Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: Q2Lq6I2UMyckgEkgyFjyNeCeK995IAvik1e1mAoy0DI=
Subject key identifier: 73:90:A8:7A:5D:61:FD:67:74:40:6F:83:68:7C:4E:B6:D0:45:07:4C
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 0198499C591BD37C12C8C8FF36EB7DDF6FBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0C13
Signing time: Sun 27 Jul 2025 02:00:39 +0000
Manifest this update: Sun 27 Jul 2025 02:00:39 +0000
Manifest next update: Mon 28 Jul 2025 02:00:39 +0000
Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: 1f+vaqYtOKzOoW7Ij+0LrChEog9Ltk53pFAmMl9RNL0=)
2: dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (hash: 5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:59:1b:d3:7c:12:c8:c8:ff:36:eb:7d:df:6f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Jul 27 02:00:39 2025 GMT
Not After : Jul 28 02:00:39 2025 GMT
Subject: CN=7390a87a5d61fd6774406f83687c4eb6d045074c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:cc:8c:2f:de:17:81:62:b2:f7:22:9e:62:
c9:c2:86:6e:3e:89:c9:f9:84:44:18:f3:cd:84:29:
d9:50:b7:bb:be:f8:af:7b:f8:be:5d:10:27:b2:6a:
7a:e8:34:0f:b8:23:b6:87:8d:f0:1a:88:a5:76:e8:
23:74:fd:67:86:d2:41:89:3b:6e:c9:55:21:3f:26:
32:30:7c:e0:c8:c8:a7:e2:73:e6:e5:84:28:d4:6b:
fd:db:85:f6:cd:86:08:17:6b:0b:94:e0:89:0f:70:
13:ef:6a:20:19:4c:80:3c:7f:8b:f7:bc:b7:70:80:
2c:fc:04:88:50:e9:be:8c:a5:cc:80:bc:53:f5:f3:
7c:44:4d:bb:f3:d8:fe:f9:0c:a6:3c:8b:ad:a2:b3:
7d:44:fd:68:f8:ac:79:be:69:96:eb:cf:e2:2a:90:
89:36:08:55:2e:48:72:ad:b7:b6:15:04:91:8a:16:
e0:82:55:50:d8:2a:e2:23:ea:fe:49:41:85:29:37:
4f:0a:58:5d:8e:15:db:03:87:02:f2:31:95:35:ca:
b0:75:d4:2c:d7:b9:ce:bc:8c:f5:df:a4:c3:33:10:
f0:37:43:cf:66:ec:1c:57:3a:cf:0c:e0:c0:1c:66:
d6:40:67:9b:6a:8c:f2:4a:58:2e:ac:f1:72:01:20:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:90:A8:7A:5D:61:FD:67:74:40:6F:83:68:7C:4E:B6:D0:45:07:4C
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2a:33:89:94:dd:b7:52:33:8e:78:93:d9:6d:fa:7c:f1:6d:
8e:88:4f:a7:3f:c4:0c:ab:d0:c2:1b:7a:af:57:82:4a:94:c4:
c0:8c:a2:26:66:bf:8c:80:28:10:2c:fe:e9:50:b2:ad:e4:17:
e2:4d:5b:3b:a0:f7:97:c3:ae:49:c7:49:86:f9:0e:b0:cf:1c:
b7:53:48:b4:0c:4a:ab:c7:f5:04:54:5e:2b:8a:3a:0a:e1:a2:
8e:b4:c7:a4:8a:ca:58:0a:25:e4:03:b9:eb:51:c2:10:36:3f:
eb:7d:21:bf:7c:ec:47:58:d9:c0:d8:fd:dd:cd:ca:3d:52:3f:
af:49:f8:01:fa:7c:be:b2:ef:07:b5:7b:9a:fa:2c:e7:ec:b5:
8b:7e:64:62:f9:90:3a:9c:d2:46:5a:13:f7:e9:65:de:1a:40:
ac:3c:48:c9:dc:10:f4:37:98:25:e2:48:80:18:19:de:ad:24:
80:e5:f9:b5:3a:40:bf:3a:e2:36:28:05:46:f1:cb:ba:50:74:
7e:88:1e:9e:04:6c:05:8e:45:d1:6f:e6:27:9d:8a:2c:0c:a9:
cb:d3:3c:cc:fb:7a:33:32:c2:6f:de:71:6b:73:b5:d5:d1:1c:
1a:50:a5:1c:45:10:46:9e:c7:63:3d:d5:e7:65:c6:e0:99:a1:
ef:c3:f8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:59 2025 by rpki-client