Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: 3huvKAzCgd9NDkI+LiCmooISIPcDGpxIiRDpP43/FCw=
Subject key identifier: BA:93:B8:D2:5E:B4:56:5D:80:40:83:AC:4F:DA:86:BB:C1:BD:26:AF
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 019849656509548D4B1045BF73702F7890DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 09FA
Signing time: Sun 27 Jul 2025 01:00:38 +0000
Manifest this update: Sun 27 Jul 2025 01:00:38 +0000
Manifest next update: Mon 28 Jul 2025 01:00:38 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: WCx9Qjx2/BTH13QboA7TIA3DOIY0dg/BaI2+nfUJZVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:65:09:54:8d:4b:10:45:bf:73:70:2f:78:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Jul 27 01:00:38 2025 GMT
Not After : Jul 28 01:00:38 2025 GMT
Subject: CN=ba93b8d25eb4565d804083ac4fda86bbc1bd26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:2a:2b:fc:38:0b:5c:48:20:0c:81:2e:44:
f8:60:e0:45:2a:78:b9:40:e4:cf:4a:99:08:fc:57:
4a:a6:fe:41:01:ec:47:b0:70:18:90:b6:43:7b:17:
b6:8e:07:dd:85:8c:ad:92:bc:bb:27:f9:fd:e2:4b:
47:90:98:25:cb:38:f2:68:c6:2a:1f:e8:4a:4b:ee:
db:16:da:6e:5b:a0:24:e7:6c:fc:17:d4:0a:31:de:
8c:18:7b:63:60:b5:8f:cb:b1:5d:60:4a:05:b6:30:
f2:c8:1e:a9:4c:35:ea:50:e1:fe:4a:c9:cb:13:54:
b1:ad:73:f2:f9:7c:68:b8:90:f2:aa:54:44:79:dd:
1a:53:e4:ed:36:f9:37:bd:21:aa:4a:1b:13:ba:f4:
7f:e4:f1:f3:0d:b0:d3:3c:4f:4c:9a:ee:29:6b:cb:
df:6a:17:74:80:f4:3c:1e:d7:ad:58:be:e3:90:94:
d3:79:08:1e:0f:1d:21:1b:c0:f7:2c:d9:35:8c:96:
26:26:ff:f3:7f:31:28:81:28:d4:16:29:f0:f3:e9:
6c:2b:63:36:ab:66:2b:43:23:73:b4:51:64:2d:54:
9b:ee:70:94:2d:6f:3a:c6:81:c6:0f:94:66:61:6e:
46:39:13:35:c3:70:19:61:27:61:1a:6a:45:70:f8:
dc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:B8:D2:5E:B4:56:5D:80:40:83:AC:4F:DA:86:BB:C1:BD:26:AF
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:e8:c9:da:c1:b1:de:ae:4b:5c:65:e0:50:92:ab:e7:08:
91:2f:5e:fe:57:7c:5a:72:1a:9a:a1:7d:ae:58:13:33:ac:41:
f2:81:3b:22:8e:0d:fd:de:53:60:48:1b:d8:dd:8b:63:2a:f3:
f3:a3:63:cb:d0:4b:08:09:fe:56:9b:5d:74:46:bf:42:78:34:
74:91:36:cc:24:d9:8c:f4:9b:46:64:5c:a5:30:4c:91:93:bd:
d1:84:c6:9c:43:90:c4:80:8a:69:82:d7:e8:34:b0:80:e6:df:
da:c6:6d:8d:c2:12:f6:80:7a:fb:75:b3:22:9d:ec:7d:a8:23:
28:f8:98:62:cc:d4:78:9f:0c:25:8a:23:fb:56:56:f8:bd:e4:
45:b2:36:15:28:5c:96:0a:0f:80:22:ca:ab:51:81:b5:51:73:
21:dd:9c:7d:45:c1:94:cf:7e:de:a6:68:9a:cc:12:18:f2:c0:
c4:81:98:df:4d:1b:a1:17:2e:fb:e1:57:4f:57:19:71:9c:ec:
6e:a8:d8:e6:df:e8:a9:a4:a4:c1:f4:d8:e5:a2:0a:2b:3f:49:
4f:30:6e:62:c7:84:32:bb:6d:ec:c7:ab:05:24:89:b3:20:4f:
f8:7a:8a:81:fa:c7:4a:19:de:3e:4a:ce:d3:f9:a8:fa:54:2c:
12:97:a8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:17 2025 by rpki-client