Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
File: MY2rcPRKfrixz8E3Qz_NTXigOwU.mft (raw, json)
Hash identifier: 4lx0koAXzyjau580e1A74LMcmqHnWo4whd4kbKJjJBU=
Subject key identifier: 71:20:46:CD:70:78:2E:50:06:85:E0:34:F4:03:C1:E6:6C:2D:F6:AB
Authority key identifier: 31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
Certificate issuer: /CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Certificate serial: 0198D5BC1CDBDAFE7AF72C3E28ED50034981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
Manifest number: 0146
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: MY2rcPRKfrixz8E3Qz_NTXigOwU.crl (hash: V/GD/PJPgXgyJfhfookNrymxNNG6Ul+jTXxuoG4NRi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:1c:db:da:fe:7a:f7:2c:3e:28:ed:50:03:49:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=318dab70f44a7eb8b1cfc137433fcd4d78a03b05
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=712046cd70782e500685e034f403c1e66c2df6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:53:c1:ef:5c:c2:f9:23:9d:7c:fd:28:d1:
9d:1c:39:e1:76:f9:b9:d8:87:ca:f5:e1:e0:f0:16:
dd:83:6e:b9:55:23:93:a6:7c:a6:d8:74:cb:a0:2a:
7e:44:8d:70:4e:2b:04:d9:e4:83:7d:75:30:68:45:
45:bd:63:b1:18:ee:0b:a9:3e:9a:b3:7d:40:7a:76:
cf:a7:c8:34:41:12:83:d8:20:2b:62:08:b2:d2:cc:
f5:87:6e:d8:e0:67:61:d0:53:63:68:27:2e:c2:e0:
74:51:87:8a:11:db:61:d4:16:41:a9:e0:68:d9:6b:
06:42:51:e6:f4:32:85:62:00:bb:3f:78:9b:3b:9e:
d9:63:22:57:13:1c:f4:6e:1e:97:42:33:dc:d4:24:
5e:eb:60:83:42:0e:49:b6:69:25:46:8b:84:bc:bd:
05:f2:a9:2c:db:fa:dd:b5:12:2a:c5:fb:a9:de:05:
f8:14:90:82:be:36:a7:54:16:03:c9:bf:e1:fc:10:
5c:5a:57:9c:e8:ae:82:03:60:a2:f6:70:aa:cd:3d:
49:d9:ba:5d:c2:22:40:43:50:d3:a2:36:a2:1f:d2:
e2:41:37:fc:b5:a6:ba:60:c8:98:c5:b5:5a:d4:c9:
19:4c:80:13:f6:cd:6e:5c:e6:be:94:2f:6c:53:34:
8d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:20:46:CD:70:78:2E:50:06:85:E0:34:F4:03:C1:E6:6C:2D:F6:AB
X509v3 Authority Key Identifier:
keyid:31:8D:AB:70:F4:4A:7E:B8:B1:CF:C1:37:43:3F:CD:4D:78:A0:3B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MY2rcPRKfrixz8E3Qz_NTXigOwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/44f874-446c-4646-8db0-d99f66ef606c/1/MY2rcPRKfrixz8E3Qz_NTXigOwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:63:40:d5:99:c3:d1:4a:b7:77:61:bf:fb:a3:47:ba:41:bd:
33:b1:ec:26:82:c5:a2:48:c9:67:58:a4:55:78:6a:39:4a:0e:
0d:04:f4:dd:56:d4:15:14:09:1c:87:45:9c:d6:24:0b:8d:b6:
d9:f5:a1:c4:64:ea:c9:ae:44:a4:50:b7:e1:09:7f:bb:72:4e:
90:01:bf:c2:33:63:f8:07:45:72:f5:46:45:77:23:cf:95:c7:
60:1d:a7:a5:5a:50:f9:7c:a4:78:89:4b:e6:9f:4f:5b:96:93:
ac:2c:7a:8e:38:fe:a5:93:d7:31:b0:e7:ac:76:68:31:2e:cc:
1d:9d:03:7b:9c:15:3f:45:bd:ee:9f:b5:a4:81:75:37:d1:9b:
31:09:d5:98:c4:77:de:87:19:fa:38:8f:38:bc:23:ea:4c:5a:
8b:9a:15:7a:e8:dc:d2:2b:ca:d0:ec:0c:4a:00:41:3b:b3:06:
65:d3:d0:64:57:cc:cd:08:b3:85:44:54:a2:ee:8a:fd:b5:79:
2a:a1:7a:5d:1f:4a:0b:f4:3b:69:ab:56:a1:24:df:a1:7a:36:
bb:42:02:f5:2e:a4:7d:54:fc:ac:de:90:39:b8:65:35:17:4f:
00:96:87:0d:bf:5e:b4:66:af:89:28:13:f8:5c:68:ca:0a:f1:
a0:3b:77:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:17 2025 by rpki-client