Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: 05kAOeUd6H1NExEii69KBOMhcgE7TvOseDEOjozKd0M=
Subject key identifier: 4E:48:80:AB:D2:86:36:7D:BA:67:0C:E6:6E:58:99:56:78:47:22:9E
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 0198D54DF56492038DF009C7D31A3474C611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 03B4
Signing time: Sat 23 Aug 2025 05:01:52 +0000
Manifest this update: Sat 23 Aug 2025 05:01:52 +0000
Manifest next update: Sun 24 Aug 2025 05:01:52 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: +WVatSvemYBo5Y4JQBRXrOoRKSrGKB1P1zEK18rJHnM=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f5:64:92:03:8d:f0:09:c7:d3:1a:34:74:c6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Aug 23 05:01:52 2025 GMT
Not After : Aug 24 05:01:52 2025 GMT
Subject: CN=4e4880abd286367dba670ce66e5899567847229e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:f7:f7:70:77:f4:1d:36:91:79:52:45:97:
f2:ba:fd:1b:cd:c5:11:9e:04:d9:99:19:8e:ea:80:
7d:02:a9:3e:4e:f0:cc:64:b5:fd:0e:a9:d5:1e:13:
fe:6f:32:bf:28:dc:22:72:77:51:78:2b:61:58:5e:
1f:6f:9a:9f:a1:42:ce:2b:9a:8b:88:49:e4:21:9a:
ee:36:24:58:5a:a7:08:f5:67:cc:15:13:2b:b4:0a:
0b:40:b8:37:55:d0:90:91:e3:a1:e8:f7:9a:a4:f3:
49:ac:e5:f1:90:49:07:4e:a3:ba:ec:87:f4:66:20:
07:65:1f:12:6b:55:73:4e:b8:23:4c:66:db:fb:f2:
5a:de:55:07:b7:9c:57:e0:ba:ea:97:9c:65:bc:b9:
72:95:3d:66:b7:7f:4a:08:16:54:55:dd:45:44:bd:
61:a0:f8:37:21:b8:50:53:1b:b7:78:55:2d:25:d6:
f6:b9:ce:2e:37:7e:b6:68:80:63:7b:c0:fb:24:0a:
24:ce:7a:3a:14:52:55:42:9b:a0:b2:5e:50:13:b1:
f5:01:0c:6f:e7:ed:b0:d5:6b:c8:15:44:33:69:16:
3e:be:5d:b9:e0:15:ef:e6:19:61:1b:1d:b4:65:b9:
19:47:d4:93:1c:66:fd:cb:5d:28:29:b5:93:7c:e6:
b3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:48:80:AB:D2:86:36:7D:BA:67:0C:E6:6E:58:99:56:78:47:22:9E
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:47:e8:07:15:e4:17:a0:eb:2e:ca:a5:cf:be:a6:81:f1:75:
2f:08:d6:97:79:0e:ed:1d:61:7f:ad:f8:81:66:d5:e9:4d:92:
c9:21:0d:d7:51:ca:6e:b3:33:0c:9c:56:d4:c2:87:c5:ba:1a:
76:b6:f1:d8:69:30:2c:b1:b1:cf:34:0d:0c:11:a6:4f:45:15:
c6:71:c5:d2:55:ac:97:aa:3b:dc:a6:c9:2e:37:55:15:28:46:
35:23:19:10:56:13:f1:44:4d:a0:0c:46:af:03:e2:44:df:91:
87:25:33:59:fa:25:13:5a:fc:ae:fb:b4:b2:a9:0b:16:b9:32:
8b:ae:d6:84:30:99:c7:f8:14:02:da:fe:82:cc:68:a3:e1:58:
66:13:a8:be:01:85:27:f3:97:b0:ec:45:fb:d5:ba:89:31:fe:
19:42:74:91:13:64:d3:19:09:89:67:dc:0d:11:c3:21:8e:00:
a9:4b:b9:fe:56:8f:65:7f:8c:24:2c:97:65:60:a3:98:80:b2:
ee:a2:72:2a:e9:7c:70:3e:02:3f:b8:34:f7:74:2d:c6:c4:78:
bc:8c:57:93:d1:26:94:d2:55:7f:5d:62:26:9f:9a:12:84:b7:
fc:23:dc:0e:db:6a:65:80:41:8d:25:14:cd:c6:a9:93:01:fd:
e0:e0:4d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:18 2025 by rpki-client