Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: tqnbbyUgL+qqPOeNoPkSK1OSNDrNFeWj5CQWXjWYJCU=
Subject key identifier: 52:E5:B9:C6:9A:3E:F7:7E:F2:9F:30:97:C4:BB:6A:F2:99:9F:55:63
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 019847770609D02FE6F8562F973CFB8C2880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:39 +0000
Manifest this update: Sat 26 Jul 2025 16:00:39 +0000
Manifest next update: Sun 27 Jul 2025 16:00:39 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: dwV1mw85gDeHH/CBiKOuzyA54dpXwZNsbX9fNbRcZ+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:06:09:d0:2f:e6:f8:56:2f:97:3c:fb:8c:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Jul 26 16:00:39 2025 GMT
Not After : Jul 27 16:00:39 2025 GMT
Subject: CN=52e5b9c69a3ef77ef29f3097c4bb6af2999f5563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:94:0d:bf:9f:b1:9b:02:4c:a4:c6:bc:e3:
28:52:1b:fa:d2:70:e4:f5:1f:d8:e9:81:c7:0f:3e:
d7:6e:04:ed:d0:fd:3d:ac:66:c1:00:60:bd:3d:25:
2e:2c:e4:e9:63:a5:32:1f:04:4f:af:e1:29:29:f3:
89:03:c0:bd:d4:e7:13:bf:21:33:eb:13:a1:ab:f1:
54:51:4a:97:39:a0:cc:55:5b:1c:ec:de:97:ec:2b:
d6:79:c6:ba:4a:b5:72:9a:f3:fa:6e:ee:26:53:9a:
a0:73:43:f9:d2:76:c5:6a:08:67:fc:bf:a9:dd:46:
f2:fb:d0:db:8b:77:60:93:f4:21:9d:af:4c:12:06:
99:b1:5d:0b:de:38:a5:4f:e8:0c:5f:b0:e7:04:fe:
69:36:8d:4e:b0:29:e1:a5:da:34:90:9e:31:fc:7f:
25:f9:5e:44:64:25:d5:2e:0e:3e:6b:22:e5:e7:4e:
cf:1d:70:d9:64:1a:78:4f:47:cb:a3:84:08:d0:41:
0c:39:2a:04:fd:21:4f:c4:59:91:fb:db:83:a5:ca:
4a:ea:9e:f4:c2:01:ac:34:2b:e8:0b:4e:dc:0b:4a:
14:e1:97:7b:b9:4d:1d:39:80:12:2d:a4:4c:45:40:
fc:ef:01:3f:e7:54:b0:aa:a4:8c:5b:78:48:7f:af:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E5:B9:C6:9A:3E:F7:7E:F2:9F:30:97:C4:BB:6A:F2:99:9F:55:63
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:ed:25:1a:7d:5e:8d:80:a5:76:5f:83:a9:5f:f2:36:b8:
24:f8:4f:5b:75:41:9c:c0:cd:3f:f9:fb:2a:7a:d2:91:9a:6a:
3e:ab:98:f3:ea:c5:95:af:38:dc:12:f9:6d:b7:9e:fb:ed:6c:
44:e0:49:7f:10:93:61:b5:7d:24:17:59:80:b3:3a:ef:f3:a8:
6d:70:f4:27:72:ea:db:90:a6:f6:f1:d4:14:29:96:4b:96:48:
a0:32:8d:ad:bb:77:41:a0:e1:03:7b:b3:74:39:50:bd:7d:af:
fc:7d:82:58:94:f5:c4:44:4c:ad:8c:c1:c3:05:c1:0f:e1:92:
32:d7:46:67:8a:93:f2:7c:b6:e4:33:d1:9b:b9:37:f2:43:45:
39:f0:a9:63:da:6c:6d:a4:a1:8a:2a:78:5a:40:85:d3:80:62:
e9:25:20:64:80:25:ca:ad:8c:0f:9a:e7:a8:d8:45:ac:db:61:
4d:bb:f7:8d:62:66:91:3d:59:c8:0a:00:3b:0a:c9:78:a2:5b:
af:04:e8:46:fe:f4:f6:f1:35:4d:52:ca:c5:e3:98:22:cd:71:
07:0d:0c:b3:9e:ba:4f:b2:aa:95:46:18:d8:d4:b5:39:74:d0:
b8:05:93:6b:79:0b:66:78:90:15:83:2e:ce:4d:2f:56:6b:97:
7d:1c:ae:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:15:21 2025 by rpki-client