
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File: pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier: AVpq3zzHIxtikMjxCMFFoUskPVMHloNvg5MHiZZXvmI=
Subject key identifier: CA:63:86:63:14:E3:CC:93:90:FD:48:21:03:49:78:5D:DB:D4:01:04
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer: /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial: 0198D4E0CE64263997FAB08643F42C79E0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number: 15
Signing time: Sat 23 Aug 2025 03:02:39 +0000
Manifest this update: Sat 23 Aug 2025 03:02:39 +0000
Manifest next update: Sun 24 Aug 2025 03:02:39 +0000
Files and hashes: 1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: cCAGqOr8jCaLxyXkjpd+7WDAAPj0ZdU/SHmCaXQshvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:ce:64:26:39:97:fa:b0:86:43:f4:2c:79:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
Validity
Not Before: Aug 23 03:02:39 2025 GMT
Not After : Aug 24 03:02:39 2025 GMT
Subject: CN=ca63866314e3cc9390fd48210349785ddbd40104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:d1:f9:9a:96:74:b7:9a:af:b5:59:1f:f7:
c7:4b:70:56:03:94:3b:c7:ce:eb:cd:13:c2:44:1b:
9e:61:3f:ab:fd:c9:72:49:d0:12:c7:21:37:89:38:
34:fd:3a:31:97:85:bc:4c:a5:9b:f6:fe:c4:42:d9:
00:26:1b:3b:d0:03:60:0c:ca:b8:d1:08:0f:3d:a5:
fc:f6:94:43:a3:67:d1:ab:1b:0a:bf:8a:15:07:52:
cb:fa:e3:d0:a9:59:d1:ca:0c:b5:88:5a:38:4e:e9:
9c:07:82:b4:4f:5a:fc:7a:f0:57:0a:73:fe:82:d1:
e3:55:63:12:52:29:9c:7d:92:aa:02:e9:2a:4d:63:
70:39:f4:e8:8d:6a:67:00:ae:de:70:b5:b0:72:b1:
f5:b3:40:64:54:fd:99:b1:5f:02:04:c4:98:26:03:
da:ea:07:25:e7:6b:af:4a:94:e9:ae:4c:b6:b7:c6:
cc:2b:61:de:84:ef:23:ab:c9:eb:8c:ba:06:d6:1f:
a0:aa:69:b8:6d:fc:71:0d:c5:b9:1e:24:ee:f4:de:
f9:f8:7b:cf:3b:fc:b3:92:1f:2c:51:e1:8d:72:c3:
d9:c4:95:9a:06:0d:7b:fd:e5:90:ba:f4:74:1f:34:
6d:44:46:de:bf:b7:57:d1:59:b6:52:1a:3d:29:a9:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:63:86:63:14:E3:CC:93:90:FD:48:21:03:49:78:5D:DB:D4:01:04
X509v3 Authority Key Identifier:
keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b4:d7:c9:41:18:88:78:5b:3c:41:0d:6e:fc:81:1e:69:fb:
dd:cd:21:6e:96:48:b3:cd:fd:fb:e6:f7:c2:c9:d2:f7:3c:22:
95:83:59:12:86:ae:08:e0:ce:d7:f8:12:a6:3b:2d:fd:70:0e:
58:7b:ec:26:76:4c:2a:d0:2d:f6:64:01:2f:5a:40:2e:5e:f4:
05:ef:1a:6b:44:c1:94:f7:19:f0:2e:15:54:3d:bb:4a:1a:79:
85:b3:7f:0a:80:4b:f4:56:87:2f:cd:79:53:b0:66:a4:24:53:
2e:42:92:c0:84:38:21:26:9d:26:01:27:70:1b:0a:d3:ac:fe:
ad:ca:41:64:c2:65:9a:d5:ea:d6:6a:0a:7a:22:90:d5:4e:eb:
d0:b8:71:a7:78:d4:2f:46:cd:86:b6:83:ad:7a:42:d2:60:26:
d2:35:a0:e6:e1:35:3c:c5:68:cd:18:7d:48:41:3d:20:4c:ff:
59:e0:5f:f7:bf:34:0f:d1:83:dc:68:f9:39:2e:22:5b:66:0e:
52:f8:59:57:66:90:b7:51:f7:09:7a:64:4e:74:a5:67:6e:83:
8d:10:57:a0:ec:0d:08:93:1d:ba:53:cf:e3:b9:a6:98:58:a0:
b7:20:2b:04:5b:85:fa:61:d8:ab:ce:2b:8d:bf:21:c6:b9:84:
a0:cf:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:26 2025 by rpki-client