:15:38:a8:54:76:c6:ed:f1:b0:
1c:46:22:9d:f5:5e:da:3e:10:0b:a1:48:9c:98:9f:35:91:26:
33:7b:f5:27:83:39:b2:6d:73:6f:44:1a:e2:ea:4b:35:4b:06:
24:b8:67:87:6e:91:ba:95:6f:5e:0d:92:83:13:91:3e:e5:31:
8f:41:10:ae:6c:45:a1:1f:32:c7:94:b7:6d:5b:7f:d1:36:e2:
c0:23:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:16 2025 by rpki-client