Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
File: pCqe9isMK_HTQWU5sqBKJlmMLEM.mft (raw, json)
Hash identifier: WS1+ci6n2aBO3g4oXss1iBjPBHirA3PmDCONMb2xNpc=
Subject key identifier: 24:0E:5E:46:19:21:5F:FC:34:8A:6F:AD:E5:D5:F1:A2:EA:85:3B:4B
Authority key identifier: A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
Certificate issuer: /CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Certificate serial: 0198D472EE95495297E56CCEC31F4DB99E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:02:38 +0000
Manifest this update: Sat 23 Aug 2025 01:02:38 +0000
Manifest next update: Sun 24 Aug 2025 01:02:38 +0000
Files and hashes: 1: pCqe9isMK_HTQWU5sqBKJlmMLEM.crl (hash: 0wCTnQAWyrdXzxq+WzDSy+/hv4MQQ9zjxVJ30vOJ4jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ee:95:49:52:97:e5:6c:ce:c3:1f:4d:b9:9e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42a9ef62b0c2bf1d3416539b2a04a26598c2c43
Validity
Not Before: Aug 23 01:02:38 2025 GMT
Not After : Aug 24 01:02:38 2025 GMT
Subject: CN=240e5e4619215ffc348a6fade5d5f1a2ea853b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:2b:b8:a5:37:f0:9a:f3:42:db:11:06:b1:
4e:b5:8d:bc:b5:ac:b1:f0:a7:1c:4c:97:99:5c:2c:
43:98:2f:25:b2:d7:96:86:37:9a:49:42:7f:78:34:
e9:fe:93:2b:9f:5a:c6:23:79:3a:da:a8:0b:05:2f:
4e:98:e6:06:86:c0:b6:bf:ab:ad:0f:49:f9:fe:60:
02:9f:4c:41:f2:15:63:a1:e9:37:bd:09:1b:9b:d2:
fa:1d:69:9f:d0:c5:4e:e4:ed:a5:66:0a:42:c4:db:
8c:74:1b:11:a7:06:3f:bf:1b:c9:7e:65:11:73:9a:
16:96:23:13:91:54:0b:74:66:17:31:1a:78:77:63:
c1:18:bd:8b:6a:46:6c:56:c6:95:d8:74:11:8f:b1:
00:65:0e:31:05:66:fd:72:74:57:5a:b4:f9:7c:fa:
1c:ca:bf:15:31:9c:f3:db:05:e4:fc:ef:e1:b5:6d:
d2:78:d1:2d:20:67:12:85:f0:76:d6:3e:e5:1c:e3:
fb:ec:4c:0c:76:db:f3:b5:60:a0:51:cc:e9:b6:89:
1b:57:c2:4e:17:30:78:2b:d1:4a:2a:d1:27:80:9c:
54:f6:2c:7d:f4:15:99:37:56:e3:b9:fc:2b:16:4a:
b2:51:ea:0b:89:ff:4a:88:7b:1a:be:42:5d:02:78:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:5E:46:19:21:5F:FC:34:8A:6F:AD:E5:D5:F1:A2:EA:85:3B:4B
X509v3 Authority Key Identifier:
keyid:A4:2A:9E:F6:2B:0C:2B:F1:D3:41:65:39:B2:A0:4A:26:59:8C:2C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCqe9isMK_HTQWU5sqBKJlmMLEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2d52ae-3928-449e-86eb-66f053f6a4f8/1/pCqe9isMK_HTQWU5sqBKJlmMLEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:61:dc:c7:a5:ea:e3:6a:a2:dc:85:e6:6c:20:18:1f:eb:9c:
15:c1:9b:55:71:11:6c:d5:38:7b:65:f1:36:06:0b:93:3e:6b:
b0:b4:78:ea:1f:8a:07:e3:3e:4e:97:94:33:40:6c:a1:4b:99:
7f:73:13:43:17:8f:06:62:78:5c:77:4c:c1:bb:cc:3c:33:cf:
8a:09:25:93:34:9b:c0:f6:b4:9d:a6:be:9d:47:7b:47:df:b7:
4b:ba:c1:b3:ea:75:f2:66:5c:c0:99:c4:3c:6f:c2:91:d1:00:
46:0f:ae:e6:58:82:eb:ea:75:2d:cd:9d:be:37:d8:e8:39:37:
f3:29:9f:c0:c2:5a:19:1f:3e:3e:ef:2c:2a:de:08:cc:f4:87:
4a:87:d0:3b:fd:3e:67:3b:7d:d3:87:dd:3a:5b:fc:49:8a:39:
14:38:9b:14:98:76:fd:31:8c:be:fe:ef:3f:13:1f:c0:f9:7d:
84:5a:cd:b6:55:77:d2:3b:d2:45:e0:d6:c4:cb:ca:62:56:4d:
f1:b9:5b:15:6d:9f:62:c2:50:c8:d5:42:8d:0e:98:07:84:d1:
c7:26:17:ba:1f:18:a8:83:6a:29:4a:5a:b1:92:dd:22:81:70:
0b:c8:3e:0b:b0:92:35:ee:06:d1:31:73:d7:4f:9c:07:aa:eb:
48:a2:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:11 2025 by rpki-client