Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: YU+4ToFcTjAnnp9tzi1eGdv5/tr3laI5KvA0C+WmgZk=
Subject key identifier: 3E:F6:B3:BD:17:D9:0B:DB:CA:79:AB:F5:50:D8:D7:55:C1:9B:05:41
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 019849D2DF8536C8D81A8E49D4B8E8767AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0B74
Signing time: Sun 27 Jul 2025 03:00:13 +0000
Manifest this update: Sun 27 Jul 2025 03:00:13 +0000
Manifest next update: Mon 28 Jul 2025 03:00:13 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: E0D36IuRYe+aY0KLmgw1ViPL/v2Q4Hv6MZRBEame688=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:df:85:36:c8:d8:1a:8e:49:d4:b8:e8:76:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Jul 27 03:00:13 2025 GMT
Not After : Jul 28 03:00:13 2025 GMT
Subject: CN=3ef6b3bd17d90bdbca79abf550d8d755c19b0541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:f9:20:ac:e7:87:8a:35:c3:d5:23:90:36:
51:d3:5e:f4:e3:2d:57:f0:0c:9c:c0:8e:75:0c:7f:
49:13:16:bd:04:de:84:a3:31:9f:07:0e:20:21:98:
b3:c3:62:5f:fa:ef:c6:48:b3:69:d2:8c:b0:a4:88:
b1:9c:a1:e0:a9:28:d7:46:85:eb:24:1d:ee:48:25:
d6:30:df:74:1c:27:eb:80:76:6d:7b:c1:7b:22:b5:
03:6f:10:d4:22:5e:e0:0f:75:53:bf:0e:92:4a:b5:
9e:f7:3b:2b:c3:6f:e2:f2:fc:3c:2b:11:f7:a8:9a:
97:fd:b0:ac:04:d9:ea:52:34:7e:9c:e3:0a:0d:3c:
17:6f:61:89:ab:11:83:f1:68:0d:5d:e9:51:d3:95:
2a:90:87:c9:b5:0d:79:6a:65:b1:e2:2c:34:12:4c:
0c:7d:a9:79:6c:8f:89:c2:36:31:5b:3b:0d:b6:d5:
f9:0a:7e:c1:15:0c:65:95:41:85:1f:39:31:a1:ed:
f2:40:c0:04:8b:4d:f0:e9:42:61:d2:07:93:35:a7:
95:4d:b9:b3:d6:b6:b9:03:68:a7:d3:db:bb:a6:0e:
1a:fc:60:33:a9:d7:a0:89:46:1c:f4:93:c2:75:e9:
31:b5:2a:82:33:9a:5f:32:79:dc:bd:15:01:7f:b7:
ae:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F6:B3:BD:17:D9:0B:DB:CA:79:AB:F5:50:D8:D7:55:C1:9B:05:41
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:09:a9:c2:4e:ff:1e:94:14:8d:19:48:b3:eb:5e:d5:a5:8b:
2d:59:a9:97:04:4e:2f:4a:28:ca:92:0d:bc:20:5d:89:1b:3b:
0c:66:3c:68:9a:dc:47:79:e3:b7:5c:f1:76:7c:a1:b9:59:b7:
a4:dd:ca:11:a2:ca:09:ff:99:98:97:97:91:e4:b8:7d:8c:86:
8e:c9:f5:da:1c:92:d2:96:bd:91:0a:88:76:b1:e2:8c:0b:63:
b4:fb:e3:08:d1:3b:ea:6e:43:54:ed:4a:da:06:22:60:ce:1b:
c0:d7:36:5d:fc:82:dc:bc:fc:12:1c:a9:da:00:f9:dc:80:84:
44:1f:d0:5a:bb:19:09:71:8b:18:8e:1d:fe:56:47:21:de:82:
40:ab:83:81:00:3e:87:09:16:12:a6:bd:12:99:ec:a4:7d:f8:
6f:61:29:d6:a5:7f:2e:24:ec:92:28:2e:58:49:29:ec:55:c3:
28:a6:da:fa:f1:7d:8f:10:61:6b:2a:70:bf:ff:b5:7f:6d:94:
86:a3:0a:26:69:25:a5:ec:ad:49:84:54:f4:74:92:8b:a2:8b:
c3:62:13:d8:b4:63:60:55:6b:38:f1:94:8c:b2:27:fc:ad:66:
ca:73:53:5c:b5:e7:34:62:f1:68:93:8a:6f:48:1d:31:3a:fa:
7f:cb:de:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:26 2025 by rpki-client