Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: vdO8t5NMcxCt4lLE/MHcg/D/D5PU9ohU/9oWELymbWE=
Subject key identifier: 8B:C2:73:3F:85:AE:4E:4D:5B:EE:F2:2E:E2:E9:CB:0E:D2:B5:BA:CB
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 01984BC1B190ADA05A66F67BFB5029B56B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 0D7C
Signing time: Sun 27 Jul 2025 12:00:41 +0000
Manifest this update: Sun 27 Jul 2025 12:00:41 +0000
Manifest next update: Mon 28 Jul 2025 12:00:41 +0000
Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: pJZ1R5MjLj9CGK83qTBaLM3TTsvbDS/ua8VeDdYxejE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:b1:90:ad:a0:5a:66:f6:7b:fb:50:29:b5:6b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Jul 27 12:00:41 2025 GMT
Not After : Jul 28 12:00:41 2025 GMT
Subject: CN=8bc2733f85ae4e4d5beef22ee2e9cb0ed2b5bacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:df:57:c6:7a:13:ef:57:80:23:73:6b:c4:
6a:27:d4:2b:ae:a2:f3:6d:c1:d0:c8:dd:79:6b:78:
d0:f6:07:0f:e4:a8:21:8b:b9:7e:81:99:c9:6f:48:
a9:19:12:5a:af:05:71:be:a9:b3:e6:bf:ef:2a:1b:
60:ac:a1:67:a9:61:c0:23:c6:a9:ba:f6:7c:30:2d:
55:35:d1:99:da:cf:a2:fb:f6:ef:71:c7:30:2a:25:
ad:45:f5:41:af:57:e2:b7:73:6d:2a:8e:5a:77:5d:
a1:cf:f8:c3:12:a1:fe:3e:4f:68:48:8b:a2:40:c8:
a1:50:a2:08:4a:f3:a7:15:43:18:c2:d9:fc:ba:02:
f3:51:a3:72:07:55:b0:6d:66:c2:59:53:49:93:46:
d8:bb:7a:65:70:6f:72:db:d5:94:94:f0:ba:73:6d:
de:0d:e8:cd:e7:c5:71:ed:6e:68:5d:6f:ed:7a:09:
9e:71:15:85:6a:92:71:23:2a:53:23:2a:a2:44:46:
8a:b9:b0:2f:91:c1:2a:5c:27:d6:7c:f6:5c:b3:26:
9a:7c:91:2e:56:bd:ae:c1:b1:2f:b7:84:81:a8:96:
78:f7:fc:a7:5e:3b:36:74:4e:c8:eb:d0:6d:ee:72:
93:08:ee:78:d7:7d:b1:53:02:33:58:d7:87:79:52:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C2:73:3F:85:AE:4E:4D:5B:EE:F2:2E:E2:E9:CB:0E:D2:B5:BA:CB
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:00:14:e9:b1:19:3e:7e:03:ca:6a:5a:c9:c0:2a:32:e4:0c:
6c:54:df:7b:6e:b4:4f:a9:d4:fa:c4:be:94:2b:07:a5:1a:54:
87:29:5a:de:1d:f8:10:9f:58:9d:c9:95:60:9f:61:1a:3e:9d:
cf:88:ff:cf:8f:ef:0d:3c:ea:87:e1:d6:8c:01:57:82:17:6b:
94:42:f1:4f:d0:60:af:5e:a6:fc:b1:62:a1:8b:be:1c:95:05:
45:8b:92:59:a9:b9:90:73:79:95:97:d7:0d:de:10:ca:3c:3c:
35:8d:31:a8:73:ee:14:b6:08:2b:5a:d0:63:55:98:b6:57:e9:
ed:20:6a:ab:c3:b3:dd:c4:38:3c:20:66:6a:95:03:eb:67:82:
a5:40:71:31:99:6b:32:3b:47:a1:12:33:04:b0:a5:1e:ee:aa:
c1:10:c5:0f:bc:72:48:fe:98:d3:61:cf:3d:4a:bc:c6:07:bb:
d6:61:20:0b:87:c7:df:fa:cd:1a:c0:71:dd:6c:4c:d5:ab:56:
0d:2d:0a:4a:a1:08:76:80:c5:36:1f:32:6b:6a:93:52:3f:a4:
70:f3:08:76:5b:c1:08:45:71:07:9f:31:44:8e:1c:cb:27:d4:
14:b2:42:cc:b7:02:45:82:10:16:09:70:c9:7d:58:87:56:19:
f9:10:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:24:23 2025 by rpki-client