Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
File: PP7M1r9kBrDPRPaCuTzYbjNGUko.mft (raw, json)
Hash identifier: TbaFbyPf5GVly/6qTJQfIIk3MnEBwnziSfBINLfi1b8=
Subject key identifier: 02:C8:5C:00:11:B6:EA:7B:AA:01:67:96:CC:CB:71:8A:4A:83:D6:7B
Authority key identifier: 3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
Certificate issuer: /CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Certificate serial: 0198D473F5745395417A8ABEB360DAE1DC18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
Manifest number: 11BF
Signing time: Sat 23 Aug 2025 01:03:45 +0000
Manifest this update: Sat 23 Aug 2025 01:03:45 +0000
Manifest next update: Sun 24 Aug 2025 01:03:45 +0000
Files and hashes: 1: PP7M1r9kBrDPRPaCuTzYbjNGUko.crl (hash: aD4UjYMeHYbAcmu+z4L67KyGp9VXExLht9TEYM4pR+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f5:74:53:95:41:7a:8a:be:b3:60:da:e1:dc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cfeccd6bf6406b0cf44f682b93cd86e3346524a
Validity
Not Before: Aug 23 01:03:45 2025 GMT
Not After : Aug 24 01:03:45 2025 GMT
Subject: CN=02c85c0011b6ea7baa016796cccb718a4a83d67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:32:11:d1:47:05:76:e8:87:b1:8b:a7:eb:c0:
94:65:aa:d4:13:e8:e8:34:2b:8a:f4:b8:c3:3a:8f:
a4:e0:e1:d6:0c:64:68:05:6a:27:70:5b:da:47:4c:
a2:af:71:ed:1c:61:e9:50:28:9f:10:c2:85:d9:df:
75:a0:48:c6:d0:71:38:7c:a7:09:48:7f:64:31:68:
da:a5:88:26:ab:1a:e9:e8:3a:c1:1f:10:c1:31:65:
3c:64:e4:80:d9:fa:b8:f7:cc:4e:ac:45:eb:13:d9:
58:05:11:c5:eb:4a:cb:e6:0d:9e:39:d1:68:c2:25:
d2:38:cd:63:d3:0b:4a:fe:07:20:f8:63:70:3c:10:
22:60:60:ce:e9:48:b6:91:48:74:82:e1:38:9a:7a:
fa:6c:5e:56:cf:03:e8:fc:80:7e:c7:7a:ed:9b:8d:
01:7f:1b:47:81:48:97:0a:d9:0a:06:c3:5f:a4:af:
8d:2e:06:91:fc:8c:aa:7c:95:cd:c1:dd:37:5a:bc:
e3:ee:46:a0:b0:e5:db:bf:26:b7:50:ca:b1:61:3e:
2a:1b:53:06:4a:67:ec:62:8b:80:0b:7e:1c:b5:dd:
2b:f4:26:86:91:e2:ff:33:3f:51:33:8f:7a:1d:a7:
55:54:ba:18:51:c1:a6:a2:a8:e0:7e:10:e2:76:45:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C8:5C:00:11:B6:EA:7B:AA:01:67:96:CC:CB:71:8A:4A:83:D6:7B
X509v3 Authority Key Identifier:
keyid:3C:FE:CC:D6:BF:64:06:B0:CF:44:F6:82:B9:3C:D8:6E:33:46:52:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP7M1r9kBrDPRPaCuTzYbjNGUko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5177fd-89ed-4e6f-8c3d-23b8611cce23/1/PP7M1r9kBrDPRPaCuTzYbjNGUko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c0:4b:32:9e:0f:e3:74:fe:88:a6:0d:b9:4b:1c:41:dd:5a:
dd:96:cc:5f:be:73:60:6e:5b:c3:9c:02:dc:f1:1b:d7:5f:7b:
43:e3:fb:00:2b:52:a9:fe:67:26:23:f6:d5:35:ad:e0:63:f2:
ff:a0:49:c3:99:8b:95:e2:22:65:3b:06:8f:a9:cb:a7:b1:81:
76:38:ce:27:69:90:31:b9:24:f5:79:f2:30:0a:29:82:d3:6c:
62:28:ee:1e:73:bc:8f:ad:e7:ca:47:ad:65:2c:e1:c7:25:4c:
4d:7a:ad:48:ad:22:71:18:a7:02:e9:e0:57:6d:7b:cb:b7:f8:
89:f3:b4:79:de:69:43:be:8f:5e:3d:35:00:79:ca:05:59:9e:
29:83:36:51:be:d4:f1:e3:d0:eb:f1:5f:75:10:db:c2:80:25:
21:91:f1:2d:7d:e7:39:df:d5:89:72:3b:17:4c:eb:40:8b:92:
11:1c:55:c0:7a:0b:a3:2a:80:1c:72:08:8d:71:d7:41:bc:16:
6e:90:29:13:0e:1d:9f:90:29:85:5e:06:d7:a8:9a:39:67:24:
37:33:3e:1c:16:61:78:e2:62:ed:44:af:97:fb:84:ff:c1:96:
bb:fb:b2:45:98:85:8d:64:c2:4a:21:70:00:ad:ac:a0:5c:0b:
57:2a:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:10 2025 by rpki-client