
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File: pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier: A3ofkv+NuYX28M1ivtAwrui6CYCVY8/pbFgF0+QSD2E=
Subject key identifier: 42:53:5A:C5:51:01:66:E1:32:39:0D:1E:7C:C4:AA:49:D2:77:99:CA
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer: /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial: 01974A7B0AFD57A81FE8A3955B2015751600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 13:01:06 +0000
Manifest this update: Sat 07 Jun 2025 13:01:06 +0000
Manifest next update: Sun 08 Jun 2025 13:01:06 +0000
Files and hashes: 1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: SCWkw5TudqL7F5vGjQHMdBT7PA8JsiiDAmUES0tZ7UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:0a:fd:57:a8:1f:e8:a3:95:5b:20:15:75:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Validity
Not Before: Jun 7 13:01:06 2025 GMT
Not After : Jun 8 13:01:06 2025 GMT
Subject: CN=42535ac5510166e132390d1e7cc4aa49d27799ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:82:48:27:74:8d:6d:a8:c0:f0:3b:4e:c0:
a9:a3:7d:eb:f1:10:95:3e:78:40:3f:4d:d3:84:7d:
2f:c6:41:c6:a0:80:e6:8a:b7:a3:b5:e6:54:4e:4a:
fc:69:9a:c9:c1:6c:02:a7:04:22:11:d4:63:8e:47:
d2:11:7f:39:a8:6c:77:90:24:d0:0a:b4:15:46:27:
1e:c5:1a:fc:67:5f:b9:5e:47:29:d1:b0:22:b5:4b:
a2:e4:e6:df:f2:a7:dc:05:3a:db:e2:dc:c9:3a:c9:
d3:b2:88:99:09:78:06:1b:76:9e:a3:91:24:ef:70:
f9:16:f8:bf:f5:bf:1b:9c:69:48:4d:a0:a7:6b:6e:
2e:c1:a3:3e:18:28:63:4f:0a:cc:c8:55:a0:f8:b8:
1d:0e:20:db:b9:ad:c3:04:99:97:95:10:5a:8c:4c:
de:52:a1:d6:ae:c4:b3:10:3b:dd:6e:b9:19:57:64:
5d:cf:d1:c8:47:eb:96:8c:7e:41:c6:60:e5:f9:54:
55:fe:fa:fd:ca:cb:28:18:87:a0:bd:5d:f0:8e:64:
fd:72:ed:ed:e6:d8:f8:e7:7a:99:ec:40:c2:f9:5d:
58:6d:08:32:93:9c:0a:b8:22:73:6c:c5:1f:f8:b5:
3b:9b:f6:9d:3b:09:53:88:ce:03:bf:9c:8e:be:2e:
89:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:5A:C5:51:01:66:E1:32:39:0D:1E:7C:C4:AA:49:D2:77:99:CA
X509v3 Authority Key Identifier:
keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:35:88:30:f5:3d:9e:e0:38:3b:a2:19:6e:1a:44:ff:59:74:
48:3c:bc:a2:88:78:76:f0:7d:eb:2a:23:5f:f9:72:1b:95:1b:
18:8b:08:3c:03:d5:45:d2:05:a3:39:a2:cc:86:33:88:6a:3e:
54:7b:ec:ca:a6:c2:2d:79:14:af:4e:22:df:5b:01:56:a1:2f:
9e:ce:3c:f3:e3:f0:f7:e1:5a:bc:38:d6:df:39:b3:cb:9c:5b:
f0:cd:2d:bf:64:06:06:42:db:24:a1:2f:43:8d:33:c4:7e:56:
40:c0:99:62:d8:44:13:5a:54:eb:51:2e:5e:da:48:aa:f9:3f:
a4:ab:a8:34:f4:6e:46:14:7a:a7:04:07:e2:06:3c:a9:6a:66:
a3:9c:b8:78:4d:6e:33:7a:96:52:27:68:56:64:36:1c:76:66:
b2:47:9e:13:ae:37:31:3b:f5:94:69:3a:cf:f1:65:aa:94:a2:
2f:d9:22:40:09:ac:5c:50:29:4f:7c:2f:4e:e1:cd:86:11:bc:
d4:0f:c8:03:b9:95:10:b3:ac:34:a5:a1:31:8c:e3:18:e4:a0:
80:4c:51:6a:85:24:0c:40:33:1d:3d:14:ef:25:0f:e9:98:5a:
01:43:41:de:5d:9c:b0:8b:01:11:c1:61:c9:f9:34:60:d8:72:
17:94:55:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:57 2025 by rpki-client