Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: eNlux8zPSMLtRGfx8X49+rfZplp3TwYjY/5cq9/r0wk=
Subject key identifier: 49:23:88:17:67:DD:2C:71:20:31:DB:AA:F5:38:43:F0:6E:47:54:9F
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 0197B7EA65341BBEE3A54B3452D81FF9CB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 14EE
Signing time: Sat 28 Jun 2025 19:01:21 +0000
Manifest this update: Sat 28 Jun 2025 19:01:21 +0000
Manifest next update: Sun 29 Jun 2025 19:01:21 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: IBvw/sw4CvXQ1KbFOvEO4KtuaQSTXKO7fZz/R/dw7u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:65:34:1b:be:e3:a5:4b:34:52:d8:1f:f9:cb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Jun 28 19:01:21 2025 GMT
Not After : Jun 29 19:01:21 2025 GMT
Subject: CN=4923881767dd2c712031dbaaf53843f06e47549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:01:7e:bb:b1:32:18:3b:92:62:c6:90:ee:
c5:58:e4:10:c7:52:d4:04:75:f2:96:e7:93:d6:86:
64:78:b8:bc:b9:68:8f:31:3c:28:be:65:f5:8a:96:
61:43:de:cd:13:43:00:b8:27:a7:70:3f:24:a3:9f:
b0:b5:7b:44:92:06:0d:97:a3:ad:fa:22:45:eb:3b:
d4:36:58:f7:32:9f:b6:47:ba:a3:82:ca:70:d3:30:
82:4d:20:08:c8:04:d1:1c:45:e2:cc:51:70:3e:50:
db:d3:cd:22:38:2c:bc:e6:11:3b:08:ff:3d:6c:17:
26:4c:b1:e8:c3:67:86:66:fd:1e:e5:e6:24:38:a9:
1a:c0:6b:f4:1b:3b:2c:0b:b1:c4:af:ed:75:df:26:
7c:91:ac:0a:d7:77:fd:4f:ba:6c:67:4a:41:be:b4:
8c:f1:bc:af:c4:b7:df:71:bc:0e:de:7d:b5:16:dc:
9f:9f:2a:1b:03:2e:6e:18:b5:e2:92:ed:35:de:de:
e3:7d:f0:3f:89:0a:cc:e4:6f:2d:a0:de:41:f0:74:
c6:b0:b2:3c:1e:67:62:01:38:59:87:e2:0d:79:76:
f1:05:94:53:61:9f:67:e9:78:04:b2:bd:83:ab:6c:
80:92:1c:44:e3:02:1d:d2:72:f7:13:a9:39:7b:3e:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:88:17:67:DD:2C:71:20:31:DB:AA:F5:38:43:F0:6E:47:54:9F
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:e6:28:c1:99:7e:b2:ee:88:e5:92:d4:b1:fc:ba:8a:c5:
52:fb:c6:b4:98:93:c3:80:75:46:04:7c:67:c5:2c:b3:5b:cc:
ec:b6:56:46:1e:40:8c:4a:b6:03:bd:eb:57:42:a7:8b:7c:39:
53:86:38:67:8c:8e:24:6f:20:73:4e:bb:f7:5f:ae:6a:e1:bb:
df:32:9f:b9:52:b6:5a:18:12:82:16:a1:19:c9:c8:09:5a:4b:
af:48:84:14:2c:74:eb:11:bd:8c:7d:8f:ff:be:27:8e:2b:ff:
c1:cb:75:73:37:bf:6e:b4:a9:9b:1a:17:2b:1d:b2:91:97:61:
de:17:e3:cc:01:17:89:eb:75:b5:2f:92:d0:4b:85:fa:96:ea:
b8:eb:fa:ed:00:d2:ba:83:4c:7b:4a:f8:ba:f6:7c:20:0e:28:
02:75:98:87:1e:7f:d2:14:fb:c1:c1:59:9a:9a:3e:2d:be:91:
28:f7:cb:d1:54:60:6c:6b:9f:01:2c:0e:da:53:44:02:46:7b:
7b:f8:8e:ad:f9:0f:22:cf:cd:81:83:d2:62:e5:ac:50:86:da:
8b:73:ae:7a:76:d3:b0:83:72:82:ab:7e:fb:2e:c7:cf:96:a0:
2c:86:59:55:37:c7:ff:34:1f:07:c2:3d:35:52:16:f6:a3:83:
1e:64:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:37 2025 by rpki-client