Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: GprxThkjNl0GLQomH4KTvbjYwrdXEChM70xtKl8ghQ0=
Subject key identifier: BC:57:C3:49:F2:B4:BD:E8:CB:59:C2:0C:F1:29:AE:7A:78:35:CD:B6
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 01984AE58D3CAEC11B9339F9B2EB6D76C799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 0491
Signing time: Sun 27 Jul 2025 08:00:14 +0000
Manifest this update: Sun 27 Jul 2025 08:00:14 +0000
Manifest next update: Mon 28 Jul 2025 08:00:14 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: 5nl3wgOS+7CebRJ2kFW2J3dvRjTtCVFiImBLxUqfWIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:8d:3c:ae:c1:1b:93:39:f9:b2:eb:6d:76:c7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Jul 27 08:00:14 2025 GMT
Not After : Jul 28 08:00:14 2025 GMT
Subject: CN=bc57c349f2b4bde8cb59c20cf129ae7a7835cdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:8e:08:6b:35:a2:b9:99:4c:4b:0a:78:da:
84:42:d5:9f:19:1f:d6:65:9e:93:a4:41:9e:df:f1:
db:b0:f9:bb:ce:01:02:dd:83:72:da:ed:92:77:a3:
8b:e6:bf:e2:73:6a:55:51:d9:42:7d:67:26:26:84:
c3:43:58:d6:0a:7c:49:24:c0:ce:6a:62:77:1f:6f:
2b:51:c4:42:f9:9e:60:60:35:ad:e9:ee:68:ea:80:
33:50:22:d3:1f:9e:34:91:54:24:05:d7:c6:53:63:
06:e9:c1:d5:c7:7c:7f:df:c6:22:2e:f0:23:dc:37:
e7:5b:77:f4:b6:4b:40:13:4b:d6:05:49:ca:50:f2:
c6:9b:5b:d0:45:d5:df:ab:b5:e5:5c:8d:56:75:24:
b7:64:ed:7e:c1:9c:a8:1d:28:63:d7:c7:37:69:3b:
61:69:9f:29:16:11:ed:ca:57:b1:81:2c:70:e5:7e:
2a:e9:c4:04:91:dc:9e:b5:b2:7c:ea:35:85:0c:69:
5a:b4:94:d9:12:a1:50:76:27:83:db:01:30:94:51:
5a:83:9d:8c:5f:90:2d:38:44:b1:f3:b5:48:ca:f4:
e0:82:93:ce:03:82:f5:8d:cb:40:ba:95:b3:58:69:
3d:90:93:c7:a2:c7:1b:0b:87:8e:73:31:14:69:2d:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:C3:49:F2:B4:BD:E8:CB:59:C2:0C:F1:29:AE:7A:78:35:CD:B6
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a1:9e:9b:21:0b:d2:a5:d9:8e:11:75:bc:cd:df:20:9d:0a:
ac:2b:0b:a2:ff:25:bb:3c:c4:35:01:3e:f4:a7:d9:3f:ef:25:
cd:f1:54:a7:ee:af:cf:9e:7a:4a:68:44:27:12:3b:db:2d:cb:
bd:e1:58:b3:fb:75:ca:1b:0a:53:ad:25:f9:c1:7a:bd:18:f3:
3f:73:b3:34:84:20:75:42:4f:e1:72:a8:d3:36:75:db:b5:89:
4b:c3:a6:99:bf:0e:05:b1:71:47:66:01:d0:14:e2:c0:d1:88:
af:f7:d9:f5:9e:13:06:79:ea:6b:9b:86:26:4b:39:f3:b5:2d:
9a:ed:e8:0b:7c:9f:00:b9:a6:04:65:d7:75:18:dd:26:77:97:
6e:63:aa:bd:b5:92:e8:c2:02:d4:8f:25:a9:13:58:20:9c:25:
b9:b8:9c:0f:76:bb:5d:dd:33:fe:62:0d:3e:b9:31:c0:11:da:
09:09:eb:6b:c2:bd:67:06:7b:3d:79:32:d4:0c:06:78:63:f3:
04:c8:0d:7f:85:7e:eb:29:c0:22:d3:b9:c8:88:96:99:b7:8a:
f2:07:70:2e:9a:ed:05:55:a2:15:80:8c:2c:b1:1b:51:d5:d0:
69:9e:83:c7:59:6c:9c:3f:f9:12:1b:3e:36:53:7b:2f:2b:2b:
3c:1a:49:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:47:11 2025 by rpki-client