Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File: 4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier: B0f0lnnVqeQ5YHvZPaub7HoAZ2jWCEkSe4IRknugQU4=
Subject key identifier: AD:93:9D:5C:B5:52:A1:C9:95:D2:42:D9:B3:55:BB:B7:1D:C0:FA:7E
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer: /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial: 0198D5BBBAFFCC00D36B56B0D7575FCA65E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number: 060D
Signing time: Sat 23 Aug 2025 07:01:46 +0000
Manifest this update: Sat 23 Aug 2025 07:01:46 +0000
Manifest next update: Sun 24 Aug 2025 07:01:46 +0000
Files and hashes: 1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: c9PN+S4PLiyq1KPCnq7SI/w7c1cJPISzEv69oK42WcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ba:ff:cc:00:d3:6b:56:b0:d7:57:5f:ca:65:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Validity
Not Before: Aug 23 07:01:46 2025 GMT
Not After : Aug 24 07:01:46 2025 GMT
Subject: CN=ad939d5cb552a1c995d242d9b355bbb71dc0fa7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c4:32:13:b3:51:bf:53:36:85:c8:07:9e:bb:
1a:aa:3b:d5:7d:71:b9:bc:25:94:a9:b6:85:24:0c:
b3:83:9a:62:a2:21:9e:1a:58:f5:ba:07:d0:88:7a:
da:98:65:d5:a1:06:56:a4:98:79:ee:06:6d:ee:d6:
dd:82:cb:d8:e8:b9:d9:8f:86:5a:c3:d4:da:b9:04:
30:e5:06:eb:c8:06:a1:6a:27:61:d6:00:ff:d4:02:
88:49:e5:09:44:4d:fd:5e:52:f2:19:58:1f:0f:5e:
a6:fd:13:66:f9:f7:41:8b:15:40:97:9c:e2:a3:e7:
49:51:2c:67:0f:69:7d:77:ff:18:88:24:19:32:7d:
37:e2:19:37:49:17:68:18:e3:ae:35:14:c5:73:02:
45:bc:0c:d4:8b:bc:53:5c:43:de:1d:29:37:b4:33:
7e:8d:da:cf:1b:db:7f:47:04:d2:ae:8f:be:50:49:
58:ec:ae:76:ff:37:2c:9f:e3:07:ff:8a:28:1e:12:
84:e3:7c:e8:fd:6e:7b:5d:4e:74:f9:d9:8a:65:dd:
6d:fc:25:5b:6d:85:c4:a4:91:95:c3:21:cf:01:68:
5b:c4:74:76:56:1b:45:08:b3:fc:b1:b4:bb:71:c8:
76:b5:a2:13:73:07:97:4d:35:25:e9:88:b4:e0:fc:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:93:9D:5C:B5:52:A1:C9:95:D2:42:D9:B3:55:BB:B7:1D:C0:FA:7E
X509v3 Authority Key Identifier:
keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:86:41:84:6e:4b:90:02:29:e7:47:25:73:02:da:b0:65:02:
78:15:bc:a6:32:1e:97:38:5d:12:b2:9b:c7:8c:83:a3:d0:13:
02:25:b9:38:ae:9d:82:c2:5e:ac:52:5d:29:b5:f0:73:6a:42:
b7:e8:60:81:73:b0:0b:a9:67:1f:35:df:ac:8c:35:30:c9:d0:
6d:42:0c:b9:17:84:7b:7d:13:9e:85:51:78:4b:7c:cd:92:75:
65:47:22:1b:36:f3:b4:e5:ed:3f:58:a4:2e:d4:25:16:fd:62:
aa:7a:21:8e:1b:7f:32:ae:08:90:70:77:cf:77:b4:81:d1:90:
d5:1b:17:aa:bb:f0:8f:d7:f2:f4:db:88:31:8d:9c:5a:5b:8b:
15:93:7b:9e:88:03:e2:e6:9d:6f:5b:42:d8:cc:ec:5d:98:87:
1a:f4:b7:98:3e:c5:c8:98:13:73:21:7a:93:d1:39:01:5f:8b:
c4:e1:8a:58:a5:80:b1:9f:9e:5f:fe:02:d0:bd:8f:af:d3:58:
57:17:30:a6:34:87:c8:79:61:e8:82:b6:cd:46:c9:76:5c:b5:
1e:2d:28:8a:b6:25:04:ac:8f:08:21:9d:f6:82:80:5d:3d:55:
b3:c3:27:b0:9a:22:56:e8:dc:08:fb:d4:60:fb:e3:95:39:27:
50:15:c3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:00 2025 by rpki-client