Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File: PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier: PU3M8BBUNstEXEDVTilyD38hJxGMa2uxWOml6lj61Ec=
Subject key identifier: E9:87:B9:7E:1F:DE:A0:14:11:20:75:4F:B1:AB:0C:FC:D6:92:E6:AD
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer: /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial: 0198D5BC36A82EBEF229887F42F9A03A3B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: 9/LUnHFA+ssFu8GrEy+4t9sMRgfnt5WTjs2IfVYW0IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:36:a8:2e:be:f2:29:88:7f:42:f9:a0:3a:3b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=e987b97e1fdea0141120754fb1ab0cfcd692e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:22:c5:09:4c:c2:15:88:e6:82:48:2c:82:
8a:84:26:d2:e8:7b:41:9d:0d:15:56:e7:27:40:88:
93:69:0f:6b:27:8d:8a:1d:1b:70:a4:0f:1a:39:fb:
2d:7d:d4:47:68:c2:0f:fd:8f:47:15:0c:da:1b:8a:
ac:2d:79:b6:c0:26:90:fb:17:a4:cd:73:90:05:86:
14:f1:ec:8f:c3:8c:97:7e:6d:c0:8b:16:e6:fb:80:
41:94:3e:73:38:81:ab:85:83:71:e9:1f:a2:9d:b8:
b9:08:25:d7:ed:61:7d:72:2f:96:e5:b1:d7:23:e0:
1e:0b:cb:7a:f9:51:de:73:05:c5:d2:3d:76:41:bf:
b7:7b:df:d0:36:f9:40:37:53:b7:bf:26:cb:08:72:
96:a2:90:a5:82:02:51:cd:36:d1:c1:bd:58:18:fa:
b2:67:d0:a6:71:3f:53:cf:10:71:13:e4:1f:17:1e:
fe:c0:c9:ac:b2:e4:8a:7b:30:bc:e5:af:80:b1:69:
82:79:bd:da:98:27:af:30:ed:ec:2e:0f:7d:e8:6f:
c8:2a:d2:8a:10:8e:89:a9:43:57:3f:93:ac:26:ac:
af:1b:1b:eb:53:b4:fe:79:68:a5:ef:42:cd:93:41:
ba:d4:5a:fa:58:24:4d:53:f9:71:97:9b:c7:8c:4d:
ea:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:87:B9:7E:1F:DE:A0:14:11:20:75:4F:B1:AB:0C:FC:D6:92:E6:AD
X509v3 Authority Key Identifier:
keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9a:52:e1:99:f0:c5:e2:53:67:dc:5e:07:24:4c:81:e6:17:
47:77:69:84:94:84:40:2c:eb:cd:c9:71:08:1e:98:9d:bc:2b:
57:4b:28:b8:1d:b8:c2:2a:a6:80:ad:2b:05:0d:58:2c:0d:59:
4b:db:2c:e8:85:52:cb:c2:3d:b8:3b:d6:c5:d9:31:43:de:ef:
0e:d5:d2:bc:c7:97:a6:9e:71:c1:ba:c8:b2:14:9a:ef:28:ef:
c7:dc:a8:d5:c7:39:ad:90:2b:9a:c0:25:02:02:a0:c9:38:70:
47:3b:90:63:58:46:83:10:f8:10:d3:90:93:c4:3f:f3:e4:f9:
40:89:9b:da:66:64:24:62:d0:21:7d:cb:16:9e:bc:df:d3:ea:
35:8d:16:7d:fe:cd:14:f5:9e:c4:9f:70:8e:b4:2e:6d:29:e3:
1a:27:9f:dd:0d:28:08:12:17:6f:18:fc:f5:d5:33:9f:5e:6b:
3d:92:b3:7f:9a:48:31:a6:81:d8:12:11:56:f9:f6:4f:e6:48:
9a:81:ec:f9:3b:2e:c6:c8:f2:3c:99:25:9d:2b:37:7f:30:25:
6a:96:5a:ac:0d:9a:a5:1d:96:6d:0b:09:e3:ae:4f:50:53:26:
40:b2:be:82:17:6e:ad:02:93:33:a4:09:7c:d1:3d:78:5f:4c:
fc:a4:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:56 2025 by rpki-client