Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
File: pcvT2g02IF_SyP0d-VXFC1UB7dE.mft (raw, json)
Hash identifier: uS/s3yhRipl1Ll6DITH1aJwm/Vc2FDEPVsaJ7T6RMcc=
Subject key identifier: D1:93:09:88:F3:6F:02:06:AA:97:7E:1A:55:84:40:22:81:83:93:A8
Authority key identifier: A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
Certificate issuer: /CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Certificate serial: 0198D5BBEAFA06F286034CE861C600AFDBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
Manifest number: F6
Signing time: Sat 23 Aug 2025 07:01:59 +0000
Manifest this update: Sat 23 Aug 2025 07:01:59 +0000
Manifest next update: Sun 24 Aug 2025 07:01:59 +0000
Files and hashes: 1: pcvT2g02IF_SyP0d-VXFC1UB7dE.crl (hash: 0MXALRxDam0nE+liNE0WV6CnBuYkFfDlZQd/kIpar0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:ea:fa:06:f2:86:03:4c:e8:61:c6:00:af:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5cbd3da0d36205fd2c8fd1df955c50b5501edd1
Validity
Not Before: Aug 23 07:01:59 2025 GMT
Not After : Aug 24 07:01:59 2025 GMT
Subject: CN=d1930988f36f0206aa977e1a55844022818393a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:b0:f7:8b:49:3f:a6:65:8b:39:92:43:4c:
20:77:07:47:75:ac:45:24:d6:1b:d5:ad:ed:f8:e2:
45:8a:a9:b1:e7:d0:03:62:19:68:94:2a:ce:ba:17:
d0:be:a5:57:3a:32:44:2a:94:6a:b9:9f:30:bb:85:
7a:4a:9b:bf:fb:42:bf:91:b9:26:69:d4:12:9e:1d:
5c:a1:14:fb:9e:18:4a:1d:13:c3:5b:c1:78:a7:e1:
de:e1:ff:09:f7:f6:43:0b:b9:55:c0:44:9d:9c:6c:
8b:53:c8:c7:95:cf:de:8d:e1:a4:fb:03:3d:21:4a:
83:80:ff:4d:48:28:45:c8:08:5b:3e:72:0f:e0:21:
af:bb:fb:6d:34:88:ef:3b:a1:48:d1:08:56:83:33:
b8:66:ea:e7:b4:6f:aa:b6:98:0c:9e:55:d3:75:f6:
c3:6d:3f:a7:c6:7f:70:70:8b:6b:8c:c9:5d:40:a9:
d3:13:b4:c7:a1:97:0b:f6:8c:70:62:bb:8b:57:5e:
99:e1:c8:ab:04:f5:a0:b4:ce:ab:6a:54:af:9d:fc:
0a:c1:2c:43:08:13:98:0d:cf:d2:e3:0a:cb:af:ab:
0e:45:11:12:d3:86:92:88:a1:5f:41:30:f3:58:cb:
c1:9a:ed:67:14:48:f3:fd:96:b7:f0:5b:66:ea:3e:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:09:88:F3:6F:02:06:AA:97:7E:1A:55:84:40:22:81:83:93:A8
X509v3 Authority Key Identifier:
keyid:A5:CB:D3:DA:0D:36:20:5F:D2:C8:FD:1D:F9:55:C5:0B:55:01:ED:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcvT2g02IF_SyP0d-VXFC1UB7dE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/08b9f6-4aca-4131-b084-3826c2a9e722/1/pcvT2g02IF_SyP0d-VXFC1UB7dE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e4:72:c2:64:38:07:af:ce:2d:98:f9:70:0d:4a:74:01:27:
cc:0a:35:fc:c1:f7:29:db:cb:f4:6b:1a:dd:0b:4f:a6:c0:01:
a6:96:99:3c:e6:35:dd:ac:77:f2:e4:21:1e:a5:a5:da:9a:bc:
87:1e:28:32:c6:c9:f2:1e:80:dc:68:11:8e:6b:5e:10:eb:24:
76:2b:0e:ce:b0:43:4f:bf:d1:cd:4f:ba:ec:fb:ad:25:35:8a:
3b:4b:61:1d:40:9a:29:df:20:dd:42:51:c5:cc:fd:1f:b7:8c:
27:ab:d9:da:c2:99:7c:ab:e4:aa:12:fe:12:40:39:3b:7e:4d:
74:c4:c6:e3:3e:03:dd:a6:cf:42:a4:e8:7c:ea:df:65:b4:30:
75:02:a2:ee:97:f6:d7:41:66:94:db:b4:16:d0:81:08:67:4b:
bb:13:ce:22:bb:7c:2f:b7:2e:e8:ff:32:d0:6b:19:25:67:d5:
0e:01:d3:c4:29:68:35:f5:b0:93:2f:71:9c:42:5b:0b:fb:b4:
57:29:24:0f:23:0e:a6:3f:e9:ad:19:07:3c:4e:b7:48:ea:dd:
eb:b6:42:d7:b6:cf:6c:ee:61:55:47:34:ba:cf:07:66:18:99:
6e:68:aa:d2:f5:36:b0:b4:f4:43:75:95:80:d6:6a:30:ae:da:
7e:b6:dc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:03 2025 by rpki-client