Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: gnM/sCP5x+N88PvkpHJYmCpRGIzoNv/nqSVwUlkTkf4=
Subject key identifier: 8A:D6:20:72:40:92:B7:20:DF:D8:E5:95:FF:A5:FF:8E:7D:51:0A:68
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 01984BF87514474A0D377526ACF0F48FB1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 13:00:30 +0000
Manifest this update: Sun 27 Jul 2025 13:00:30 +0000
Manifest next update: Mon 28 Jul 2025 13:00:30 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: OXMuM9GNjCWIq/ZTr4/yzEG9ImSYsoNEaK+RqqOmsVc=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:75:14:47:4a:0d:37:75:26:ac:f0:f4:8f:b1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Jul 27 13:00:30 2025 GMT
Not After : Jul 28 13:00:30 2025 GMT
Subject: CN=8ad620724092b720dfd8e595ffa5ff8e7d510a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:26:dd:e1:fc:55:92:50:3c:44:85:f6:38:27:
a2:4d:08:b3:31:79:d6:fe:e0:c1:4c:f0:9a:1a:b2:
e5:3d:5b:eb:9d:20:eb:13:ad:6e:a3:85:7e:c1:4f:
41:8b:47:82:6a:68:44:d1:26:0b:22:91:30:76:3d:
88:91:3f:92:8e:d7:c2:d2:e2:ce:cc:69:49:43:a2:
75:71:91:43:67:f2:46:7f:fd:71:01:53:d0:00:b9:
d6:e1:ec:5d:98:d0:45:0d:21:2c:be:32:67:17:56:
1c:c4:ae:7e:44:cb:5e:ef:d0:95:3f:69:36:2d:c9:
74:21:43:a5:7d:ce:88:92:6e:2e:19:70:55:0f:ba:
46:05:4e:4f:42:94:b5:76:1e:8e:d1:af:44:8f:94:
34:db:d3:79:6e:91:f4:71:66:1f:51:5b:2f:d0:37:
c1:cc:43:e8:41:f7:c6:c9:4d:7e:ca:70:0a:af:c7:
8f:aa:ce:31:25:bd:e5:d2:da:24:0e:f6:b4:7b:8d:
0a:3a:c4:dd:d0:b6:59:0e:3c:7c:2f:0a:4f:96:d7:
21:64:17:04:72:57:84:bd:c7:04:73:6e:98:e3:1b:
80:c8:9a:1f:1c:6f:90:7e:c3:8b:05:d4:e6:05:d5:
a6:9e:51:68:2d:29:92:57:83:6b:97:71:4d:6c:7c:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D6:20:72:40:92:B7:20:DF:D8:E5:95:FF:A5:FF:8E:7D:51:0A:68
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:10:b0:f3:80:db:9e:c6:4f:2a:74:20:85:0c:16:a0:ce:
5b:24:c5:43:c1:ba:c9:b3:9f:ec:8c:75:fd:e1:6e:83:1f:c2:
f9:89:3f:d7:77:69:53:c1:6e:6e:6e:bc:4d:ba:bc:a6:6c:6d:
29:f8:d1:47:21:3e:31:0a:00:06:f6:ce:02:f3:ec:58:0f:ed:
b2:c3:13:a2:3a:9a:d5:9b:21:35:2f:c5:34:84:db:7e:30:2d:
3c:9f:3d:25:80:a4:d6:98:ec:4c:20:5c:73:d0:a6:73:89:df:
a4:8c:c7:a2:b8:b6:eb:bc:7c:26:77:a5:20:0b:95:5f:4b:00:
5d:9a:f8:44:66:8e:bc:08:cf:0a:d7:d8:9a:6f:15:1b:98:2b:
21:df:ca:ab:50:e0:97:56:d6:e2:4c:35:71:d6:87:53:a3:0e:
7c:b5:9b:f2:a1:77:49:f3:c9:a1:80:d2:75:f5:7a:2e:3b:79:
e1:57:3c:35:3f:b6:4a:f1:da:ad:36:27:8b:f7:c7:a8:61:b4:
4c:71:01:ba:2b:32:b2:f4:e6:ed:79:78:04:f5:fc:f0:1d:b0:
77:d0:50:f2:22:1c:ec:22:53:4e:58:73:08:8e:60:dc:42:78:
9c:73:7a:23:3c:8b:e0:98:98:1d:07:ad:da:7c:92:15:e3:99:
08:eb:d8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:48:04 2025 by rpki-client