Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json)
Hash identifier: X56iJ8wLuquA/i1opU3EhGl35mkWa1qp1FeDEdo4fno=
Subject key identifier: 95:13:0C:51:87:FD:05:1A:D5:43:20:C7:BA:F9:97:34:79:01:DD:47
Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a
Certificate serial: 0198D6CD6ABD1A6B40764567A23F4C167C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
Manifest number: 0681
Signing time: Sat 23 Aug 2025 12:00:43 +0000
Manifest this update: Sat 23 Aug 2025 12:00:43 +0000
Manifest next update: Sun 24 Aug 2025 12:00:43 +0000
Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: 2ftZqicer+pfeV+7CA1Hwi4f11ytXH7ttrsy6+DTFdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:6a:bd:1a:6b:40:76:45:67:a2:3f:4c:16:7c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a
Validity
Not Before: Aug 23 12:00:43 2025 GMT
Not After : Aug 24 12:00:43 2025 GMT
Subject: CN=95130c5187fd051ad54320c7baf997347901dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:06:2b:42:09:19:30:58:d5:10:b2:26:4e:
01:97:72:68:4a:ac:28:f3:fb:3d:a7:db:5e:02:1e:
6a:d2:36:a4:c5:53:f7:cb:63:e0:d4:f6:59:af:f9:
a4:1b:ed:55:ee:59:e8:fa:bc:d7:bd:79:85:e0:0e:
21:7d:6b:d0:1e:be:43:6a:eb:59:61:aa:6b:73:56:
12:ec:13:a8:9e:69:99:f2:08:57:75:bb:99:e9:8f:
60:f6:a4:3f:10:b4:13:ea:13:53:01:36:af:46:c8:
2a:a5:fe:8d:c4:62:5d:a3:63:99:9e:00:f9:56:e9:
8c:43:ba:5f:ff:b2:9d:b9:03:39:9c:05:e4:35:af:
64:b7:3b:60:49:13:8f:12:f8:bd:e8:76:48:89:e0:
a5:fa:cb:48:6c:51:cb:b8:d1:41:32:5a:f7:4b:d7:
ce:ba:1c:2e:aa:61:52:89:2e:47:db:52:27:85:02:
6e:a4:97:c6:dd:6a:f6:15:9c:ff:c5:a2:8d:23:0c:
66:f2:4a:bf:83:ba:42:f9:d2:c2:ea:4d:71:b1:f4:
fe:fe:23:b9:16:43:4c:16:98:9c:33:bf:f6:c0:16:
65:de:21:4a:e2:5e:cd:0d:b6:9b:5c:bf:2e:a1:01:
fc:86:81:ff:a6:ab:dd:92:09:ed:28:2a:61:5b:38:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:0C:51:87:FD:05:1A:D5:43:20:C7:BA:F9:97:34:79:01:DD:47
X509v3 Authority Key Identifier:
keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8f:05:19:31:28:e8:72:b6:8e:17:d5:1c:b3:1c:a2:94:27:
e5:30:71:b4:92:ae:de:7a:24:0b:36:03:97:06:81:70:4b:b0:
d3:b3:14:05:be:d7:62:73:07:9d:a6:c1:85:2e:47:19:bb:34:
53:fd:08:de:8d:82:57:17:30:f2:95:41:0e:ef:20:6b:18:ae:
e0:a9:47:6c:97:17:95:76:d8:69:f5:94:4c:97:16:fb:87:d1:
8f:c7:17:5c:14:6e:b2:07:1c:09:68:5f:ff:13:48:27:60:71:
88:c8:6e:70:b3:bd:bc:9f:66:45:77:3c:47:4c:7f:37:4a:e9:
02:18:43:7a:4d:c1:ed:02:41:3e:4c:9f:77:74:7c:86:a3:b8:
5a:4b:9f:52:2a:af:13:4c:1f:28:bb:89:4b:f3:a0:12:9f:fd:
1f:c4:ef:13:47:bb:8c:b8:bf:70:be:25:30:f5:bd:08:85:4d:
d9:93:77:13:01:4b:bc:60:23:c5:22:90:6f:05:59:f8:4b:de:
71:37:0e:a5:0a:83:33:2b:c6:73:0e:d4:da:b2:f6:94:9d:7c:
a2:0e:f1:fb:fa:07:fa:65:c9:cd:05:33:2d:82:f5:a6:f7:54:
81:15:18:db:d2:4c:ae:e2:4f:12:37:c8:95:d8:bd:1e:0e:e5:
7c:22:8f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:50:08 2025 by rpki-client