Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
File: pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft (raw, json)
Hash identifier: 4/8eSYYTCGxjLEPIqPFZx0JHFIY7b5d4jMY2X0i2RNQ=
Subject key identifier: DD:84:A8:A0:38:98:75:EB:F7:8E:28:83:DD:44:37:7F:AD:4B:B9:EB
Authority key identifier: A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
Certificate issuer: /CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Certificate serial: 0197B7EAD81DC9920A089012E4E1E12CB3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
Manifest number: 13E5
Signing time: Sat 28 Jun 2025 19:01:50 +0000
Manifest this update: Sat 28 Jun 2025 19:01:50 +0000
Manifest next update: Sun 29 Jun 2025 19:01:50 +0000
Files and hashes: 1: pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl (hash: g2Bfr6J8aSUCeUHVEzFiaw4PV6x6q8MyH991WVuWhro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:d8:1d:c9:92:0a:08:90:12:e4:e1:e1:2c:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a8e2472ce6c16ed5af56a6bbf3df80ff63e123
Validity
Not Before: Jun 28 19:01:50 2025 GMT
Not After : Jun 29 19:01:50 2025 GMT
Subject: CN=dd84a8a0389875ebf78e2883dd44377fad4bb9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:00:ad:ff:a4:2a:86:d0:eb:19:7a:7a:04:11:
0f:1c:b7:38:b1:5b:23:01:88:c4:0b:d5:e9:5e:9d:
5b:eb:5c:6b:8b:f7:5e:01:5b:77:63:d5:39:d2:29:
91:e9:58:f3:a5:ad:0e:00:34:23:11:55:e0:da:be:
a3:95:37:74:ff:f4:80:a7:b3:a4:d5:48:09:14:a0:
96:4d:2d:83:52:10:fb:c1:3e:78:08:39:85:62:78:
ec:57:06:fa:82:02:62:9f:25:b0:63:21:d5:1e:ee:
e0:0e:93:e4:85:fc:a1:a8:da:61:ca:6c:b4:7f:06:
98:3c:df:de:fc:db:7f:e5:70:99:6d:dd:e4:2e:f5:
71:eb:5a:38:cf:bf:f8:41:33:b8:67:1a:30:31:99:
d2:72:d3:b8:27:8e:7a:99:45:09:b5:36:14:50:89:
9e:ba:39:bf:41:24:cc:3a:68:47:45:78:4f:3c:2e:
b9:62:da:53:3c:5e:a8:0c:06:61:ed:19:5c:28:e3:
cd:32:fd:91:e4:6c:7c:12:87:f4:17:f0:63:2c:d5:
09:32:16:91:28:33:e8:10:76:ed:70:57:0f:8b:64:
85:d3:f7:cf:5c:f5:4f:c2:e1:ac:af:a1:21:16:8c:
84:2a:9f:a1:b7:da:84:2d:1c:d8:49:e1:95:fc:fa:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:A8:A0:38:98:75:EB:F7:8E:28:83:DD:44:37:7F:AD:4B:B9:EB
X509v3 Authority Key Identifier:
keyid:A4:A8:E2:47:2C:E6:C1:6E:D5:AF:56:A6:BB:F3:DF:80:FF:63:E1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKjiRyzmwW7Vr1amu_PfgP9j4SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a01ea8-e88f-4207-b286-c4f9f75dc2f3/1/pKjiRyzmwW7Vr1amu_PfgP9j4SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cf:ab:4d:ed:43:1f:97:db:42:2f:e8:2f:6d:fc:28:aa:34:
71:4b:e7:51:8c:7e:2b:2e:3f:7b:41:d0:94:24:30:c1:2d:05:
bc:0f:f0:b8:e2:2e:29:d8:6e:74:33:b0:c4:48:8b:3d:7e:47:
79:76:c3:b3:75:b8:43:60:6c:b3:52:4d:3a:22:cf:78:82:d3:
ec:a1:74:90:39:85:6e:68:14:60:bd:2e:84:2b:9c:48:07:66:
68:31:0c:d8:23:3d:08:84:fd:61:b1:7a:ce:19:90:5d:ac:32:
08:10:83:88:3c:83:8e:e9:44:d0:48:aa:e2:a4:6c:f3:40:5c:
3d:5d:d2:90:1f:43:22:b9:c2:a8:f9:27:74:33:29:24:2d:9d:
af:79:df:14:54:26:63:7c:0e:10:8b:e5:61:b5:dd:78:56:b1:
35:8d:3e:6d:d2:80:8f:5f:de:03:fe:ce:31:9f:fa:93:e6:d2:
77:ad:9f:be:46:61:7c:7e:fd:38:4a:f5:0f:ea:3e:26:1e:e9:
70:99:b3:b7:a8:4b:8e:c7:fc:0d:23:82:16:18:af:1d:52:49:
0a:1e:2e:8a:83:1f:da:b6:e1:73:de:86:3a:f7:c9:41:df:e1:
aa:88:8c:3b:4e:cf:bf:88:6f:a5:51:68:01:39:57:c8:e2:16:
e2:47:a2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:29:46 2025 by rpki-client