Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
File: pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft (raw, json)
Hash identifier: yLknrNNfi6wTpNLccWKB1kqBuDaPfSkK+6p3OGkIXmo=
Subject key identifier: BA:16:00:C5:EC:B2:D4:76:FE:4A:15:DA:D2:0E:B4:14:FF:FC:BC:7B
Authority key identifier: A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
Certificate issuer: /CN=a5c22864e3920e160ad9b84ff01da866aa409785
Certificate serial: 0197B96AA5135477EDCAEF59A4492532D371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
Manifest number: 048A
Signing time: Sun 29 Jun 2025 02:01:03 +0000
Manifest this update: Sun 29 Jun 2025 02:01:03 +0000
Manifest next update: Mon 30 Jun 2025 02:01:03 +0000
Files and hashes: 1: pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl (hash: 3iYKQC2Uh+gEAyhvNhs1Y6nQEtRKaMaGJhpoq41h3C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:a5:13:54:77:ed:ca:ef:59:a4:49:25:32:d3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c22864e3920e160ad9b84ff01da866aa409785
Validity
Not Before: Jun 29 02:01:03 2025 GMT
Not After : Jun 30 02:01:03 2025 GMT
Subject: CN=ba1600c5ecb2d476fe4a15dad20eb414fffcbc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:d0:3e:8f:24:a2:89:49:75:35:66:a5:63:
11:da:ec:05:c7:a4:c4:dd:b4:fb:d4:49:25:e3:1b:
09:2b:54:c0:b0:f8:43:e8:6e:d5:79:cd:39:f7:56:
7d:45:04:a2:4f:f5:eb:c2:e4:de:b2:8b:0b:6c:34:
e0:f4:c2:14:cf:05:c4:f9:3e:6e:3c:6e:43:2c:70:
12:e1:e5:2e:03:a0:a1:7d:c3:3e:aa:20:2a:32:ab:
b7:90:49:51:2d:5a:8b:ce:c8:36:33:c6:a5:9e:91:
da:2a:b9:54:f0:d5:a7:31:fb:59:ae:1a:72:77:b2:
20:e4:34:23:58:92:4a:cb:6a:e3:61:6b:e0:70:2b:
7b:3d:da:16:bd:64:25:a5:06:20:18:e2:33:42:77:
d9:99:0f:da:9f:60:b0:51:a4:9f:9e:20:32:f6:b0:
8e:7d:44:99:f0:ee:0e:53:9c:e9:be:ca:b5:dc:6f:
cd:e1:85:1b:78:b1:bf:a2:32:ed:00:45:e5:f3:f2:
b3:2a:ff:bf:e6:be:eb:fe:ae:cc:6c:13:33:09:77:
71:11:7d:91:9c:3a:35:c0:5a:9f:b4:25:38:98:1d:
a1:fa:2c:22:89:88:ad:d1:14:99:47:c0:05:d9:94:
2f:56:34:d7:6e:83:2e:4f:bd:1d:66:e4:a9:bb:df:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:16:00:C5:EC:B2:D4:76:FE:4A:15:DA:D2:0E:B4:14:FF:FC:BC:7B
X509v3 Authority Key Identifier:
keyid:A5:C2:28:64:E3:92:0E:16:0A:D9:B8:4F:F0:1D:A8:66:AA:40:97:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcIoZOOSDhYK2bhP8B2oZqpAl4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ad984a-99ac-413a-bdde-54c8890dff2d/1/pcIoZOOSDhYK2bhP8B2oZqpAl4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:33:db:34:06:dd:4b:7f:58:98:db:48:a0:6b:aa:18:6f:fc:
f8:2b:e2:fc:92:fe:86:3b:f2:27:33:08:28:86:e7:b6:8e:44:
1a:c0:23:84:1e:f1:77:9c:8f:59:2a:48:fe:70:b7:49:e7:9f:
b2:5b:03:c1:61:56:e9:39:fa:4e:2b:ac:33:26:f8:c9:c1:5a:
aa:e4:99:bd:48:ef:a1:f5:6e:84:a4:78:bc:c8:ea:3e:2b:a2:
05:04:57:de:6e:a3:f2:fa:b5:b7:2b:ac:e3:6f:9e:0a:90:ad:
90:97:83:e1:c9:f3:43:97:2f:bc:e5:9a:5d:91:4e:57:55:19:
c0:0f:f4:48:d4:ac:97:d5:bd:f4:9b:e6:5b:2b:ad:0b:9b:d2:
f3:38:bd:9c:2b:73:1b:ca:c2:64:4e:55:66:ee:1d:dd:2d:08:
d9:48:2d:04:db:ea:8d:60:c1:39:3b:be:41:ad:14:24:d2:8f:
04:f0:4a:73:b0:67:09:84:54:58:2f:78:4c:f5:df:fd:69:71:
7a:e3:9b:a4:9b:f3:79:9f:db:5e:58:06:ec:05:8c:67:23:1b:
91:2e:0a:f7:fe:5d:33:6f:64:ff:a7:05:bf:14:e4:5f:d3:ae:
3c:39:b1:2a:ab:9a:be:bb:7f:50:13:44:82:c5:b9:9a:f7:9a:
71:fc:ab:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:21 2025 by rpki-client