Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: oE4H35x251bnCT3p0NZaIZlj5MwiXeixLS64Gjb1o2w=
Subject key identifier: A8:4C:49:DE:B3:90:97:15:1C:34:05:F8:08:8B:B9:76:CA:E5:B7:30
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 019A01B5FE50692D46F77A4B3926BD659658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 1288
Signing time: Mon 20 Oct 2025 13:01:35 +0000
Manifest this update: Mon 20 Oct 2025 13:01:35 +0000
Manifest next update: Tue 21 Oct 2025 13:01:35 +0000
Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: t/A7vYmRaGfEGaJwHQijKzQR0nv8GUFI/HkDLkcy8Qw=)
2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:fe:50:69:2d:46:f7:7a:4b:39:26:bd:65:96:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Oct 20 13:01:35 2025 GMT
Not After : Oct 21 13:01:35 2025 GMT
Subject: CN=a84c49deb39097151c3405f8088bb976cae5b730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:1a:c6:45:52:83:47:d3:8f:ea:80:99:fc:
10:17:a3:82:2f:2c:39:20:ec:0d:b1:c2:c0:ac:bf:
58:8c:9b:d5:c6:e5:c0:72:4a:da:20:8e:6f:a0:bf:
bd:55:d4:99:b7:1e:09:85:46:73:ba:5b:95:8c:56:
83:c2:82:34:b9:69:ce:0e:d6:6f:10:7e:44:68:41:
b4:39:5a:54:ca:46:40:3d:93:f2:00:ec:1a:15:f2:
21:37:d9:8f:84:ff:7f:80:8d:23:09:16:1f:97:6c:
31:c1:4c:30:3d:02:c5:87:1d:09:b1:e1:c5:85:2a:
b9:59:9a:df:2f:6e:87:40:df:37:e0:c5:9c:0f:22:
b1:cb:d4:aa:f6:91:07:75:f6:91:d3:f9:04:f1:83:
8c:e8:94:44:ee:76:b0:ac:cc:f3:1d:6d:cc:41:89:
43:ca:2e:79:4f:c4:05:52:e6:97:ee:ed:62:d0:cf:
25:6e:7b:c4:90:66:9e:28:49:5b:54:3c:d0:57:46:
29:2f:85:6b:1c:0d:bf:c5:e8:18:bf:96:e2:b2:61:
27:f9:ca:86:f0:dd:95:f2:f1:d9:e6:fb:a6:37:1e:
42:f2:0b:01:e6:21:48:26:3b:e2:7e:df:da:f8:2d:
d9:32:4a:dc:7e:f1:fb:ec:06:2a:81:3b:70:2a:dc:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4C:49:DE:B3:90:97:15:1C:34:05:F8:08:8B:B9:76:CA:E5:B7:30
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:62:fa:5d:e3:75:6b:f3:e4:65:e3:79:7f:60:7a:7b:eb:00:
d5:6c:29:dd:68:8c:2e:e2:59:ac:cd:82:8d:00:1d:19:bd:cc:
aa:6c:e7:b2:0d:68:ef:4a:81:5c:d0:46:07:23:83:a3:09:46:
52:db:83:0d:96:14:d5:59:7a:e6:d2:cc:58:e9:ea:7c:e1:ed:
b5:ed:5a:1b:ee:24:7d:99:99:31:3c:74:13:23:6d:23:60:aa:
f5:05:0a:7a:d9:c5:57:b2:a3:2a:a5:69:59:67:7d:bf:6f:e8:
49:9d:53:12:bb:3e:11:de:d2:25:07:77:d2:c8:8f:20:a5:ab:
4b:6e:81:37:7a:e5:2c:94:9b:c9:45:b5:a7:31:24:87:65:52:
b4:27:6d:fe:2a:4b:8b:b6:d0:f2:7f:a4:55:45:c8:8e:a0:6c:
b4:05:11:e7:86:2c:d9:c5:a3:07:a0:93:7a:0e:65:16:41:a8:
bc:83:6b:3a:a7:6d:30:2e:86:c8:99:1c:ff:20:5c:46:37:41:
d0:3c:6c:43:92:cd:94:60:e1:5b:74:e9:f7:cc:74:e7:07:b5:
3b:c4:a0:96:3d:87:ec:c7:fa:81:70:ef:9e:95:98:28:65:f5:
f7:8c:a9:a9:b0:18:ed:73:f1:d1:b2:69:4a:e6:5d:c4:3e:82:
00:ba:d2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:40 2025 by rpki-client