Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
File: pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft (raw, json)
Hash identifier: DMWexjcXDFHHtnhq2uw4EiIiaV9KsiZS+r7WmXDcp5A=
Subject key identifier: 4F:53:2D:6A:45:11:16:12:E9:FE:F4:34:23:80:38:B7:1E:D2:1A:04
Authority key identifier: A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
Certificate issuer: /CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Certificate serial: 0198481C03BCAF0013CA4ABA1517AFC4CACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
Manifest number: 0A93
Signing time: Sat 26 Jul 2025 19:00:52 +0000
Manifest this update: Sat 26 Jul 2025 19:00:52 +0000
Manifest next update: Sun 27 Jul 2025 19:00:52 +0000
Files and hashes: 1: LPRtA19ISdoMAcOg5dTdVh6L9Jk.roa (hash: yfplS3KyTgY8se7AVlwzcVLsAsein115ckLeaHyCF6w=)
2: pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl (hash: O6koGneH2Kx7TkBQuAIkjHkIWiX+M06TUnRvNJMFIOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1c:03:bc:af:00:13:ca:4a:ba:15:17:af:c4:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50cd3b9fb6464915ad0d3760934c0182889f1fb
Validity
Not Before: Jul 26 19:00:52 2025 GMT
Not After : Jul 27 19:00:52 2025 GMT
Subject: CN=4f532d6a45111612e9fef434238038b71ed21a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:fe:c7:cc:3d:9d:12:a9:36:0f:75:79:ff:
3a:e8:fa:cd:92:92:f3:0a:90:6d:1b:81:88:f6:73:
4e:a4:6e:99:b1:a1:fa:e6:9e:7a:26:ac:1f:bc:f3:
c3:d7:85:0d:0a:35:3b:33:f7:c8:da:69:df:74:ce:
42:f9:23:73:fb:4c:c8:64:31:db:40:14:c6:8f:3d:
d3:76:b1:40:9d:50:f1:cb:81:5b:70:0e:20:84:5e:
fa:f4:a2:a2:2e:a9:64:89:74:41:e5:91:72:67:88:
36:b8:c8:29:d8:e0:98:a5:c6:40:53:47:97:28:74:
22:70:45:eb:c6:72:9b:f4:f8:4c:bd:e3:67:b6:dc:
d8:87:ce:b6:91:7c:5f:a4:31:91:09:90:b7:42:ec:
43:72:e9:16:5a:4d:21:f8:b6:fb:5f:8b:6d:0c:fe:
87:c0:7b:3c:3e:9a:fc:4f:8b:3c:6c:0f:e5:7d:65:
5e:2f:39:e0:68:b5:95:72:ba:54:ad:e3:c1:4c:f9:
2b:c5:15:ba:59:c2:22:22:ac:a2:d9:5d:e4:d3:5a:
37:f2:aa:37:f7:69:e2:4b:6c:4b:53:2a:da:2a:dd:
7c:e4:84:54:48:e7:36:4f:4d:83:7d:04:85:49:2b:
14:87:3c:b3:ca:17:53:33:ad:b7:1a:fe:61:14:c6:
13:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:53:2D:6A:45:11:16:12:E9:FE:F4:34:23:80:38:B7:1E:D2:1A:04
X509v3 Authority Key Identifier:
keyid:A5:0C:D3:B9:FB:64:64:91:5A:D0:D3:76:09:34:C0:18:28:89:F1:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQzTuftkZJFa0NN2CTTAGCiJ8fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3c92fa-c3d5-4a36-9e17-37e9e86a9279/1/pQzTuftkZJFa0NN2CTTAGCiJ8fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c6:67:a6:52:26:22:66:6a:5e:7a:1c:06:71:ac:71:89:07:
36:bb:cf:e8:de:77:e4:3f:89:52:93:8b:a6:3c:58:cc:2c:c1:
34:fa:eb:de:dd:4d:3b:0c:bb:c4:80:a4:5e:aa:1e:58:08:05:
6b:98:7f:91:14:7d:6a:37:8a:b5:08:92:21:88:2c:c8:97:ef:
5f:b0:8c:b1:88:9e:a8:bd:72:03:5f:8e:6a:24:81:68:1c:bc:
1e:09:7e:a7:2c:69:ed:35:88:d9:81:fd:16:c9:18:8b:29:61:
7c:db:21:44:90:f2:05:90:61:88:ed:c6:66:a1:2f:ff:81:8a:
0e:4c:37:95:37:89:02:fc:3a:b6:10:ff:fb:c1:f4:91:c9:7a:
08:23:da:2f:82:8f:78:2d:68:f4:3f:ec:48:2a:f4:42:ae:e4:
c1:2c:d6:10:32:ef:8e:7c:29:2e:b1:ea:a3:f0:01:c6:f9:39:
df:66:76:06:21:ef:e4:82:59:26:e5:86:77:40:d6:04:4b:09:
e8:e4:c7:11:98:42:5d:c3:36:49:4b:e7:b2:9c:0f:6e:5e:22:
a0:e7:0c:bb:c5:28:f9:f6:25:21:d0:64:f7:89:52:34:6f:e9:
c7:5f:3e:cb:ce:2d:78:81:4a:3e:e6:a3:5f:86:86:a3:c8:93:
23:a5:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:32:37 2025 by rpki-client