Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File: pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier: iyCej8sPvK+8K23JBBuJTx5u7GAcThYgZvzi1RGRNjE=
Subject key identifier: 59:7D:5C:20:14:0F:B4:B8:96:19:A9:AE:52:24:15:71:CB:4A:F1:61
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer: /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial: 0197C614B31108C0DDADAE985E5E4AE1E145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number: 03EB
Signing time: Tue 01 Jul 2025 13:02:14 +0000
Manifest this update: Tue 01 Jul 2025 13:02:14 +0000
Manifest next update: Wed 02 Jul 2025 13:02:14 +0000
Files and hashes: 1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: hAcRN/pbCOKfHxnnNbh/UUgj63VoEN7PB9UgVw9rBlk=)
2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:b3:11:08:c0:dd:ad:ae:98:5e:5e:4a:e1:e1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Validity
Not Before: Jul 1 13:02:14 2025 GMT
Not After : Jul 2 13:02:14 2025 GMT
Subject: CN=597d5c20140fb4b89619a9ae52241571cb4af161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:ed:cd:0c:1b:e4:55:b1:13:e4:63:78:11:
87:f5:0d:ba:15:6f:bf:e3:e7:8c:aa:93:ce:b7:62:
e0:91:ee:ba:4f:92:93:35:f3:f3:df:f5:e0:20:e4:
1f:bc:b0:20:06:6e:27:71:c9:56:6c:fc:7e:fa:9b:
5c:f6:7a:f5:22:90:ed:3f:78:57:dc:b3:9a:e5:4c:
4b:c8:f2:ca:06:cb:07:29:ac:1c:f4:11:fb:6a:44:
e4:83:76:65:1d:be:bc:f7:dd:88:b2:ab:ca:85:c7:
7a:00:c8:65:b2:b9:28:a1:96:39:22:3b:63:89:a0:
05:b4:f9:be:2e:d2:6f:f2:fc:ad:dd:a5:d5:fe:01:
7d:cb:ed:bc:fe:8c:98:40:f5:c0:ae:26:e4:9f:8e:
f5:d7:b6:b6:6e:03:58:71:13:08:cc:0e:94:2d:91:
de:d7:ac:74:62:3c:fe:f4:96:0f:ce:fd:45:71:82:
d6:da:72:d5:44:be:d0:32:95:cc:be:69:a4:d4:f1:
db:04:45:fa:86:0c:2c:59:17:7e:a6:51:42:93:d9:
99:8e:61:72:79:7a:63:5a:d8:04:7c:5c:5f:89:b1:
91:77:6b:79:02:8c:ca:20:0d:14:5a:6d:9c:6f:28:
bc:ba:f5:10:0a:d5:3d:be:1d:0a:34:77:88:00:2b:
83:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:5C:20:14:0F:B4:B8:96:19:A9:AE:52:24:15:71:CB:4A:F1:61
X509v3 Authority Key Identifier:
keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:44:6a:50:b1:7c:46:71:55:e5:38:f1:6e:d4:d5:49:e7:af:
bc:3c:41:43:67:b5:35:7c:72:d6:ed:5d:2c:55:48:bc:6d:b9:
1d:83:bd:79:13:1e:08:cc:41:75:e6:d1:21:c5:c1:c1:06:c2:
0c:1f:ea:bb:1a:f6:70:3c:26:d4:f6:2c:a9:56:5b:99:dc:53:
9d:85:b0:d8:35:a6:a1:ce:52:86:4b:36:b3:5c:b3:2c:2e:3c:
ca:52:6f:3a:be:85:8b:0d:33:3c:9b:45:40:46:24:9b:f0:bd:
0a:6c:81:7a:fe:5d:82:11:ec:25:10:59:52:ef:fa:1b:c0:ba:
c9:8b:53:8c:cb:57:45:7b:36:2d:34:42:fc:27:87:68:59:b8:
ff:5e:73:0d:f5:9a:84:c1:dd:a6:12:80:6b:30:23:46:de:4c:
ac:23:fa:d9:c0:f9:1d:ce:d8:f7:f6:da:1b:2f:90:5c:bd:9f:
fd:36:58:b9:be:ad:19:89:c2:d6:82:00:b2:5b:44:02:8c:fa:
db:40:f0:f1:b2:3c:26:d2:7e:24:e0:be:41:2d:ba:23:0f:1c:
1a:52:38:60:5e:a0:38:ad:b9:8b:05:c0:a3:c2:03:24:ee:29:
eb:df:7f:8e:94:69:5c:d0:dd:37:18:d8:c1:57:45:7d:f1:ea:
c8:53:5c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:47:06 2025 by rpki-client