Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: 6BY/z3BZzcvB0a/ZT7AvXF7Kqqaq89hyDmnAZPmbKIg=
Subject key identifier: 29:87:8E:53:9F:45:BC:46:89:D7:D0:2E:DB:28:EC:3E:93:F8:99:33
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 01985B6C4C59D94808F7C11698856A2A8308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 160C
Signing time: Wed 30 Jul 2025 13:01:20 +0000
Manifest this update: Wed 30 Jul 2025 13:01:20 +0000
Manifest next update: Thu 31 Jul 2025 13:01:20 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: gCoFYpauFGEu6xooOgqpRjmRHYgK75kKnK0DjzqU4fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:6c:4c:59:d9:48:08:f7:c1:16:98:85:6a:2a:83:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Jul 30 13:01:20 2025 GMT
Not After : Jul 31 13:01:20 2025 GMT
Subject: CN=29878e539f45bc4689d7d02edb28ec3e93f89933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:11:69:23:b3:b3:13:77:be:89:48:e2:78:
2c:2e:4a:21:27:0b:cb:d2:c5:5d:7c:ec:38:3c:a5:
ea:7a:2c:6e:bc:82:42:06:14:35:db:26:3b:2f:a1:
e0:f6:f2:eb:80:ca:fa:ab:95:98:bd:b3:ef:7c:cc:
4a:6c:d8:4e:8f:2a:eb:a5:66:cd:88:4f:86:67:7f:
d3:a7:59:40:87:82:e9:0a:2f:c7:dd:1c:01:a3:28:
10:ab:cb:96:c1:51:3c:b8:da:2c:1b:f4:f8:94:39:
60:09:6a:ff:ae:27:2f:a9:4c:bf:04:df:90:a9:6b:
ee:fc:0e:bf:07:86:01:81:0c:22:2b:c3:04:38:15:
43:1e:48:e3:0f:7b:e3:69:5c:86:64:21:48:5b:2c:
69:99:c2:91:c7:c1:6c:36:54:ec:c2:37:9d:71:5b:
47:ae:53:a6:1a:22:9c:5e:94:48:91:d8:6d:63:a5:
74:68:88:3b:ca:3f:2f:d6:ca:3d:f6:fa:e6:56:e6:
4e:1f:73:48:dd:d9:85:70:8f:aa:3c:6e:0c:d7:63:
27:15:82:e3:b5:85:6c:24:db:bf:91:96:38:09:82:
66:48:2c:06:dd:ae:65:c1:af:a9:3c:b3:0c:0b:45:
62:40:3a:fa:b2:73:d3:34:f0:aa:9b:44:e7:3a:b0:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:8E:53:9F:45:BC:46:89:D7:D0:2E:DB:28:EC:3E:93:F8:99:33
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:cd:fa:5e:73:9e:ba:d8:2c:6e:39:f3:b0:c9:5f:34:df:
4a:e5:d3:cc:49:a0:f4:1a:3f:ea:29:ba:86:ea:c0:f0:37:38:
4c:d4:b6:0e:b7:c4:a4:85:c2:a3:7b:e9:84:5d:c4:73:a0:28:
23:79:1e:5c:0b:9c:79:92:ec:c8:dc:28:43:87:2e:11:00:a9:
bb:8c:d5:c2:21:be:0f:77:8c:bf:04:17:03:d1:87:88:08:6e:
2b:b3:8c:02:47:95:23:e3:74:9a:b5:e9:f8:52:c6:bb:87:09:
d1:d6:31:ed:b8:ee:83:8a:83:00:28:b4:ca:1a:26:a5:4f:2d:
cf:e0:39:84:fd:13:80:c0:7e:47:7a:f9:03:36:7c:68:21:ac:
4a:e7:f0:aa:5f:e5:ef:3e:e5:6d:e5:34:5f:da:9e:91:62:67:
86:1a:ac:38:21:c5:a5:92:fd:6f:9b:c5:42:d8:09:43:fb:87:
c0:6a:c2:71:2c:83:5d:df:11:ff:3c:d4:ba:c3:5e:ec:a7:2e:
60:63:6c:ba:f0:34:4c:f2:8b:b4:be:22:67:16:81:12:b6:7a:
f0:85:fe:6b:be:71:61:ec:70:3c:d9:c4:f2:4e:74:6d:59:4c:
94:9d:11:5b:9a:88:5d:b4:81:b3:95:66:55:59:78:01:a7:d5:
45:7e:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 22:39:23 2025 by rpki-client