Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier: IjYYamoS1Uyyo0yU6Hip+KM5fQVbZsZAE5El215Fr7M=
Subject key identifier: 6E:CA:DF:50:58:41:26:25:D5:82:50:51:0C:06:76:81:F7:AA:C5:30
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial: 0198D5BBB116D4A103052BD8577D7550F41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number: 0D52
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: nCVrvga9DjCcdt3p9vW9YV9Eeux2kjU2o18pq+5HO8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b1:16:d4:a1:03:05:2b:d8:57:7d:75:50:f4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=6ecadf5058412625d58250510c067681f7aac530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:1e:d1:a2:7b:85:2d:31:cb:52:28:7a:eb:
8b:bc:7d:55:7e:f8:12:93:24:9c:80:b6:19:ce:ca:
9d:b5:be:8a:b3:a2:b8:6f:f9:b1:97:dc:9c:47:ff:
af:09:91:4e:d3:d3:1d:04:21:51:e0:a2:10:34:c9:
e2:02:a7:aa:08:b1:c0:9d:40:7a:ff:a9:dc:b1:6c:
aa:a6:69:78:85:ac:80:73:dc:a9:04:4d:26:05:09:
50:a4:a0:99:29:7b:89:4d:58:bd:2e:30:13:e8:44:
35:8d:8d:5b:d6:71:8c:51:22:6c:7d:31:a3:35:ea:
9b:57:98:1e:8c:3c:a0:d8:d5:f0:0c:e8:1e:19:6e:
94:16:51:70:7c:72:52:52:d4:9c:ef:4d:dd:37:2a:
9c:8b:8f:d4:76:7e:af:a3:5d:5a:36:30:19:5f:69:
43:7c:69:c9:24:1c:59:4e:95:9f:df:7d:18:5a:13:
29:e1:07:16:28:62:fc:26:7a:c6:5a:31:87:7c:05:
60:02:4b:d4:89:d5:23:9c:e6:d3:3b:d9:a5:18:e4:
04:69:b1:18:9d:cb:f6:2a:63:c8:0f:da:fd:ec:53:
c0:c8:b1:0d:cc:b7:35:d6:81:48:45:1c:cb:69:94:
32:61:f5:84:e0:b1:d3:eb:c1:10:ef:17:11:98:f9:
85:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:DF:50:58:41:26:25:D5:82:50:51:0C:06:76:81:F7:AA:C5:30
X509v3 Authority Key Identifier:
keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:28:23:0e:e8:d9:c8:a2:a1:c8:67:dc:3a:0d:03:c2:f9:47:
f1:a9:56:25:b3:fb:8e:ea:5b:b3:81:99:b1:54:06:15:4e:de:
3a:cd:e3:31:db:43:68:82:3d:b1:ca:3f:22:a5:22:c4:7c:40:
ad:1a:9d:29:f8:39:f7:63:37:a3:1a:0f:93:9f:2f:07:6f:cb:
cc:1a:99:c9:e9:04:7d:2c:55:1a:0f:cc:61:77:61:a5:97:5d:
45:60:09:8d:50:69:a2:03:73:d3:ae:7b:fc:21:9d:98:24:cd:
6c:b0:1f:20:3b:9b:76:cd:a3:f7:76:12:f7:48:df:22:1d:2f:
5a:0b:ec:4e:88:74:15:b6:5a:c6:42:68:64:73:af:ba:f8:51:
b1:90:ce:b5:17:5a:2f:31:5c:e0:9e:ba:ad:f5:ed:02:f6:6a:
55:ad:50:03:ae:3a:10:f2:c2:61:2f:db:c9:d5:0c:d7:d2:b1:
bf:2c:02:76:bf:f0:b5:18:e0:03:f0:7d:3d:1a:8e:2c:dc:3c:
dc:1a:5c:40:dd:67:1b:c4:f9:a2:24:38:85:c5:ca:f5:a0:10:
c4:5d:69:e3:50:31:d3:af:dc:98:c7:9e:39:43:bc:46:21:f0:
69:06:61:76:b7:09:d9:4e:d5:44:f5:3a:2e:76:38:50:35:63:
4f:76:43:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:03:51 2025 by rpki-client