Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File: pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier: vjIjwrAr/lNX+BRneEntZDPuDldCCMydhrR7L2e87aQ=
Subject key identifier: 95:B5:E8:56:27:AF:DC:53:DF:00:93:60:7D:69:ED:51:A8:8B:A4:60
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer: /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial: 0199FBEAA65EADF3047DBE6CD8FD1B5E68D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number: 0F86
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: g0jqkN/Arksfp/FJsgGuuSuX/KfYwVMTxRD8P6QTlbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a6:5e:ad:f3:04:7d:be:6c:d8:fd:1b:5e:68:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=95b5e85627afdc53df0093607d69ed51a88ba460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:14:82:52:0d:52:4b:64:c6:43:67:d5:20:
c1:d2:67:d1:31:e3:02:ed:6e:fa:93:1c:7a:0d:27:
8e:67:ac:94:3c:b4:b9:f7:7d:b1:42:51:3c:52:0c:
17:ad:44:c6:ec:86:ac:d9:1c:a6:6a:94:f9:96:88:
58:e9:1a:2f:f5:19:ae:d1:a9:12:3d:18:1f:3c:a2:
5d:6d:66:4e:8c:4b:44:0a:00:d4:bb:66:e5:ca:33:
54:90:0e:4e:b6:a3:f9:a4:b5:82:01:bf:54:8c:1d:
a1:d5:b0:1b:89:91:db:fa:69:0c:f2:51:ae:54:70:
62:f2:39:4a:6c:8e:06:3f:0b:b0:d0:ab:50:a7:06:
88:0d:f6:ed:0c:24:ae:7a:0b:41:fe:8d:48:15:f3:
25:b7:b5:d3:60:ed:83:26:d0:11:55:3c:b6:d5:f4:
56:b0:d7:3e:f7:a9:a0:37:c0:f8:0f:ba:00:f9:f3:
93:64:14:4b:35:08:38:93:cd:61:9f:33:5a:c2:a0:
65:54:4f:b3:ba:ba:13:e0:46:70:26:c7:32:a8:98:
5a:c9:40:03:7c:c0:2f:b7:f6:48:b9:b0:eb:04:76:
c2:2d:26:64:2c:12:6a:8b:a2:8a:3d:e7:8c:c4:d8:
3d:13:0b:ff:89:a4:45:e7:77:c2:40:e8:ab:d6:ad:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B5:E8:56:27:AF:DC:53:DF:00:93:60:7D:69:ED:51:A8:8B:A4:60
X509v3 Authority Key Identifier:
keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:dd:ad:e0:d5:61:31:50:44:be:20:6d:27:6c:10:4b:8e:
92:39:cd:32:41:69:9a:fd:9f:b9:7b:19:88:d0:4c:e3:83:f3:
a0:6d:48:b8:15:35:0c:0b:65:f2:1f:17:53:af:f7:04:4e:58:
0f:38:76:27:6b:86:a1:5b:7f:7f:0e:ec:77:32:9e:5a:f5:c6:
9c:61:3c:02:f8:2b:61:6e:7b:0e:27:a2:97:df:38:f0:f0:ba:
f9:7d:ae:1c:73:e3:38:f7:e1:71:cd:58:87:b0:ff:99:07:b5:
bc:ee:b2:dd:37:19:a1:a9:1d:02:ab:d0:9f:8a:39:5c:89:01:
b7:f1:fd:2c:2e:63:21:48:6e:f7:be:90:71:bf:8d:e3:6d:9e:
5b:16:7d:c7:ce:db:f1:a5:d0:61:9a:09:39:79:b1:26:f5:da:
21:40:90:1f:74:aa:84:16:7a:7d:46:e5:da:fc:75:46:93:f9:
d3:5e:be:b5:23:c9:e1:c3:a9:8e:0b:dc:e0:97:96:8d:49:98:
7c:f0:4f:6f:c2:84:aa:15:e8:cb:30:cc:a2:93:0e:bf:4a:ac:
4d:25:ac:8c:0d:11:15:cf:e5:43:34:f2:0b:cc:5b:b4:ec:4d:
b2:36:d1:81:0c:20:e1:ea:43:86:ec:c9:37:b1:f4:4f:eb:9a:
2a:5d:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client