Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json)
Hash identifier: d2GjOTKofxSR4a9GPx2QUmxQbieQmatGrJMinJetBwg=
Subject key identifier: 93:B5:61:17:07:98:FC:3B:98:BD:78:CC:5E:65:A6:AB:C3:5D:3A:A3
Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Certificate serial: 01984B546BBFD34538DA0AED74E1BDB8D7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
Manifest number: 092A
Signing time: Sun 27 Jul 2025 10:01:20 +0000
Manifest this update: Sun 27 Jul 2025 10:01:20 +0000
Manifest next update: Mon 28 Jul 2025 10:01:20 +0000
Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: 9fpAwZ+KAu3DSts8eEJB8zuQc6ar6I38Uv1jpDlii74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:6b:bf:d3:45:38:da:0a:ed:74:e1:bd:b8:d7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea
Validity
Not Before: Jul 27 10:01:20 2025 GMT
Not After : Jul 28 10:01:20 2025 GMT
Subject: CN=93b561170798fc3b98bd78cc5e65a6abc35d3aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:48:b8:31:ac:8d:5e:a7:a3:31:a3:e7:bc:b5:
e2:05:b4:6b:19:69:ba:83:5c:df:98:fa:f7:04:ca:
f8:19:39:73:8b:f7:9d:53:4c:22:34:91:46:fb:c8:
a9:cc:98:db:67:c2:69:45:67:6d:a7:24:fa:25:d5:
28:ed:56:55:c2:2b:0d:f8:fd:54:07:97:45:47:d8:
f7:35:41:48:25:6f:61:3b:7b:9c:d0:56:31:14:5b:
e6:89:7e:dc:a1:6b:ce:11:79:51:8f:48:2a:94:53:
90:10:b9:0f:f1:2b:21:e3:b5:2d:e6:8a:15:c9:92:
df:5a:0b:e7:3c:ad:39:45:0b:e0:7a:42:3a:69:24:
3d:f3:35:f5:6f:ab:e1:52:bf:3d:59:44:d1:97:8c:
49:af:16:41:d9:5b:61:7b:cd:1c:70:a7:61:1c:9d:
91:76:d4:b8:ed:ca:df:a5:e0:c1:93:8b:2c:20:04:
80:ca:7c:1a:4e:0e:44:06:dc:13:be:7a:f5:2d:56:
b3:24:28:e9:12:b6:fc:9f:86:e5:85:0d:6e:d0:ee:
f9:f6:5a:83:94:d3:83:d3:ec:64:db:81:ad:5d:1e:
d3:19:5a:52:32:7f:d5:c5:7d:26:50:53:3d:8d:dc:
5e:40:ae:2f:aa:70:6b:a6:83:40:d2:04:94:b8:30:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B5:61:17:07:98:FC:3B:98:BD:78:CC:5E:65:A6:AB:C3:5D:3A:A3
X509v3 Authority Key Identifier:
keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e2:af:aa:d8:24:e9:5b:44:ac:f8:29:ed:16:3e:01:08:ec:
cc:19:2d:67:be:9f:28:f3:11:87:04:52:1a:93:0f:44:5c:94:
6c:dc:93:b0:ac:6b:0b:95:b7:0e:1b:6c:b8:05:96:22:07:e8:
a5:44:1b:d5:fa:23:b5:7e:06:3b:c4:69:17:c7:b4:9b:11:19:
1f:de:f9:6b:3b:dd:f6:3a:23:15:48:a9:b1:bf:ff:46:f0:68:
b9:34:99:87:26:56:a7:3f:ba:a4:32:5e:8b:37:6e:86:2a:2d:
d4:5b:94:9a:88:4b:cb:b3:4b:5c:04:33:f8:85:d6:bf:c5:b6:
a7:3c:4b:ce:23:8f:bb:07:ec:a7:c8:c1:4b:75:58:23:58:b0:
ab:7e:f3:9f:09:bb:3b:ab:a1:af:07:a4:50:20:28:3d:ef:f1:
7b:5d:ee:d1:33:a3:27:67:88:a4:67:ae:c8:fd:3b:6f:ea:01:
67:44:e8:5d:6c:9b:c0:1c:fe:46:fc:94:2e:53:3a:40:8e:1e:
c6:05:51:16:ad:45:db:9e:8a:83:a8:a3:91:eb:cd:14:0d:d0:
fa:41:0e:80:59:cd:aa:ff:59:23:bc:bf:dd:9d:9b:ca:c9:ce:
a5:64:0d:23:2a:3e:49:b7:18:d7:b5:77:ce:23:cb:f7:25:40:
47:99:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:43 2025 by rpki-client