Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File: PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier: XYq5MajsWBRQp9biaYnEYeqHtZm72+ejOvXjHBgSFEo=
Subject key identifier: 86:10:A1:66:D8:A1:00:89:97:1C:EC:04:2F:96:B0:AC:D6:57:18:F8
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 0198499C26A4183D531A80E3C49F31F7B950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 02:00:26 +0000
Manifest this update: Sun 27 Jul 2025 02:00:26 +0000
Manifest next update: Mon 28 Jul 2025 02:00:26 +0000
Files and hashes: 1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: uRZHPcmusRiOzwJrjdpxCF/IctO9mcycoIeM83YwXpI=)
2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:26:a4:18:3d:53:1a:80:e3:c4:9f:31:f7:b9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Jul 27 02:00:26 2025 GMT
Not After : Jul 28 02:00:26 2025 GMT
Subject: CN=8610a166d8a10089971cec042f96b0acd65718f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:89:fb:da:2a:b5:68:41:94:ad:39:11:3e:
e8:09:6c:02:0b:be:7f:b5:bf:52:c8:2d:1f:1e:1f:
6b:76:80:6d:f9:bd:08:f4:c9:71:9a:c8:9f:3d:bd:
3a:d5:57:e8:fc:5b:36:76:01:6e:d3:61:3d:90:3b:
b8:65:b9:16:0a:2a:c1:6b:44:35:61:6e:7c:5f:e6:
93:1a:d1:83:b5:0f:ed:ac:34:fd:11:0e:1c:f2:3f:
33:af:78:28:c0:1f:f7:bd:69:07:72:76:ad:5d:db:
d1:b3:62:ca:3b:a9:11:8f:a7:d3:e3:6e:cf:d3:94:
de:a5:f6:b2:ee:b0:31:af:20:e8:be:8e:85:b6:a7:
87:b9:06:f7:4e:cd:de:eb:9b:b2:07:46:84:c6:a5:
c1:9a:e9:53:75:91:fe:9b:c7:07:9a:84:4b:5d:05:
1d:2e:31:ef:08:81:e5:8b:a9:97:fb:4d:81:ba:e5:
cb:32:fa:21:e2:1b:2c:1c:93:0e:49:95:e2:7b:bf:
da:b5:38:52:ff:2e:5e:d3:b7:f1:63:7b:fa:66:ec:
05:21:27:00:17:cd:9e:34:a4:ad:0f:72:77:70:1e:
c8:4d:75:97:cd:db:21:fb:85:03:30:10:cd:d3:31:
69:2c:23:af:c8:57:75:01:1d:26:cf:3b:ff:2e:56:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:10:A1:66:D8:A1:00:89:97:1C:EC:04:2F:96:B0:AC:D6:57:18:F8
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:90:0f:85:7f:b2:a9:e6:d4:4f:f8:60:f6:f0:50:7c:a2:db:
f1:4d:1f:db:6a:e6:1b:8b:f8:17:b1:7a:6a:5a:bf:c5:64:84:
75:02:4c:25:3e:b0:65:51:5d:3b:13:e4:0d:29:c5:b6:80:1a:
ff:1b:93:3f:05:c6:59:5b:02:3e:7b:91:f9:31:92:4b:13:58:
13:c3:ef:4f:e8:9e:c2:08:73:a0:36:fc:9c:3b:97:e7:0b:cd:
b3:c0:87:6a:85:fe:e7:fe:05:50:6f:92:2e:95:d9:86:46:45:
af:2f:04:1b:08:6c:28:df:96:2c:fe:f4:11:69:9a:32:d3:fd:
95:87:11:21:d2:38:78:fe:93:92:d4:ce:c0:f7:f7:fe:e1:f0:
58:1f:18:74:fe:b2:35:52:86:3a:ac:be:70:91:b7:07:ad:03:
97:8f:b3:f7:1e:98:07:00:d5:ec:e1:43:03:1a:e2:2c:dc:df:
ec:e7:74:58:72:0e:69:5f:7f:7f:87:9c:b1:99:9e:36:a2:24:
5c:d8:22:ba:a8:05:9f:fa:5e:a7:6d:ca:94:9c:98:c4:fd:d5:
d4:ef:5a:f3:f8:52:87:b9:ca:13:57:b6:e4:d4:b5:77:a5:27:
5a:c9:6e:b5:15:33:f8:8d:31:96:6d:f8:d4:a5:2c:f3:1e:6b:
a1:f5:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:52 2025 by rpki-client