Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: PtAQMK5XtntwTzIKtRUk+YcQZbWhdkdC8bZP0fxre/0=
Subject key identifier: 5D:BE:3E:53:2C:D2:4C:DB:F5:CE:F9:0B:8D:1D:A5:BB:DE:4A:D4:D4
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 0197B88F59BDE486272E34643C060CA29C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 0E5A
Signing time: Sat 28 Jun 2025 22:01:31 +0000
Manifest this update: Sat 28 Jun 2025 22:01:31 +0000
Manifest next update: Sun 29 Jun 2025 22:01:31 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: PI8kL81WE6TxP2AcqedLWzBBZicPqJBMirw5XC7Y/ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:59:bd:e4:86:27:2e:34:64:3c:06:0c:a2:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Jun 28 22:01:31 2025 GMT
Not After : Jun 29 22:01:31 2025 GMT
Subject: CN=5dbe3e532cd24cdbf5cef90b8d1da5bbde4ad4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e6:26:86:10:19:d0:ce:01:26:82:67:d5:b4:
c3:cd:7a:9a:fd:d3:4d:7e:9f:1c:f2:f5:cc:f0:fa:
a6:bf:53:96:b6:d5:98:cd:32:24:ce:92:1a:13:80:
45:e4:80:21:bc:3e:4b:5d:09:10:28:aa:28:f9:b5:
26:0e:1e:ed:23:9f:38:2e:8a:0e:89:ef:bc:4c:67:
24:bd:2e:99:af:b4:45:7f:de:17:61:35:ba:e2:78:
e8:7b:52:2a:57:82:b1:61:4e:cc:69:43:e6:fb:27:
c2:7e:fd:e9:5b:55:18:db:72:d4:f0:f8:e7:53:9a:
43:d2:ce:44:96:63:7e:5e:c0:64:75:c1:40:96:a6:
23:9a:97:09:37:a4:52:86:e5:97:d6:91:87:1b:62:
ad:87:0b:72:c6:f6:ea:03:f8:38:ad:12:ec:f7:37:
d1:92:3c:61:36:d6:fa:b2:95:4a:4d:18:4f:f8:f9:
76:1c:e9:27:11:30:fa:55:34:86:59:1c:fe:65:ca:
6a:4a:59:d2:ec:25:1e:27:d0:5f:47:3b:36:3a:74:
aa:10:03:c6:a7:8c:97:7a:26:af:f5:83:76:cd:93:
89:6a:b9:af:bf:c2:15:f8:10:b5:5d:6c:2f:b4:ca:
eb:4a:60:e5:25:b2:33:f9:e2:92:f6:7d:98:f4:21:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:3E:53:2C:D2:4C:DB:F5:CE:F9:0B:8D:1D:A5:BB:DE:4A:D4:D4
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cc:40:44:62:eb:8c:5a:cc:4c:71:61:15:7a:75:fe:a5:a1:
b8:e1:ac:e4:4f:24:ee:6a:a7:93:0d:ec:71:23:73:c6:56:a1:
4e:8d:53:36:78:20:2a:dd:fa:97:1b:f2:f9:50:1e:b7:53:16:
47:87:21:ae:bb:33:05:77:76:b2:4b:1d:18:aa:fa:1d:5c:f1:
ef:ba:81:16:a4:2b:77:db:50:f7:c9:a3:9f:0e:8e:f0:7f:96:
f2:0e:d9:36:9a:dc:c4:9e:47:ad:82:76:17:55:ee:44:c9:d1:
c1:b7:32:5d:e0:aa:7f:7a:ab:8c:d9:ae:ba:f2:33:4c:b7:6e:
9c:f2:d7:92:7c:ea:a8:c5:69:2a:71:06:8e:5f:94:9b:70:7a:
ee:6d:a6:f5:03:ed:e8:ea:10:fe:4c:89:25:0d:93:a8:07:f9:
23:83:8e:97:1f:fd:f3:f3:b1:ec:29:d0:e1:61:3e:e3:47:e2:
c3:c3:90:07:72:2b:a1:d2:4b:10:2a:16:b9:10:6a:f5:a4:39:
b8:55:f1:47:f0:63:ed:a7:51:61:c6:6b:97:02:b0:17:5c:e6:
20:9b:4a:54:99:00:68:75:c0:57:e7:91:61:ef:fe:02:c3:c6:
9a:30:dc:5d:f8:f6:ed:af:02:73:ed:ea:4f:63:96:84:46:8a:
8a:16:90:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:38 2025 by rpki-client