Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: 3bry9yI0wQqcwXKaH4kebVqi8J+BN0WZrRu34CCwk4k=
Subject key identifier: D2:D9:47:5C:0C:38:AE:B3:F0:AD:A4:E9:25:5E:93:2C:1E:5A:85:CF
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 019827EC91B01378126582F043F25198848A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 1A
Signing time: Sun 20 Jul 2025 13:01:11 +0000
Manifest this update: Sun 20 Jul 2025 13:01:11 +0000
Manifest next update: Mon 21 Jul 2025 13:01:11 +0000
Files and hashes: 1: g6lOJZk_IOKaTF7q4TnhPviaoeE.roa (hash: 3uBzUH3gzYo8KFcFQD+b7edt/srB4qwjOtcspxNTXPs=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: SQ/F+VUKM8lRJs1+CjmXwy3Sr0H+g+EzE2chO/XnDxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:ec:91:b0:13:78:12:65:82:f0:43:f2:51:98:84:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Jul 20 13:01:11 2025 GMT
Not After : Jul 21 13:01:11 2025 GMT
Subject: CN=d2d9475c0c38aeb3f0ada4e9255e932c1e5a85cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:41:fe:ce:56:c1:b3:97:b2:8a:f0:6b:83:
2a:a2:a4:0d:af:69:bd:f0:29:17:87:dc:eb:6a:fe:
6b:ea:85:34:f1:f3:b9:79:be:53:e6:6c:c3:11:bb:
ea:59:80:6a:a3:41:4a:eb:9e:55:56:92:44:a4:48:
57:50:85:ac:41:85:b1:77:60:9b:c6:04:00:6e:54:
23:6b:9c:98:ea:fc:4f:8a:79:e1:db:50:d7:a3:9c:
aa:22:78:bf:b1:1d:bf:92:07:9c:dc:64:e3:82:55:
d2:48:df:78:bd:7d:06:e9:c6:88:88:fd:98:97:89:
96:43:bc:68:d0:a1:74:af:f7:a4:4e:0f:10:f3:28:
93:14:2b:09:56:5a:6f:c6:7e:2e:c6:b5:b9:23:80:
60:7e:73:cb:44:32:38:3d:fd:1e:0f:93:02:b2:7b:
04:6b:df:32:f9:33:19:a4:6d:95:22:42:35:ba:76:
67:45:b0:30:9c:0c:cc:b6:be:a5:82:af:e7:47:4a:
86:df:26:e3:7a:17:87:bb:eb:aa:81:e2:e3:72:16:
2c:8e:a1:08:cd:15:e1:f1:6d:58:87:17:e4:4f:a2:
5d:c9:00:fd:53:6f:1b:33:7c:52:4d:93:ea:d7:41:
6f:2d:3a:db:d4:41:a2:d2:29:2d:ca:1f:7a:f5:e8:
c9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D9:47:5C:0C:38:AE:B3:F0:AD:A4:E9:25:5E:93:2C:1E:5A:85:CF
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b2:95:c3:bc:56:48:c5:65:5a:2d:d4:b9:d9:aa:bb:57:4f:
0d:67:1f:53:8d:5d:1c:64:e7:65:1e:bf:7d:ab:19:08:28:5c:
16:3a:5c:38:81:cc:1f:51:82:d1:e0:ec:0a:f6:73:75:5b:4a:
44:20:a3:e8:37:c6:78:4a:79:a4:f9:81:f6:bf:eb:36:80:17:
65:3e:45:46:c7:9f:e4:7d:3c:1e:87:4b:61:c5:52:3d:69:2d:
4e:0a:0f:f6:92:ec:c5:50:7c:59:9f:87:1c:b8:35:2e:12:28:
16:27:d3:ae:4d:9e:50:ee:65:c4:93:30:2c:89:f3:bd:9d:51:
55:8e:d8:57:25:83:cc:c9:1c:83:48:fc:2c:87:c7:f0:f9:0b:
27:5f:cd:03:69:09:e1:7c:39:6a:a6:d2:7a:67:3a:df:84:07:
af:73:f1:f7:17:19:2f:d5:88:c9:32:8d:ea:68:9e:6a:42:1a:
6d:e7:05:f4:54:52:3a:ec:5d:ac:bc:78:0f:27:53:da:03:53:
58:66:b8:87:19:fd:76:4c:56:e7:dd:9f:2a:5a:2b:95:b9:cf:
0a:2c:d7:05:d7:b2:d6:c7:26:9b:13:79:fb:3a:28:59:16:fe:
bd:3f:f8:ca:eb:c6:0b:aa:04:0e:60:35:d9:a5:b7:e8:0b:04:
76:ea:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:24:49 2025 by rpki-client