Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: dC/5wAo+yY8DF5ADe72XJYubxZqXASqEh3iwnw50olA=
Subject key identifier: 8E:E8:4B:28:05:0D:FA:CE:CB:D6:D9:2E:4F:E3:D1:0A:F8:4B:38:FF
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0198469B498F7AEEC1ABFF2B98016318D4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 152D
Signing time: Sat 26 Jul 2025 12:00:38 +0000
Manifest this update: Sat 26 Jul 2025 12:00:38 +0000
Manifest next update: Sun 27 Jul 2025 12:00:38 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: JnLvWYa0sU3XkrL97uCjrPv+kvknbP9lYDdWLt1AEAk=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:49:8f:7a:ee:c1:ab:ff:2b:98:01:63:18:d4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jul 26 12:00:38 2025 GMT
Not After : Jul 27 12:00:38 2025 GMT
Subject: CN=8ee84b28050dfacecbd6d92e4fe3d10af84b38ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0c:0f:c1:52:ab:5b:2f:b8:8b:e1:81:4d:65:
b9:88:4b:6e:cd:7b:fc:23:7a:50:f5:b5:24:1c:80:
83:02:84:32:31:fa:7b:0a:a7:fc:87:25:78:7c:c5:
0a:19:93:db:d3:da:02:2c:6e:e3:d9:55:5e:d8:ad:
a1:43:15:53:39:74:fd:fe:25:3f:c3:81:8c:cc:9a:
22:18:33:30:0c:e6:e8:e8:07:0c:d4:26:e0:73:fb:
c8:01:79:39:a6:6a:14:5d:84:1e:52:6e:4d:c1:06:
f4:02:11:3b:67:99:4f:c9:c3:6c:52:2a:dc:e4:65:
bc:62:5b:df:b4:0d:b4:36:f1:f9:95:76:10:68:19:
2c:f2:13:65:5c:49:75:7a:b8:69:c0:db:65:29:11:
e8:5d:fd:ad:94:6d:f9:f9:fb:9b:da:4f:5b:9c:6c:
76:ea:86:21:63:ad:49:3b:bb:cf:30:95:9c:56:57:
ad:c3:51:2c:fb:b4:0d:75:d1:0f:a3:46:b0:71:a2:
9d:26:f5:e2:b9:03:cf:28:cb:dc:cc:95:82:c2:9c:
c2:70:4b:cc:f2:85:cb:3d:5a:20:5b:4e:93:2c:63:
a0:cd:a0:b0:2b:1a:7e:bf:0b:84:e6:c6:3f:4d:4b:
4b:7f:5d:d7:60:d2:f8:ea:b1:c0:3c:a1:c3:8d:98:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:4B:28:05:0D:FA:CE:CB:D6:D9:2E:4F:E3:D1:0A:F8:4B:38:FF
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:49:a2:80:fc:4f:34:41:62:4d:02:35:1d:7e:61:12:0c:f5:
ed:d6:c4:ef:10:9f:f5:68:bf:23:7b:57:2e:d8:19:70:f3:fd:
70:01:c7:b7:8e:41:fc:21:6a:2d:75:cd:08:3e:bd:ca:72:6a:
61:6f:43:e9:8d:3f:ae:d9:1d:ed:c6:dd:9a:92:74:36:68:52:
fe:dc:cb:aa:db:ff:b6:b4:32:10:4c:05:df:d8:68:6e:78:5b:
cb:89:92:3b:7f:76:58:2a:26:7a:ab:e2:4a:94:bc:39:2f:bc:
dd:11:c7:24:3f:6c:4e:d1:c0:ff:84:99:37:52:11:e6:ae:b2:
19:ea:d5:e6:be:e5:fd:ce:b8:b4:d6:60:3b:16:6c:ce:8b:33:
0f:93:11:02:c2:8c:56:36:6b:61:4b:c5:36:c7:df:4f:fb:37:
0a:55:0c:05:1a:35:e7:3e:41:f1:7c:e7:37:68:e3:d8:96:42:
28:da:77:14:3d:c8:8f:6e:55:25:e1:84:ae:db:0b:c1:4c:42:
5b:47:7c:96:5c:52:bf:7b:c0:28:08:d2:d3:da:1b:9f:6a:8f:
7a:2b:e1:12:52:92:68:e9:98:71:e7:36:da:ea:b1:ef:da:f1:
2c:19:28:94:bc:19:cb:d8:a3:e0:bc:fa:86:00:58:8c:81:99:
76:58:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:03:44 2025 by rpki-client