Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: YUjp5khF5yJ27MmoxLKg7MdxKMLEB277cWoEa2DhnYU=
Subject key identifier: CF:B5:B8:E5:94:8E:99:9D:4B:F7:B1:54:7E:AE:CC:AA:34:77:B9:09
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 0198D7A8FF607A93E69E0032797A3E80D167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 1583
Signing time: Sat 23 Aug 2025 16:00:33 +0000
Manifest this update: Sat 23 Aug 2025 16:00:33 +0000
Manifest next update: Sun 24 Aug 2025 16:00:33 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: 62PZGXGM2chzwI3Vl9paqDZnrtJnMNIrQZPGkSLXQwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ff:60:7a:93:e6:9e:00:32:79:7a:3e:80:d1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Aug 23 16:00:33 2025 GMT
Not After : Aug 24 16:00:33 2025 GMT
Subject: CN=cfb5b8e5948e999d4bf7b1547eaeccaa3477b909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:16:52:2a:19:70:49:30:97:a5:b8:40:ac:
c1:68:4f:cb:eb:4a:c9:dd:03:de:d7:88:11:90:fa:
b2:3f:8a:ce:09:f6:26:41:ac:5d:c5:60:74:b8:28:
5a:90:20:63:d9:2f:10:25:90:d8:19:65:0b:e2:dd:
a1:fc:b8:60:7d:79:b6:a0:55:df:8c:78:df:fb:5c:
78:c4:6a:1c:c0:f5:7b:49:b7:54:48:62:ae:79:9f:
c5:d1:88:88:a2:7d:27:c9:27:98:53:c4:7a:ec:77:
16:19:6b:61:77:26:1f:91:a4:4b:1f:a6:1d:4d:7a:
c9:41:35:e1:ce:42:a5:a0:d0:b3:c3:84:06:27:9c:
5c:0a:59:39:e7:38:52:40:5d:0f:9c:76:51:98:9a:
85:dd:32:13:2c:c3:67:a5:36:a9:89:ab:44:90:df:
8e:1e:ca:0c:50:55:d1:44:a3:07:55:0a:f1:71:84:
1e:e5:bd:f6:ff:b4:59:28:c0:6f:a9:23:a6:6d:2c:
5c:cc:31:dd:d9:2a:ff:3f:a2:2c:50:23:7a:65:82:
05:1e:91:78:83:7e:02:07:a8:16:ed:18:66:e1:31:
cc:61:df:bc:42:11:32:40:07:70:23:3f:6d:e4:73:
41:2c:c2:f1:43:d5:f9:19:6d:f6:ba:c3:21:d9:7d:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B5:B8:E5:94:8E:99:9D:4B:F7:B1:54:7E:AE:CC:AA:34:77:B9:09
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:f4:2c:6c:24:87:66:8f:b7:0f:e9:af:66:28:22:b0:20:
ea:d9:c0:a7:3f:79:99:ea:76:d3:ae:37:6a:70:af:81:3d:ee:
0f:78:66:0b:bc:4d:00:d0:7e:98:64:15:80:11:ce:3b:31:cb:
c9:2b:c5:ab:c8:ba:32:2c:78:a6:aa:db:b5:1d:a8:9f:fb:b6:
d9:d9:fb:11:87:04:d9:27:25:02:ee:7a:82:d2:be:4c:d7:3f:
66:17:3c:01:19:cb:ff:b8:89:df:a0:42:8d:e9:64:c5:a6:82:
da:f9:4c:09:0b:55:28:99:c6:66:24:ee:c6:91:fc:9a:2c:75:
7f:b6:cf:81:a5:b8:7d:09:30:7b:f3:dd:2f:20:b9:37:3d:d8:
3f:e7:6a:d3:5e:98:c1:03:af:bd:7b:3d:03:f7:54:09:94:ac:
c9:7b:8e:f7:46:f4:1b:34:ef:ac:42:74:a9:97:bf:3f:8f:e5:
d2:95:c9:99:00:47:cd:1a:4a:44:a4:4d:d2:c7:91:94:03:a7:
54:87:7f:69:47:bd:6c:27:d2:17:e0:90:87:3e:26:ab:0d:24:
9d:2e:c1:5d:b3:c6:ce:c1:42:3d:6e:e2:23:fb:84:32:1e:ba:
e2:d3:ed:17:a1:ed:09:1e:bb:7f:e9:14:98:27:ea:c7:64:e4:
e7:a1:aa:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqP9gepPmngAyeXo+gNFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjAxMDc3MjY1MTcwMmEyZDMzM2M4MzE1ZjFhZTkyZjZj
Yzc0OTAwHhcNMjUwODIzMTYwMDMzWhcNMjUwODI0MTYwMDMzWjAzMTEwLwYDVQQD
EyhjZmI1YjhlNTk0OGU5OTlkNGJmN2IxNTQ3ZWFlY2NhYTM0NzdiOTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WMWUioZcEkwl6W4QKzBaE/L60rJ
3QPe14gRkPqyP4rOCfYmQaxdxWB0uChakCBj2S8QJZDYGWUL4t2h/LhgfXm2oFXf
jHjf+1x4xGocwPV7SbdUSGKueZ/F0YiIon0nySeYU8R67HcWGWthdyYfkaRLH6Yd
TXrJQTXhzkKloNCzw4QGJ5xcClk55zhSQF0PnHZRmJqF3TITLMNnpTapiatEkN+O
HsoMUFXRRKMHVQrxcYQe5b32/7RZKMBvqSOmbSxczDHd2Sr/P6IsUCN6ZYIFHpF4
g34CB6gW7Rhm4THMYd+8QhEyQAdwIz9t5HNBLMLxQ9X5GW32usMh2X0qdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+1uOWUjpmdS/exVH6uzKo0d7kJMB8GA1UdIwQY
MBaAFKZgEHcmUXAqLTM8gxXxrpL2zHSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWIt
NGZhNzFmMjRlZTQzLzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWItNGZhNzFmMjRlZTQz
LzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErr0LGwk
h2aPtw/pr2YoIrAg6tnApz95mep20643anCvgT3uD3hmC7xNANB+mGQVgBHOOzHL
ySvFq8i6Mix4pqrbtR2on/u22dn7EYcE2SclAu56gtK+TNc/Zhc8ARnL/7iJ36BC
jelkxaaC2vlMCQtVKJnGZiTuxpH8mix1f7bPgaW4fQkwe/PdLyC5Nz3YP+dq016Y
wQOvvXs9A/dUCZSsyXuO90b0GzTvrEJ0qZe/P4/l0pXJmQBHzRpKRKRN0seRlAOn
VId/aUe9bCfSF+CQhz4mqw0knS7BXbPGzsFCPW7iI/uEMh664tPtF6HtCR67f+kU
mCfqx2Tk56Gqkg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:09:41 2025 by rpki-client