Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
File: pC0LgmZEoYOHz4Mi235kavY9mGo.mft (raw, json)
Hash identifier: D1DjgNlOVdHYgGkGIcVp3HEe3G8EYkdPShX/xAHNrNc=
Subject key identifier: 55:FE:D6:56:F9:0D:17:45:8B:9F:C6:32:EF:BB:BD:4A:75:A3:C8:8E
Authority key identifier: A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
Certificate issuer: /CN=a42d0b826644a18387cf8322db7e646af63d986a
Certificate serial: 01984852EFF74A7B6509871C02F235E563CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
Manifest number: 036B
Signing time: Sat 26 Jul 2025 20:00:51 +0000
Manifest this update: Sat 26 Jul 2025 20:00:51 +0000
Manifest next update: Sun 27 Jul 2025 20:00:51 +0000
Files and hashes: 1: pC0LgmZEoYOHz4Mi235kavY9mGo.crl (hash: Id/amSfgPLER4A2NJO5l8GRO6ghROWF6tCf2kppjsQE=)
2: tHHfiSksDZsfZV-Vj9_kGC4h-Ro.roa (hash: EIcBQ1/xG4TmRqAx5pqcLS0viz8fwAhZIDtmSkzjKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:ef:f7:4a:7b:65:09:87:1c:02:f2:35:e5:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42d0b826644a18387cf8322db7e646af63d986a
Validity
Not Before: Jul 26 20:00:51 2025 GMT
Not After : Jul 27 20:00:51 2025 GMT
Subject: CN=55fed656f90d17458b9fc632efbbbd4a75a3c88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:8f:b1:37:ff:57:06:eb:d2:95:9c:c0:d3:
48:c8:1a:62:41:29:7e:0d:f5:4b:ad:4d:41:ee:5e:
be:e3:c4:09:be:50:3b:92:29:b6:e6:f7:75:0e:f4:
e7:f7:67:3e:b3:59:f9:ac:e2:82:a3:97:fc:5c:0c:
f2:c1:0c:d8:68:9f:b0:9b:65:ae:93:b8:9b:fd:f4:
ad:4f:a2:7b:8a:ec:68:0c:db:af:ee:69:49:c0:c5:
79:fe:22:cf:62:d8:ae:c5:f3:37:22:c7:f3:d6:bb:
15:57:3c:ac:6b:6a:e1:84:68:c8:d1:84:dc:db:06:
03:b7:79:89:3d:75:22:98:3d:5c:a6:c7:68:15:6b:
44:c6:a2:65:83:bc:71:69:b2:af:ab:10:af:f0:b2:
de:32:66:d7:85:3a:03:02:78:17:b0:f2:f3:fd:87:
6c:c8:52:dc:a6:3f:55:36:fc:4a:0a:03:fe:01:44:
d0:53:03:b2:79:04:e4:17:a3:24:be:4d:91:5b:04:
bc:31:0f:59:f3:41:6d:9b:be:e1:09:ec:ea:6a:30:
3b:48:df:44:59:b0:df:29:ec:fc:e5:4b:f5:02:5a:
06:40:cb:dd:73:18:87:18:2b:8c:95:b4:ef:a3:53:
d4:a3:57:15:6f:92:5f:df:aa:b0:2d:ff:c8:cf:51:
ec:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:D6:56:F9:0D:17:45:8B:9F:C6:32:EF:BB:BD:4A:75:A3:C8:8E
X509v3 Authority Key Identifier:
keyid:A4:2D:0B:82:66:44:A1:83:87:CF:83:22:DB:7E:64:6A:F6:3D:98:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pC0LgmZEoYOHz4Mi235kavY9mGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/2260f2-3ccd-44e5-8428-e82d5ee4e40f/1/pC0LgmZEoYOHz4Mi235kavY9mGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:71:62:e8:2e:e9:d1:61:fe:ab:e4:a1:b4:f0:18:57:2f:da:
ce:39:bf:37:8f:13:51:ee:34:8a:55:26:98:fa:3f:05:75:ee:
25:85:b8:65:dd:ee:4a:f9:8f:95:46:f2:85:88:3e:19:28:93:
6c:1f:60:e8:d1:ea:f7:a4:d3:15:65:64:5b:f9:26:03:d1:c2:
9a:ca:14:57:dd:9e:32:ae:9d:ac:ba:66:02:d2:4c:6c:59:1f:
ec:9d:d2:ad:16:79:7b:73:ba:ff:c6:a5:3b:01:bd:67:84:5b:
13:e7:25:70:0f:a3:2a:60:5e:01:0a:50:31:21:b0:58:8c:a1:
70:06:e9:eb:8a:dc:9e:dc:94:c8:bf:19:00:10:e6:8e:86:cb:
34:77:ae:dc:fc:52:75:75:7a:0b:3b:cc:02:ba:6f:1b:ad:b6:
b9:67:a1:ac:88:c8:aa:0c:df:cc:b3:f1:96:01:0e:27:06:5b:
e0:82:01:59:20:47:54:67:63:9f:7b:98:c5:37:73:35:82:3a:
70:6b:64:8b:3b:87:1c:f8:03:d1:f8:48:3b:e5:c2:5d:3f:2a:
bf:b8:be:4f:c4:e5:f5:e7:03:f6:c3:04:2e:6c:40:73:2e:d3:
90:0f:4f:bf:a9:e5:7c:05:e3:66:c9:84:aa:0b:8f:bf:5f:98:
0a:d9:40:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:22 2025 by rpki-client