Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: ZzIBRdBsEXZcKbnr/WyHHRdTLAvA/H2n/Ff+VGQXJKE=
Subject key identifier: 88:3D:D9:E7:4C:8E:33:24:30:84:8C:07:5E:81:32:3F:A7:B4:DA:95
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 0198D5BB9FB49F8EADBE4A1054E3FC51318B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 1479
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: hivaHEOoOCz5FdoIbOKwaiNZ2OVT1ApckRrMO9pPJXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9f:b4:9f:8e:ad:be:4a:10:54:e3:fc:51:31:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=883dd9e74c8e332430848c075e81323fa7b4da95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:d7:4d:af:7f:87:f5:34:c6:25:72:fa:0d:
20:0a:da:94:ca:5e:63:73:83:ac:f4:fa:cf:00:da:
3c:01:d6:69:e8:96:e9:01:5c:18:57:66:d7:44:a5:
d6:d3:c2:d7:5a:b0:60:fe:4d:7d:ec:36:59:76:d0:
ac:3b:ae:07:0b:25:a2:7e:39:d4:7a:51:d9:43:fb:
fa:69:cb:4d:27:90:70:1a:0f:04:72:2f:69:85:59:
63:42:07:b8:ab:88:55:19:f6:14:49:af:cb:b1:d2:
6e:10:b8:c4:58:50:1f:ac:b6:cc:bd:75:3e:d5:fd:
24:92:be:b2:40:f4:4f:70:e4:c7:bf:d0:e4:5e:78:
02:cb:a8:c0:1c:7d:cd:c4:c7:6a:aa:70:4e:68:3b:
e9:69:d2:67:4c:eb:a0:d4:d5:02:da:10:29:14:8f:
3e:50:a5:30:69:e5:60:62:8b:5d:30:3f:09:b8:32:
8c:92:6c:23:f0:5d:23:c8:c9:e3:ad:7a:e3:a6:cd:
c8:a0:04:39:27:f6:e2:38:07:6d:ea:d0:d6:b7:0e:
59:a8:55:ea:36:18:92:81:aa:2e:f9:82:94:33:e5:
4d:39:fe:04:33:ba:28:dc:5d:46:a8:f2:4c:75:b7:
43:79:37:49:ed:c2:2d:5d:69:89:7a:66:fa:19:3f:
ce:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3D:D9:E7:4C:8E:33:24:30:84:8C:07:5E:81:32:3F:A7:B4:DA:95
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2d:01:bc:9a:80:49:60:41:52:3d:47:9b:a7:03:ce:d0:68:
1a:65:80:65:30:fd:7b:9c:55:50:f2:6f:ab:a0:9d:44:6e:db:
04:e3:83:d6:cb:5b:fa:0c:2d:9b:ff:1e:e6:cb:64:66:31:91:
ef:e8:3d:95:31:7a:17:cf:4f:3a:07:95:10:f3:01:59:b8:38:
c5:a9:6e:7b:42:d4:6b:05:d8:6c:70:2d:21:0e:8e:fa:27:d0:
46:ef:05:c2:2b:45:e2:10:a5:70:42:68:16:a0:07:d8:12:7c:
c6:36:3d:e6:e0:2c:46:df:71:3d:59:a8:93:1e:2c:1a:9f:b7:
8b:df:2f:50:1b:fa:46:f7:74:db:ea:ed:69:87:1d:36:d4:86:
79:4d:cf:e2:6e:61:0e:c9:7f:54:cb:b9:dd:a5:6d:a6:d1:e4:
b4:cf:2f:55:d4:c0:59:71:cc:11:83:3b:21:b3:14:12:27:41:
7b:ee:92:ef:ad:06:a2:c1:db:21:99:8f:58:0e:c6:47:86:47:
23:0b:5c:03:96:3b:34:00:5d:3c:69:6e:a3:7d:85:80:4d:2d:
aa:d2:86:8c:47:3a:96:56:8a:5f:12:a2:fa:ec:bc:80:07:bc:
4c:66:43:aa:67:ee:36:ce:52:71:3f:69:ef:cd:12:97:6d:5e:
5a:1f:54:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:49 2025 by rpki-client