Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
File: pUR4T8L1atrefbdiM9E27pt768c.mft (raw, json)
Hash identifier: 91bNrnGarPFXTNyVIo13QgvetClMP+rdvjk/EXgTxCM=
Subject key identifier: 38:8F:0C:5B:7A:1A:01:4B:10:FC:81:5D:48:92:7E:C1:F5:7A:5D:B6
Authority key identifier: A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
Certificate issuer: /CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Certificate serial: 0198D5BBD6167803F31E1873022EDD56381B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
Manifest number: 05EE
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: pUR4T8L1atrefbdiM9E27pt768c.crl (hash: FRP8gVNw9Z25X2giO/nsNfZHG7JnPkvKCNcye0RYvZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d6:16:78:03:f3:1e:18:73:02:2e:dd:56:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a544784fc2f56adade7db76233d136ee9b7bebc7
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=388f0c5b7a1a014b10fc815d48927ec1f57a5db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:58:d7:3e:2b:25:53:97:a1:5b:97:e4:a9:
16:ec:55:8a:02:2f:d8:ce:27:e3:74:b2:aa:a2:51:
85:76:4d:9c:2d:b2:35:43:89:4b:fe:37:d8:87:26:
5d:8e:cc:84:0c:9f:0d:a5:08:54:83:a8:d0:5b:df:
c5:38:f2:71:d8:90:b6:7c:6e:20:b1:1d:1e:36:f3:
fc:d9:6e:e6:5f:81:1a:ee:e6:1f:86:9a:40:ec:d2:
e1:61:e2:64:92:81:54:d8:44:ca:38:4c:84:8a:26:
97:02:0a:cd:cc:2b:6f:3b:3b:47:f0:30:8e:5d:0b:
96:51:eb:72:e2:93:a9:06:4a:b4:8c:2a:50:ff:52:
b3:2d:63:35:71:85:14:23:20:16:60:4a:49:1b:73:
5c:c1:a9:3e:65:1b:cd:62:8b:3b:b2:63:e5:1f:30:
2d:09:91:6d:3c:33:33:3b:34:77:15:38:75:fc:db:
2d:b0:80:9d:75:24:7f:44:3a:f9:e5:4b:b2:e3:de:
12:18:4b:8d:5e:b4:81:a5:5b:94:19:1f:b1:44:aa:
af:1d:73:da:39:e9:c1:e3:8b:7f:73:f9:d2:0f:b7:
04:17:19:23:18:ab:c3:3a:f7:26:84:f1:92:f3:73:
24:e4:ed:94:9a:9e:d3:aa:e6:bd:32:29:6d:50:d4:
ea:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8F:0C:5B:7A:1A:01:4B:10:FC:81:5D:48:92:7E:C1:F5:7A:5D:B6
X509v3 Authority Key Identifier:
keyid:A5:44:78:4F:C2:F5:6A:DA:DE:7D:B7:62:33:D1:36:EE:9B:7B:EB:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUR4T8L1atrefbdiM9E27pt768c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/48f799-4443-49f8-9242-8cbeefc92f9a/1/pUR4T8L1atrefbdiM9E27pt768c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:e2:00:d9:15:e9:7b:70:30:de:de:55:10:2d:82:93:3e:
8c:da:6f:f2:2d:f8:05:bc:27:ef:13:39:5e:38:25:49:1f:4f:
6d:fb:6d:10:c8:4b:96:90:de:39:e4:11:a3:c0:0a:71:69:0a:
0c:1e:ef:1f:14:cb:5f:af:7f:0f:d9:5a:b0:07:04:7b:52:15:
4c:a0:71:56:b3:19:26:09:b3:fc:2b:be:3f:91:8d:a2:8b:5c:
06:18:fc:1b:09:44:d2:d9:20:5c:56:66:e9:38:b3:2c:08:24:
f5:f9:6c:a3:bd:eb:28:a3:17:c6:1a:67:cf:c2:a9:15:92:b7:
ea:ab:1a:34:ba:c1:f8:1e:43:cc:ef:3e:57:da:1e:91:8a:1e:
19:81:47:76:32:41:87:22:fd:dd:73:d3:dd:6b:29:1b:fc:6b:
47:94:0d:35:94:8d:90:a7:80:e9:a6:3e:e9:3b:65:69:2a:5d:
7d:59:7a:97:7c:09:43:6d:ad:b6:b1:08:61:68:15:81:53:14:
2a:45:15:71:ac:68:a0:18:2d:d6:22:dc:7d:e2:1a:a7:a4:f6:
7b:7d:22:0c:f0:b9:bf:e0:7b:22:d6:42:25:bf:d3:65:c9:e3:
d0:ac:da:a9:7e:10:09:79:50:5a:a0:a1:24:6c:2f:ae:bd:00:
24:2b:93:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:49 2025 by rpki-client