Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: jVU8iReWmZH+KWSpAFW/VMzEBhu0OAt+5T7Nu1YMsAY=
Subject key identifier: EB:26:27:F2:9E:93:AD:DB:F0:D4:6C:34:EA:10:73:97:23:FD:03:D6
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 01984B545F1BA7B9FBE40D58236E9774627D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 10:01:17 +0000
Manifest this update: Sun 27 Jul 2025 10:01:17 +0000
Manifest next update: Mon 28 Jul 2025 10:01:17 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: iUw8NSr70iWYCcTOXaVPg25jgQwpVxRc5DeizwjRJYc=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:5f:1b:a7:b9:fb:e4:0d:58:23:6e:97:74:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Jul 27 10:01:17 2025 GMT
Not After : Jul 28 10:01:17 2025 GMT
Subject: CN=eb2627f29e93addbf0d46c34ea10739723fd03d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:78:1d:7b:90:92:66:35:80:17:8f:dc:23:61:
5f:56:d5:b8:94:96:30:0e:bb:b5:ef:b5:c2:94:f9:
ff:10:d4:e3:f8:0b:13:aa:d2:4a:73:23:bd:78:43:
ba:b7:d6:fe:cd:2f:4c:2a:82:f1:68:ad:df:dc:19:
c2:41:c2:10:aa:63:fb:ab:4b:c0:d9:79:2b:80:11:
d5:b6:82:bd:26:59:5f:f6:5a:c2:22:6c:80:f5:d0:
36:bc:84:54:12:71:a7:ef:0c:09:3a:10:e2:38:f0:
bd:2a:aa:74:9a:d8:00:c1:1e:88:cb:0a:56:a9:8e:
56:b8:12:b3:4f:b0:ba:54:bc:b4:23:a0:30:63:10:
26:f1:a3:76:3f:2e:27:6a:0c:e5:92:c2:a8:47:27:
e4:b0:92:9b:9d:20:85:7d:09:ce:22:4f:ea:a8:9b:
34:2b:79:79:ef:84:d6:3d:bd:c1:eb:33:c8:9f:27:
2a:5f:dd:22:47:f4:dd:32:6c:c0:28:23:e9:cf:85:
7c:fe:38:d7:d6:a8:07:b3:60:37:c5:49:3c:25:bf:
cd:8e:fa:af:3a:32:b8:21:05:02:23:c1:c3:a4:4e:
18:d8:82:e1:3b:fb:79:96:56:49:66:bd:58:b3:b1:
e9:b1:c8:a7:60:61:63:39:8f:8c:93:54:d6:8f:54:
ee:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:26:27:F2:9E:93:AD:DB:F0:D4:6C:34:EA:10:73:97:23:FD:03:D6
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:6c:e7:0b:25:1b:38:d4:93:2b:2c:d5:43:34:e9:2a:fa:1e:
77:63:b6:61:01:da:c4:ca:f4:cb:0f:d7:eb:6c:8f:c5:1f:c2:
c4:2f:05:c8:f2:78:f6:21:79:73:04:66:61:1b:a8:a7:35:d3:
e0:12:73:56:35:77:41:3d:f9:8c:a5:81:2e:76:4c:a3:ee:f2:
2d:b9:a8:c8:55:a6:44:db:84:73:5e:f5:9d:34:6c:be:01:be:
88:6a:b4:bc:31:e7:be:bd:5f:20:ff:68:20:a9:dd:93:67:68:
f3:5f:39:aa:1a:46:62:aa:7c:87:8a:40:de:2f:8a:85:b9:98:
de:56:99:6f:32:ae:8e:64:88:c8:60:2a:5a:2a:41:65:7d:a1:
d3:03:d2:81:6e:c7:fb:e2:41:9a:d4:2e:77:62:2a:d3:f4:68:
ff:b1:44:56:07:2d:f8:06:ba:3f:a1:d2:d2:27:23:66:4d:01:
d7:96:31:d9:6a:f7:62:02:ee:bb:e5:75:97:0c:98:83:f8:43:
1c:3f:51:96:a5:59:5b:02:d0:6e:ab:1d:ba:e7:4e:9b:77:07:
fe:e8:11:4f:91:24:cd:80:e8:e1:eb:07:fc:9f:25:03:ed:9a:
00:38:1a:fd:44:56:63:b3:66:14:7f:fc:20:77:47:eb:03:1f:
b9:bc:d2:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:15:50 2025 by rpki-client