Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
File: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft (raw, json)
Hash identifier: w7FSc56wSW/puKbem0B6jKb+TySLbQda3ChCi27eScg=
Subject key identifier: 27:53:3E:4C:58:5B:5D:A7:78:FB:80:83:C6:E5:32:83:2E:34:60:A3
Authority key identifier: A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
Certificate issuer: /CN=a4a37878c14f216c32649819ea428a58225504fb
Certificate serial: 0198D47392BF4440BDA603EA7168A9E499F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
Manifest number: 05F1
Signing time: Sat 23 Aug 2025 01:03:20 +0000
Manifest this update: Sat 23 Aug 2025 01:03:20 +0000
Manifest next update: Sun 24 Aug 2025 01:03:20 +0000
Files and hashes: 1: pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl (hash: vDevX+hHWv+oEiWmQGhEvvAA4jyJIZNnPmWEcIbb/R4=)
2: ro12KKiX-LBkOFDMXKVrhIyQ9tA.roa (hash: 3rfI99WFfWKHo+rtyifcnFcBumsIBP/guPHdSOGN9zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:92:bf:44:40:bd:a6:03:ea:71:68:a9:e4:99:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4a37878c14f216c32649819ea428a58225504fb
Validity
Not Before: Aug 23 01:03:20 2025 GMT
Not After : Aug 24 01:03:20 2025 GMT
Subject: CN=27533e4c585b5da778fb8083c6e532832e3460a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:49:c2:a6:d5:73:6a:95:3c:08:5b:ce:ae:
cf:a9:2a:db:48:49:de:7c:5c:ee:f3:16:d3:83:0e:
d7:de:53:b3:d2:60:05:d2:63:b9:6b:f3:64:f6:f1:
22:a7:a0:15:eb:44:f8:34:1f:26:b6:f4:9b:8c:8c:
19:ad:9f:e4:c0:f6:a7:c5:85:3d:4e:38:2a:1e:58:
21:3b:14:9a:b3:d1:09:27:d9:de:54:d7:4d:b2:97:
73:dc:d0:be:08:47:0a:a7:17:83:ed:61:a0:fa:ca:
92:19:14:b7:11:2f:83:a6:22:31:32:2e:d4:1b:bf:
e8:2f:a6:ee:27:c7:ac:7d:29:ac:b2:02:b7:d9:82:
ad:c7:a3:d0:f7:f9:9a:05:d4:5c:58:92:82:9b:38:
67:30:aa:73:68:d8:1f:28:99:7a:42:d9:95:97:00:
e7:34:ca:ff:9f:00:e6:ff:54:72:34:1b:0e:79:7a:
a5:30:17:4e:c3:6f:b7:5e:78:40:60:16:86:a4:88:
cb:ec:b6:9b:27:96:7d:35:89:a5:db:8e:4f:48:07:
f7:2c:73:86:df:b9:a1:38:a1:c9:fc:09:07:41:ad:
6a:94:44:29:59:87:95:e0:4d:74:73:0b:7e:86:86:
ea:2c:42:d9:71:05:d2:a3:45:83:94:60:98:19:5e:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:3E:4C:58:5B:5D:A7:78:FB:80:83:C6:E5:32:83:2E:34:60:A3
X509v3 Authority Key Identifier:
keyid:A4:A3:78:78:C1:4F:21:6C:32:64:98:19:EA:42:8A:58:22:55:04:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e606fb-107f-4296-8870-4b0e0ac8d229/1/pKN4eMFPIWwyZJgZ6kKKWCJVBPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c3:0b:a1:98:85:23:c3:4e:f0:32:4d:f4:a5:60:4d:5a:f3:
75:37:a5:2e:3d:c9:03:9d:57:bc:b3:5a:53:cf:4d:f0:6f:27:
5e:f7:94:ca:90:c8:7e:72:e8:c4:bc:72:cf:16:d9:96:76:91:
f4:ab:88:fc:b1:72:18:d5:ae:2b:79:04:97:25:0b:67:c7:08:
21:72:5c:2e:39:62:24:cf:0b:11:49:33:ba:f2:a2:3a:7b:16:
df:23:ba:8b:ee:8e:3e:dc:51:31:24:4e:4b:49:11:de:2a:38:
f2:2c:ca:48:7f:aa:4a:f8:92:e7:42:30:f4:d9:a8:57:6d:ac:
5f:5c:f3:3c:9e:28:08:f0:e6:df:78:27:3e:12:72:7c:27:45:
d8:1b:26:9f:fb:cb:3a:10:b7:a4:33:53:3c:e0:75:b2:64:e1:
44:3c:d8:bc:db:41:f1:2f:3b:1e:da:03:60:e9:6d:95:6b:9d:
4e:17:e5:2c:b9:ff:67:c2:44:48:36:66:77:f1:21:67:d5:ba:
16:dc:27:0d:df:85:93:1c:db:18:5a:3c:c6:8c:54:96:1e:1c:
2a:51:ec:25:5e:a2:49:35:36:84:7c:e3:9e:8a:a2:da:e5:fb:
73:dc:61:51:c7:60:51:9b:89:f3:1a:89:68:bf:42:d9:6c:3a:
18:f7:4e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:36 2025 by rpki-client