Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
File: pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft (raw, json)
Hash identifier: 7ltqfl4ihYr68RwRg/MlJZHMsIxuUoVFWJ544opTUxc=
Subject key identifier: C2:52:BE:32:52:9C:37:A0:79:31:A1:7B:4E:34:B2:D4:7A:CC:43:CE
Authority key identifier: A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
Certificate issuer: /CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Certificate serial: 01984AE5BE279E60835C12B8DD80F667FBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 08:00:27 +0000
Manifest this update: Sun 27 Jul 2025 08:00:27 +0000
Manifest next update: Mon 28 Jul 2025 08:00:27 +0000
Files and hashes: 1: pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl (hash: CEWNTkqFbqs1YcP6pRyFGTv+lqi5/wEsNX/Mw59wMeI=)
2: vUo_vlJ6sLUoSusR9Owa3qVO6yc.roa (hash: tQbWOVu74034awYo0QKVFApUcQf9SPwefFwA/Lt3iQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:be:27:9e:60:83:5c:12:b8:dd:80:f6:67:fb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4aa9bcd06ea6c565dd907ca04e5077d68c0664f
Validity
Not Before: Jul 27 08:00:27 2025 GMT
Not After : Jul 28 08:00:27 2025 GMT
Subject: CN=c252be32529c37a07931a17b4e34b2d47acc43ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:d9:f8:00:33:a8:55:0c:15:5a:8a:68:74:
2f:5c:22:03:4f:42:6c:fb:4e:cb:bf:af:21:9b:60:
68:f5:71:84:f1:f1:af:d5:ed:fc:43:3a:63:93:3c:
4e:dd:84:da:85:a8:3c:67:38:29:b5:3e:03:d2:8a:
4b:27:44:53:63:5d:66:db:57:e8:08:c7:ed:6a:88:
4c:94:2e:ec:f1:9a:c9:80:92:bb:01:51:32:2d:c3:
f5:7e:2c:38:18:c1:30:37:a9:52:01:44:58:50:e6:
e3:67:53:a1:3d:4d:a8:fb:fd:d0:10:40:80:37:f8:
aa:d0:d4:2e:7b:19:f5:80:50:1e:35:78:5c:1a:30:
82:db:07:66:9d:b6:82:3d:32:21:29:80:91:f0:6f:
f1:72:5f:14:03:40:76:aa:6e:96:57:fa:be:49:42:
86:0b:b0:08:50:43:f2:1e:eb:7d:fb:9d:43:05:37:
1a:17:57:48:59:6d:82:e5:e5:77:bf:aa:69:d6:92:
ad:e8:75:7c:3d:d7:42:7c:5a:83:d3:b0:0a:f4:97:
bd:ca:a6:14:6d:c9:c7:6a:91:33:77:1a:fc:22:04:
fb:48:4e:be:4c:73:cf:59:0d:c9:62:85:df:28:52:
cb:be:4e:3e:c2:bc:b1:ae:68:cb:6d:1a:52:ad:7d:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:52:BE:32:52:9C:37:A0:79:31:A1:7B:4E:34:B2:D4:7A:CC:43:CE
X509v3 Authority Key Identifier:
keyid:A4:AA:9B:CD:06:EA:6C:56:5D:D9:07:CA:04:E5:07:7D:68:C0:66:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKqbzQbqbFZd2QfKBOUHfWjAZk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/052f4c-be3c-4d19-aa04-0ab8dd9ebab1/1/pKqbzQbqbFZd2QfKBOUHfWjAZk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:77:ec:c7:74:9f:3c:c7:d0:6c:66:e4:35:f4:d0:a3:78:
f0:1b:8b:fa:14:34:29:28:61:2b:13:b3:1a:84:b8:a0:4a:1b:
a6:86:4a:78:f6:9d:47:01:75:fc:18:6c:cf:29:f6:47:db:11:
ff:1e:92:29:f1:65:81:05:54:1c:21:19:65:f6:17:85:f7:ec:
7a:cb:db:2d:14:91:08:c4:8e:04:65:4c:90:f8:41:6b:bb:99:
48:9a:1f:21:8e:36:b9:5a:a4:dd:18:29:b9:b7:49:91:63:ba:
9f:68:fc:f6:32:c9:10:7c:67:84:f7:e9:87:a5:6b:3a:a6:f9:
72:bd:7f:92:1b:67:3f:9a:a2:ca:ad:e0:98:86:2a:1e:a6:de:
01:ec:66:c2:94:87:db:dc:ec:32:b6:77:e1:f0:7b:68:23:59:
63:ce:10:c8:e0:71:69:02:77:57:5e:91:67:80:2e:8c:98:af:
34:37:d2:a4:8a:0a:7a:67:5d:7c:a1:ce:ee:2f:1c:8e:b8:e2:
f5:88:bc:11:c8:90:6b:b5:12:7a:18:44:eb:77:c6:ef:34:b9:
95:1f:21:59:ef:85:59:11:d6:c4:a7:06:23:52:26:4d:a3:56:
d3:f3:19:51:2c:e6:3e:f2:f8:60:ca:9f:02:9b:54:93:30:03:
f3:a5:e2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:09 2025 by rpki-client