Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
File: Pk1h9w-8mJgzsvOA9SzulBHk26k.mft (raw, json)
Hash identifier: SbOraVOGM+hGnXty3zGlFAXAAss2gbz6zkdrHshkVS0=
Subject key identifier: 6F:E8:82:EF:E6:BE:86:33:A2:22:D1:7F:12:3F:5A:18:F3:A3:3D:5B
Authority key identifier: 3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
Certificate issuer: /CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Certificate serial: 0198D516085DEEB55BC6491C24C188F0E462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
Manifest number: 0665
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: Pk1h9w-8mJgzsvOA9SzulBHk26k.crl (hash: pAogW8BviQyuFOkPmAnsVIUdf2L7JVeuxy9aB8Vmu1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:08:5d:ee:b5:5b:c6:49:1c:24:c1:88:f0:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4d61f70fbc989833b2f380f52cee9411e4dba9
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=6fe882efe6be8633a222d17f123f5a18f3a33d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:d4:f1:e1:04:9e:ed:63:4f:b1:63:3f:aa:
ec:44:74:fe:79:21:84:7c:71:e0:21:d1:5c:24:b8:
74:0c:14:3d:7e:42:ea:ae:2a:1b:4f:77:62:22:0b:
dc:0f:74:b0:d0:7e:ac:cd:a7:5c:15:ac:e5:cb:20:
6e:e2:8c:66:de:dd:82:9c:37:d1:80:b5:b8:c4:e9:
4c:76:04:90:b3:b7:57:71:0d:38:63:e6:fb:bf:62:
8c:f7:2e:94:d1:81:77:14:06:97:04:34:2f:c6:a7:
94:04:c2:56:ce:63:74:83:43:e2:9d:e5:da:71:38:
5b:66:e0:e1:93:05:ba:08:9e:3c:d9:02:17:6e:df:
d5:19:9d:ab:97:1b:9a:c1:dc:1b:35:73:e4:30:f7:
17:d0:49:f5:27:a6:9a:6c:eb:5a:95:e6:9d:15:24:
6f:27:93:62:05:0e:c1:1a:1e:83:72:27:8e:94:1d:
4c:e5:0a:a8:ea:8e:92:0a:c2:da:43:76:58:61:94:
08:c9:24:f8:54:a3:33:ec:b6:67:f7:27:0c:d1:52:
2d:0d:25:33:19:c5:f8:a3:c5:52:fa:23:ea:a0:9c:
16:53:97:2f:ae:8d:41:b0:2a:03:39:1a:67:39:8b:
b2:e8:3f:f1:4e:18:29:03:3b:59:9d:13:b7:fb:7a:
b2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E8:82:EF:E6:BE:86:33:A2:22:D1:7F:12:3F:5A:18:F3:A3:3D:5B
X509v3 Authority Key Identifier:
keyid:3E:4D:61:F7:0F:BC:98:98:33:B2:F3:80:F5:2C:EE:94:11:E4:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pk1h9w-8mJgzsvOA9SzulBHk26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c34d2d-3f29-4a6e-99b9-d50907000609/1/Pk1h9w-8mJgzsvOA9SzulBHk26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:42:96:bb:a8:47:c2:31:d7:96:39:f2:58:e8:e1:f0:ec:d6:
a4:47:03:37:24:b8:0f:69:e7:4b:41:cb:a4:f8:0f:2e:1a:3c:
79:65:75:ca:75:64:c1:a3:9c:8c:77:8a:16:74:12:71:cc:db:
5a:cb:67:a3:ef:45:0f:4f:4c:0d:6c:1d:a6:5d:bd:86:60:90:
7a:4c:01:a6:66:c0:20:7d:59:24:79:12:b6:b2:6d:5b:1c:78:
c1:88:f7:6e:1a:c2:b0:eb:ab:bd:5c:51:a3:0e:1b:44:5e:76:
0d:37:4b:20:49:bd:32:f5:d3:f4:83:6c:b5:92:8e:8e:4c:32:
7d:0f:09:86:03:75:a5:57:5e:3c:eb:51:9e:0d:eb:9f:16:c8:
3c:f4:79:0e:09:42:24:0d:a7:fe:dc:43:a8:7f:e6:78:d8:36:
79:2d:73:b1:2a:49:d8:2c:16:11:8b:a4:19:f9:fc:b6:a4:8e:
ff:f8:a0:3a:11:17:33:b8:b3:3b:c6:28:6c:37:3a:72:29:82:
d8:86:09:fa:a9:f8:e2:b4:82:70:60:46:e3:9a:a2:be:26:37:
a6:7d:f9:53:cb:88:7c:fb:a5:6a:be:e9:a2:94:fc:e4:e7:c7:
70:15:70:63:ef:b5:e9:d4:84:2a:21:f5:e3:8c:b5:ea:78:76:
72:b8:6d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:47 2025 by rpki-client