Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: XwrwBMH9HAq2ZsDYJLyxFWItO99T1P87VGhhFfGEyyQ=
Subject key identifier: EC:4F:0C:9F:B5:CA:9A:7E:32:24:20:88:41:B9:60:A3:2D:C6:8D:2B
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 0198D5156391B2ED6CE8C77B45DB404D389E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 05A5
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: 2wcdzKrpNP71ogS3ms4HJMdspM26UMJCfLXtYx9slDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:63:91:b2:ed:6c:e8:c7:7b:45:db:40:4d:38:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=ec4f0c9fb5ca9a7e3224208841b960a32dc68d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:19:c4:45:57:a2:f2:df:ba:bf:cc:a7:3d:
b5:f8:b7:bf:f1:70:d8:a2:73:b5:ea:fb:80:ba:94:
0f:a0:42:4c:cb:28:b4:15:c2:20:dd:01:be:17:ab:
ab:31:a2:1c:0e:92:09:33:99:29:f8:bf:f3:50:5e:
97:f7:c0:5f:47:d9:c2:50:4c:19:7d:8d:b5:53:ce:
8c:29:69:14:2e:c3:5e:04:2b:ed:61:d7:75:08:9c:
2c:d6:58:76:93:42:27:53:e7:15:eb:50:0d:00:b2:
80:b0:bf:6a:ab:7d:d3:64:93:80:fd:39:8c:00:10:
0b:41:6d:ce:a7:ac:59:1a:63:71:84:2c:4f:b6:b6:
6c:1c:38:9f:36:8e:a3:a6:ba:58:7b:89:c6:e8:05:
38:37:81:e1:cf:96:1b:e0:e1:45:03:8a:27:93:d1:
12:2c:ef:68:ce:2a:52:92:34:91:af:47:5f:70:f8:
16:30:57:0b:ed:f6:18:ce:fb:9c:64:18:e1:a0:46:
ee:43:15:5b:c5:8f:a8:4c:27:34:2b:28:f3:df:46:
08:77:cc:04:d4:b2:de:71:44:09:e4:11:44:b4:a9:
be:ee:59:3b:11:dd:4c:52:46:fa:02:80:99:cf:6b:
ab:6c:3e:ea:4d:ff:ce:f4:d3:55:91:6c:75:c7:eb:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:0C:9F:B5:CA:9A:7E:32:24:20:88:41:B9:60:A3:2D:C6:8D:2B
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1d:d5:60:9e:bc:f8:39:1c:4b:4e:87:df:ac:45:f1:ca:a6:
44:4d:30:bc:57:af:bb:89:f1:f0:ba:df:97:5c:88:56:c1:54:
f5:4b:a4:31:f9:bd:a4:71:92:e6:0d:a3:07:d6:04:e9:4e:51:
5f:4f:7d:0c:e6:3c:a1:d5:a4:a0:cd:f0:f6:6a:5d:16:18:fb:
d3:ef:0d:f1:a9:c3:52:d3:eb:df:65:97:d0:71:7f:73:bf:ca:
0d:7b:f4:21:f1:d7:62:0a:a7:ad:68:ad:e5:2c:43:eb:59:11:
6b:b3:9a:de:6a:6a:0d:25:39:4a:3a:0f:02:64:11:e4:21:a2:
48:80:ca:6f:82:e9:ef:af:85:85:48:85:aa:34:b3:30:28:0f:
ad:ef:5f:b8:7c:5f:84:73:08:a0:04:df:61:c1:ae:31:38:77:
7d:0c:7d:71:b3:1c:1c:d7:ba:1a:39:9f:c8:20:68:50:44:93:
6c:86:69:26:7b:70:68:9d:b3:38:e0:9a:d4:7a:af:3f:99:01:
06:a7:51:77:c3:57:38:42:54:8a:af:8c:0c:9b:70:7f:3c:ec:
5d:1f:c7:70:d1:64:1a:49:fc:5d:72:94:06:4c:9b:8f:92:85:
04:ca:c6:3d:95:08:d4:e5:7d:4d:eb:ab:b2:ed:09:9f:34:f1:
bb:0c:81:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:16 2025 by rpki-client