Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
File: cnPNrMHijwIT37KPPf2LnL3Txi4.mft (raw, json)
Hash identifier: LfHudDXxKSCAr96UQqRzTzL1P2JBKvp51MPFVpp5ito=
Subject key identifier: 71:5C:3A:92:C6:4F:84:05:A2:97:FA:EC:CB:FD:B1:59:CD:8A:02:ED
Authority key identifier: 72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
Certificate issuer: /CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Certificate serial: 0198481B55B53CF6BDE4FC26A31663BE567E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
Manifest number: 055C
Signing time: Sat 26 Jul 2025 19:00:07 +0000
Manifest this update: Sat 26 Jul 2025 19:00:07 +0000
Manifest next update: Sun 27 Jul 2025 19:00:07 +0000
Files and hashes: 1: cnPNrMHijwIT37KPPf2LnL3Txi4.crl (hash: i5sQ7jPi6zViFFv6QiSWB96/SJCktsiIGvrqG5ajE4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:55:b5:3c:f6:bd:e4:fc:26:a3:16:63:be:56:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7273cdacc1e28f0213dfb28f3dfd8b9cbdd3c62e
Validity
Not Before: Jul 26 19:00:07 2025 GMT
Not After : Jul 27 19:00:07 2025 GMT
Subject: CN=715c3a92c64f8405a297faeccbfdb159cd8a02ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:14:73:32:e7:82:1c:82:2f:8e:74:de:58:84:
08:4b:8d:e9:5b:6d:83:e1:b4:60:23:29:3f:57:76:
26:61:87:a0:11:c2:84:47:18:a9:a4:75:4c:ee:a6:
7d:12:16:81:eb:8c:5d:0a:d1:59:b4:92:a5:33:3a:
05:16:a2:ec:42:30:75:3c:65:df:40:0f:35:02:1f:
62:f6:28:d0:f4:4b:32:13:5f:f9:41:5f:ff:a3:cc:
39:84:95:23:71:dd:09:bf:e3:30:ef:c7:f8:7e:4d:
2d:c8:34:7c:f8:2b:5e:cd:fa:0b:ba:e2:b2:85:58:
a0:1b:6c:57:68:ee:38:18:59:1e:97:a3:3a:89:7c:
6c:7c:4b:50:b8:ba:9e:c7:4d:14:46:68:b7:15:38:
7e:d3:3c:dd:b7:04:32:45:d9:0b:07:d0:d7:87:d8:
13:34:40:29:86:bb:98:08:8e:34:84:9b:4d:5c:d1:
5f:6d:75:cd:10:e6:d8:40:16:0a:3d:4d:c3:3c:66:
32:ba:24:02:d5:bb:32:21:60:7a:9d:57:2e:f8:04:
48:6a:5a:81:1c:e1:7a:18:85:c7:2d:30:21:17:ff:
36:71:d8:25:29:47:50:64:4c:aa:c8:ff:43:4f:8d:
39:5d:a6:65:fc:20:77:8b:58:b5:d6:45:a3:dc:16:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5C:3A:92:C6:4F:84:05:A2:97:FA:EC:CB:FD:B1:59:CD:8A:02:ED
X509v3 Authority Key Identifier:
keyid:72:73:CD:AC:C1:E2:8F:02:13:DF:B2:8F:3D:FD:8B:9C:BD:D3:C6:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnPNrMHijwIT37KPPf2LnL3Txi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/98c304-6532-4ac6-a162-c0a25b10902a/1/cnPNrMHijwIT37KPPf2LnL3Txi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0f:35:22:80:ea:81:05:c1:8c:35:ff:d5:cf:67:07:c4:35:
87:7d:10:95:b0:91:55:a4:b9:80:8d:d6:90:3f:77:69:1e:c9:
56:76:79:d6:13:8c:aa:96:cf:22:01:02:b1:26:84:02:57:0d:
72:a7:84:0d:64:4b:99:70:6e:fc:e9:53:75:86:91:c6:e9:7c:
43:1c:3e:f6:f0:cf:4d:a0:e0:b3:39:21:29:09:21:61:1d:82:
e5:06:2d:48:9c:5e:dc:a8:29:5f:01:f5:7f:08:5f:64:78:a4:
11:4f:33:52:89:b6:cc:ef:59:a6:58:f3:f6:c7:86:72:b6:c9:
35:f2:4a:5c:37:cc:2c:b2:86:38:d8:89:9d:0b:bd:f6:79:5f:
c0:4c:e1:c8:5f:6d:24:41:ca:7d:ed:4a:70:0b:8c:51:70:64:
91:c3:2e:f0:bd:8f:80:eb:ed:cf:f3:c6:a2:b9:5c:c8:03:91:
10:66:b6:ba:9e:2d:17:57:7a:5c:00:60:c6:d8:71:74:88:66:
eb:5a:49:8e:97:5c:f9:c9:07:b7:89:1c:5d:cc:1d:bb:41:62:
f8:aa:4d:64:8c:a1:bb:4c:93:37:cf:2d:d5:72:ce:f0:27:d5:
1a:6f:06:dc:dd:d0:fa:e1:36:2a:e2:a0:5a:bc:03:70:d0:f3:
32:1a:69:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:01:00 2025 by rpki-client