Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier: SG4X9uetvqZs/kcbw0WJn8rGOPyxFn3/MUmEug+bnOc=
Subject key identifier: 2B:50:A6:B0:55:9A:B5:79:78:86:56:72:A6:62:E8:71:50:EC:2E:DF
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer: /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial: 0198D73B4D0EBAC27E2FDE85D8A8EF7A6BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number: 0676
Signing time: Sat 23 Aug 2025 14:00:44 +0000
Manifest this update: Sat 23 Aug 2025 14:00:44 +0000
Manifest next update: Sun 24 Aug 2025 14:00:44 +0000
Files and hashes: 1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: 3zChIUAyy+6aaYvCRVXyf8pVohGHwkO5UYcWqiUeF+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:4d:0e:ba:c2:7e:2f:de:85:d8:a8:ef:7a:6b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
Validity
Not Before: Aug 23 14:00:44 2025 GMT
Not After : Aug 24 14:00:44 2025 GMT
Subject: CN=2b50a6b0559ab57978865672a662e87150ec2edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:aa:79:bd:c2:65:3d:8b:af:06:d3:de:4f:
d0:95:10:4d:1a:53:d8:70:f2:e7:f7:52:45:5f:5c:
0a:9f:e7:b2:e3:bc:16:32:62:0a:d1:40:c1:0f:c8:
79:59:1d:9c:d5:bc:36:88:cd:f7:49:c7:f8:1c:54:
49:e7:b9:39:3e:dc:64:86:05:43:7a:60:0c:9b:b3:
97:fd:17:00:b8:e0:71:1d:0d:a1:05:bb:d4:f1:bf:
11:8b:83:c6:67:a3:b1:c2:05:a4:87:9e:c0:63:33:
7e:3f:b7:c1:92:5e:07:54:8e:c1:8a:f7:72:f1:be:
39:68:5b:75:f1:c2:6e:87:d6:bb:b1:85:2a:7c:8e:
9d:f2:13:4e:2b:27:f9:87:0f:7c:fa:cb:18:a9:da:
cc:15:0f:8c:6d:bb:6a:4c:bc:d2:ee:b3:6b:a3:49:
7c:04:35:48:84:d7:ba:3f:e0:45:fa:7b:29:b2:1a:
cf:2f:5a:fd:f7:f2:7c:ba:d9:49:0f:a5:6b:76:c5:
44:8a:fc:c8:34:fb:9b:43:1b:40:c6:52:8f:49:2b:
02:dc:44:24:ba:c1:5b:ba:d2:24:fe:66:05:16:b3:
b2:24:47:2f:b8:dd:fa:24:59:d4:42:c9:03:b6:04:
c1:4a:2c:3e:e2:d6:16:4e:9a:e5:46:ba:50:0e:7b:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:50:A6:B0:55:9A:B5:79:78:86:56:72:A6:62:E8:71:50:EC:2E:DF
X509v3 Authority Key Identifier:
keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:11:33:97:93:6d:e1:11:dd:19:1b:c5:ee:ef:26:84:d4:99:
31:8e:71:9e:16:dd:47:f8:7d:23:df:f6:24:aa:0b:9c:a6:f6:
05:c0:70:e3:cb:d8:df:42:05:73:9e:34:5a:e3:60:62:42:2c:
b7:60:38:b2:57:79:cb:75:d1:df:62:eb:a1:87:ef:f4:6b:66:
77:c0:4a:63:ff:11:05:74:74:22:cf:f3:3e:7d:2d:da:36:d9:
2b:ac:b9:7c:d2:11:61:ef:be:e0:48:bb:f2:0c:62:36:98:ce:
de:fc:84:d6:ae:4a:53:66:39:52:ac:29:1f:64:3b:b6:cd:d9:
70:4e:a3:b0:51:b8:d2:8b:9c:a4:25:08:12:86:48:a5:69:e0:
04:b1:bb:84:1e:00:95:a1:b5:53:e9:cb:1e:ef:26:8c:14:2d:
08:5e:b0:60:08:f9:74:c1:21:b3:9f:a5:01:4d:55:57:36:e5:
ff:8e:35:14:13:8d:ce:ac:79:36:d8:bb:9b:87:0d:f8:59:f2:
60:bd:db:c8:c5:8c:3b:d2:26:e2:95:1f:63:46:4d:ec:41:88:
c6:1f:3a:f8:6d:fc:7c:16:15:34:1c:95:8d:ab:e7:82:cb:98:
38:c9:22:1b:34:77:05:43:30:0f:89:cc:b9:9e:fe:bb:19:8b:
56:5d:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:28 2025 by rpki-client