Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File: pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier: He35QuelTMaCdiyz/+j7i9QwkHE6oc5eHTk77VS+aQc=
Subject key identifier: 66:D0:05:D0:82:84:BC:D3:C7:0F:FE:12:E3:07:D0:ED:2E:16:13:81
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer: /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial: 0197CBDF45C5AC4AAA9D73D3CB385A455279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number: 08D8
Signing time: Wed 02 Jul 2025 16:01:36 +0000
Manifest this update: Wed 02 Jul 2025 16:01:36 +0000
Manifest next update: Thu 03 Jul 2025 16:01:36 +0000
Files and hashes: 1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: m/LtOYewxXcKreDVJxMxWxSxlJYCfk6DrwwImPZyKEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:45:c5:ac:4a:aa:9d:73:d3:cb:38:5a:45:52:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
Validity
Not Before: Jul 2 16:01:36 2025 GMT
Not After : Jul 3 16:01:36 2025 GMT
Subject: CN=66d005d08284bcd3c70ffe12e307d0ed2e161381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:4b:bc:de:12:3c:71:bd:7f:5b:cf:a5:25:
c2:47:57:fa:55:86:20:3e:38:0d:c7:63:a2:bc:86:
e3:25:98:8c:1f:49:28:76:48:1e:d0:f4:51:ee:6c:
af:e9:62:f1:55:2f:8d:59:bc:4a:b8:33:c7:56:1e:
ca:c4:dc:12:e9:d7:8e:e1:37:2d:98:79:c3:77:5b:
09:3d:45:46:6a:c3:43:4b:ac:bc:b0:c2:2c:83:10:
c2:70:bd:2b:23:cc:51:43:67:66:22:f6:4d:af:c7:
ab:b7:cd:15:3d:d7:56:8b:ba:b1:51:22:b3:68:e7:
68:51:d7:05:77:72:97:8e:21:f0:df:e2:f0:61:95:
85:44:43:56:53:35:90:e1:3e:4f:b3:9c:d2:fb:b1:
b0:5d:e3:bb:0d:db:a9:88:d1:a0:b1:59:f6:3d:a4:
be:eb:a3:92:5c:5d:2e:9d:38:6c:85:45:4c:68:4e:
e1:0b:18:77:1d:7c:ed:21:65:6c:82:92:2b:be:7e:
1c:61:96:cc:82:90:72:f1:f1:5f:de:3b:05:5e:90:
c8:04:06:8f:eb:98:b0:4c:eb:ca:7e:7c:b5:48:ee:
4e:08:9e:4b:4f:15:6e:3b:9f:71:af:9e:b8:d5:b6:
0a:9c:d1:2b:59:b4:bb:65:a9:11:98:aa:ec:84:d2:
9a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D0:05:D0:82:84:BC:D3:C7:0F:FE:12:E3:07:D0:ED:2E:16:13:81
X509v3 Authority Key Identifier:
keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d6:a1:86:7f:24:6e:78:96:70:3b:e5:62:32:b0:3d:f6:09:
2f:b5:cb:5c:d4:eb:a2:d8:48:92:34:3b:2a:ec:9c:ec:9f:32:
20:06:d7:61:54:cb:67:ce:2e:9a:d0:ac:b0:21:a8:29:a3:b7:
bd:0f:52:7f:c4:bf:eb:9a:b4:68:f5:6c:fd:2d:39:ae:d9:5e:
fc:fc:fd:aa:af:b7:70:e5:e3:1d:4c:df:5d:42:b7:5d:5d:b0:
4a:62:00:fb:d2:c0:be:a6:5e:75:13:d7:58:bb:24:66:9c:a8:
e5:e1:27:c6:a7:28:91:ea:2a:9f:95:5e:da:39:41:06:7a:ef:
6c:37:df:d5:1d:99:c3:b8:6c:00:df:25:1f:0d:cc:d7:f8:c3:
55:a4:85:29:3f:9c:94:03:ba:76:5e:a1:b3:1b:1d:d5:91:4f:
c8:0f:4c:30:fc:77:ba:5d:42:31:70:37:08:c2:93:55:4d:e6:
c8:e1:0f:2f:3b:8e:78:9a:6d:98:14:da:9c:65:ae:6a:94:eb:
1f:ec:ee:3d:02:a2:fa:5c:44:c2:4d:58:20:9b:ca:92:22:6b:
42:35:5f:26:3a:19:72:3b:07:81:99:54:1f:38:7f:8d:f0:ba:
c1:25:86:55:9e:35:27:4d:6b:54:87:25:25:27:6f:e0:d3:2e:
fd:6f:a7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:56:00 2025 by rpki-client