Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: PAL0gxMWnprQZOapdAPmCKIDTei69DKlOhmy8h8TTKg=
Subject key identifier: 9F:94:DF:12:B7:BC:F1:18:EB:51:B4:2F:EA:42:9A:93:9A:98:89:53
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 0198D661430E494402D5BB2251ADBD6E61A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 078C
Signing time: Sat 23 Aug 2025 10:02:35 +0000
Manifest this update: Sat 23 Aug 2025 10:02:35 +0000
Manifest next update: Sun 24 Aug 2025 10:02:35 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: QtIcDcyRufXZHtXl7Gx+e2NGiyHZQ0ABUJp1z9wCcBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:43:0e:49:44:02:d5:bb:22:51:ad:bd:6e:61:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: Aug 23 10:02:35 2025 GMT
Not After : Aug 24 10:02:35 2025 GMT
Subject: CN=9f94df12b7bcf118eb51b42fea429a939a988953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:87:25:d7:57:ca:b0:d4:91:d3:6f:e3:7f:
27:44:7c:4e:7f:bc:2d:7a:61:97:48:30:45:48:29:
41:b7:15:f4:0c:6c:d9:81:0a:62:74:aa:98:d3:ae:
fc:84:25:6c:67:88:bc:4a:2e:47:d4:54:ad:27:9b:
af:72:9a:32:25:45:1d:05:cd:a3:35:82:b1:5b:9c:
0e:67:4c:f8:f6:6c:de:8e:d0:2a:8c:ca:a4:93:61:
27:32:84:d1:77:87:7f:ac:6b:af:c5:f3:01:a0:8e:
72:15:11:a9:45:64:9d:d3:8c:4b:78:22:21:ac:2a:
b7:70:c9:00:d8:f5:ff:c4:c7:70:2c:15:c8:12:5c:
7d:79:8c:b1:64:c9:cf:c9:88:2e:88:0e:3f:8f:54:
c1:b9:2a:7e:b5:fb:94:e3:9a:26:00:98:0f:c7:a3:
9a:c7:74:b3:1b:8c:b3:99:9f:52:20:77:a8:9e:1e:
23:44:5c:9e:d8:e5:fd:92:68:85:d9:5b:6d:95:c9:
a6:56:58:9a:11:89:3c:42:b1:cc:df:91:b7:8e:66:
27:93:2a:a8:43:e3:6b:75:5a:c0:1a:13:e5:01:eb:
98:18:f6:f1:ea:1d:09:b6:a7:0b:a2:3e:09:15:07:
a2:e7:af:b8:b9:ca:3b:eb:19:b3:d3:64:a1:83:dc:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:94:DF:12:B7:BC:F1:18:EB:51:B4:2F:EA:42:9A:93:9A:98:89:53
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e7:4d:a1:d1:83:03:87:f3:6f:35:96:f1:1d:fa:7c:bf:07:
4e:d2:8f:d2:97:7c:68:02:8f:82:70:8a:29:41:b3:33:c2:8a:
03:86:f4:55:f0:aa:15:90:45:2d:8b:71:7d:e3:a2:b1:75:d5:
94:4c:b2:e1:b0:19:99:87:18:22:11:50:dd:48:a8:81:06:bc:
74:12:1e:d0:2a:d8:b2:a2:5b:df:94:a6:f9:1b:e9:a3:f8:a5:
27:52:38:a6:79:94:97:8b:bd:02:59:fd:95:72:8a:cf:84:a2:
eb:38:b8:f1:ae:1d:b2:cc:2b:a4:6b:11:ee:fa:4e:5d:b5:04:
0f:86:38:79:23:8b:50:d5:f2:08:22:2d:71:3f:01:05:7f:34:
54:ae:82:b8:7e:78:f8:e8:bc:6f:0f:85:5f:35:80:35:8e:f8:
9d:af:10:fa:22:90:f0:6a:f1:91:b4:e5:41:ee:86:c1:d5:a7:
85:86:17:05:3a:89:68:b8:50:8f:22:b2:35:7d:7e:52:c8:39:
d0:1b:1f:26:ba:fe:fb:d0:a2:78:91:51:ef:b5:dd:d1:53:58:
da:2f:3a:44:39:e6:7d:fa:f7:3e:f0:2e:27:c7:d2:99:16:18:
b3:7c:7b:e8:7d:72:fc:db:1d:94:20:28:b1:32:0c:fa:fa:7e:
a1:26:2b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:37 2025 by rpki-client