Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File: PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier: ZQ29EQI9Iok7dahaEwfKEAIrFalgbWW04Nj/7E5cCrA=
Subject key identifier: 12:84:95:3D:5A:54:9A:BE:BC:A8:2B:55:7B:45:26:90:DF:75:E6:D8
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer: /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial: 0198D73B31B19EE132F29CBAD2C096C4C898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number: 01CF
Signing time: Sat 23 Aug 2025 14:00:37 +0000
Manifest this update: Sat 23 Aug 2025 14:00:37 +0000
Manifest next update: Sun 24 Aug 2025 14:00:37 +0000
Files and hashes: 1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: u18Vi8gbfFU2foG1HMBIjBtrLG3O0DXdAIFRwLVUgmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:31:b1:9e:e1:32:f2:9c:ba:d2:c0:96:c4:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Validity
Not Before: Aug 23 14:00:37 2025 GMT
Not After : Aug 24 14:00:37 2025 GMT
Subject: CN=1284953d5a549abebca82b557b452690df75e6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:2b:4b:a9:32:76:93:b3:80:76:ec:8e:87:
13:3b:b8:6a:ab:46:09:2e:17:8f:a9:c0:d0:80:3c:
e2:a4:f8:99:f8:81:6f:df:14:d8:9d:b3:f5:7e:cb:
5e:47:e9:f7:24:11:84:63:1a:34:f4:87:43:f4:72:
e9:21:d6:86:b1:6e:e6:7b:76:2a:53:6b:18:86:bd:
ed:1d:d5:45:fc:0e:1d:66:08:2e:97:0b:25:13:8d:
af:2f:ea:63:5b:5c:a2:28:79:43:b6:fc:18:fe:fc:
ca:86:c9:a5:86:b1:a8:0b:91:11:cc:b1:2b:49:d6:
1a:6d:e2:98:59:d8:0b:54:aa:17:5b:de:b1:89:bf:
f0:90:78:b1:8c:b5:d4:c1:bc:ea:64:05:d6:81:3a:
d8:f9:d5:5e:17:ed:8c:b9:90:f3:3c:d1:b6:5d:08:
ee:f4:ba:f8:96:d6:db:e3:68:ac:3a:fb:11:27:c1:
28:be:38:84:3a:7d:8c:49:08:f0:30:99:25:c2:fd:
18:f1:a3:8a:2b:c6:f8:2b:33:eb:12:e3:31:06:c2:
9f:9d:4e:0b:9e:3e:c2:6e:2c:61:b2:bc:0c:99:94:
23:d1:e8:0f:f0:18:db:eb:29:55:18:a5:72:c5:78:
a6:53:ba:a1:60:ef:4e:90:a3:db:f9:6e:60:70:60:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:84:95:3D:5A:54:9A:BE:BC:A8:2B:55:7B:45:26:90:DF:75:E6:D8
X509v3 Authority Key Identifier:
keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3c:46:4f:64:29:52:01:bb:e7:6c:6e:2f:1f:2c:c3:1e:25:
ae:c2:66:e6:0f:75:d9:9a:93:e8:82:5c:1e:12:d9:9c:2f:d5:
57:1f:e2:e3:15:cb:ed:68:2d:b2:a0:7a:88:22:f9:fc:55:2f:
2d:9c:2f:b3:d8:d4:0a:26:5e:f8:71:51:01:69:0a:1a:e3:5b:
9e:6a:5f:77:4f:17:e7:bd:89:d8:f6:26:8d:af:ee:e5:82:00:
c5:13:87:a9:ab:68:fd:3a:7d:fb:42:de:79:b5:41:a6:e3:8e:
30:fc:19:b1:a2:25:13:2e:0d:de:e7:65:79:af:4f:be:b5:fa:
b2:b2:03:37:e9:ea:42:0d:8d:15:a8:d9:e7:82:e9:cc:c6:13:
10:94:02:5b:63:82:c8:59:0d:7b:49:9b:c9:c8:44:76:30:a4:
0a:2e:bf:d0:38:94:4a:55:87:6e:88:a5:e7:d0:7e:0e:3e:19:
0d:d4:5c:e5:15:07:66:4a:c7:49:4b:ea:68:b5:6b:2d:89:64:
a7:90:e8:bd:d8:16:b3:74:04:37:7b:b4:8e:29:ce:c9:79:e9:
d3:96:28:7f:da:e9:d6:a8:ed:2d:a1:e4:a8:ba:82:6e:5d:e9:
06:4a:23:6b:0f:db:03:43:59:90:3c:c1:af:78:c1:fc:7b:2c:
40:09:5b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:11:55 2025 by rpki-client