Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
File: p6YlNTs6w-H5XJYlGRWNsSINCo4.mft (raw, json)
Hash identifier: cUgUVOVkRKXV37iWAn2FfX2Un0zrIBF+wGei7s89Hic=
Subject key identifier: 5B:20:B7:9D:77:CA:52:6C:C9:E1:A5:F9:27:24:06:43:8A:93:8B:4D
Authority key identifier: A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
Certificate issuer: /CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Certificate serial: 01988B103874B0F478A8AC67E60585709019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
Manifest number: 0A8A
Signing time: Fri 08 Aug 2025 19:02:32 +0000
Manifest this update: Fri 08 Aug 2025 19:02:32 +0000
Manifest next update: Sat 09 Aug 2025 19:02:32 +0000
Files and hashes: 1: p6YlNTs6w-H5XJYlGRWNsSINCo4.crl (hash: eTrUBoQCrrvd6FaZgo98yazs9XyvTSUb3w2oemkqcFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:10:38:74:b0:f4:78:a8:ac:67:e6:05:85:70:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a625353b3ac3e1f95c962519158db1220d0a8e
Validity
Not Before: Aug 8 19:02:32 2025 GMT
Not After : Aug 9 19:02:32 2025 GMT
Subject: CN=5b20b79d77ca526cc9e1a5f9272406438a938b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:7e:0f:a1:81:1e:e6:b2:36:a0:4b:c4:ed:
34:1f:41:3e:dc:3a:93:2f:bb:83:72:06:28:cf:7c:
51:f5:0d:e9:fe:85:9e:7a:1a:06:5b:0f:57:ec:05:
f1:eb:1c:0c:81:50:f3:cf:37:60:0c:24:87:25:e1:
57:44:93:de:f4:17:03:73:48:2e:3d:1a:a0:6e:42:
dd:32:4c:1c:81:86:73:e4:83:21:29:f5:98:f4:03:
ee:c1:84:1b:b9:0d:b3:16:6c:c8:c8:e8:1c:ff:89:
97:21:c1:01:c5:a3:61:72:09:a1:ad:9e:c9:4e:5f:
80:95:14:79:2d:54:da:aa:be:a5:16:d9:b1:f2:6d:
d5:47:0a:86:a0:a8:54:be:43:9d:a7:2d:be:6e:e0:
fa:3f:a2:d7:e5:4e:a9:1f:8e:ef:67:48:c8:e8:3a:
6f:f2:55:f3:57:2e:ab:18:34:15:95:98:3b:b3:3b:
c6:a2:1e:b6:28:b2:d4:a7:ca:02:0b:19:04:45:e3:
f7:74:c1:98:b4:7b:3b:ec:9c:66:dc:31:70:7d:cf:
39:b8:f7:6f:4d:45:bd:c7:af:b7:f7:48:87:ae:33:
be:cf:7c:a4:b6:3c:5a:99:27:b0:f1:a4:d2:e4:ee:
40:d3:08:7a:fd:06:a6:61:38:da:91:43:79:e7:08:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:B7:9D:77:CA:52:6C:C9:E1:A5:F9:27:24:06:43:8A:93:8B:4D
X509v3 Authority Key Identifier:
keyid:A7:A6:25:35:3B:3A:C3:E1:F9:5C:96:25:19:15:8D:B1:22:0D:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6YlNTs6w-H5XJYlGRWNsSINCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/711ea0-248b-4c6a-87dc-21f0e841d84a/1/p6YlNTs6w-H5XJYlGRWNsSINCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fb:bd:e3:5d:2e:7c:fb:ae:a2:59:09:2b:c2:aa:18:15:db:
42:6d:04:40:26:0b:93:97:a2:87:e9:f8:fa:d3:d8:db:20:70:
4f:ec:e5:8a:42:ec:8f:8f:4b:4a:d7:2d:72:7f:cd:f6:3b:1d:
b4:31:8a:7b:0b:d7:9b:8b:63:52:19:98:36:55:f9:0b:ea:9a:
ae:07:0b:5b:0b:e0:db:4f:e8:61:de:4c:c5:e4:44:02:61:36:
b6:48:67:08:33:7e:4e:9c:b8:64:2a:ef:b7:71:b9:0e:eb:80:
9e:ab:d9:96:a8:e2:08:d5:9c:6d:0b:49:f0:9d:d2:48:ae:29:
ef:4f:92:16:9e:c5:e1:6c:23:97:11:4a:8c:9d:f0:29:ce:ca:
b1:67:82:c2:bd:f5:3c:b7:e7:03:3f:61:cb:ea:6d:59:08:e1:
4a:77:b5:5b:c1:1b:e7:f1:0c:d8:f3:7c:e6:80:7f:65:cb:d2:
c9:b7:12:26:23:55:66:b6:66:df:d7:b3:04:c5:ee:2f:c0:d8:
8e:d8:43:7f:64:dc:65:45:bc:b6:fc:63:97:3e:ae:8b:0e:7e:
b1:33:50:ec:d1:41:da:be:42:e5:53:6a:29:20:26:ed:bc:06:
09:2f:d2:f0:e6:4e:0b:fd:7d:30:73:ce:8b:ea:7d:1f:59:dc:
17:f9:6f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:10 2025 by rpki-client