Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
File: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft (raw, json)
Hash identifier: FvekvqenfNJdyrEg6eGezdLEC4HkH0BExF153lO/Q2g=
Subject key identifier: 2C:21:DE:74:FF:0A:78:BE:AC:30:99:F1:CA:55:BF:F4:4F:2A:24:36
Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e
Certificate serial: 01984AAEE135A20511B5970F3FDD383F2469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
Manifest number: 0AE3
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: XKCgbBOF2hVHKDo78niiU6jULHg.roa (hash: QEaRFAJhUUsQeo4vGH+Fx3VQmk/EsBaPpLYF/MqkgOs=)
2: pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl (hash: EbSfLUBkUSORQtloJmj2LGCcE33nhCbieUF+J5xkCCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e1:35:a2:05:11:b5:97:0f:3f:dd:38:3f:24:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=2c21de74ff0a78beac3099f1ca55bff44f2a2436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:a0:56:23:64:6e:08:e1:a8:80:76:bf:b3:
67:f2:ff:d0:42:07:48:b8:f4:80:d8:d3:e3:8e:8c:
f0:29:ce:62:cc:5f:25:7b:29:d3:a4:c0:90:c2:75:
25:79:26:2c:67:c4:a2:71:36:19:3f:42:b9:e9:49:
ec:67:84:1f:9b:b2:6a:8a:39:97:0c:dc:3a:ae:01:
87:16:7f:b1:2c:15:cd:4c:39:d0:23:b7:4c:95:78:
cb:8b:17:45:d4:1e:0c:cf:db:cb:f5:5e:35:d7:70:
d1:5c:5a:30:e3:d4:69:41:01:c5:39:e2:9f:71:27:
4d:ac:7a:08:28:24:ba:11:ec:15:18:90:12:42:bc:
87:68:2e:4a:18:03:16:dd:11:7e:56:1c:df:57:34:
25:d8:91:dd:bc:ef:5e:40:7d:65:6e:47:91:86:30:
b0:d7:96:79:b8:3c:25:e5:45:f1:da:29:12:1c:5d:
07:3d:c8:28:f4:cd:3e:9f:e3:b8:25:7c:b4:dc:af:
19:7f:6a:9f:b2:2d:bd:70:72:b8:b5:7b:4b:87:e2:
b8:0c:07:fd:b9:02:0c:e2:32:b6:88:2c:dc:86:b2:
45:dd:49:85:32:b7:be:62:85:9f:2a:50:78:32:b1:
67:59:04:ed:50:5c:67:71:fa:4b:9c:c6:bf:fa:f5:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:21:DE:74:FF:0A:78:BE:AC:30:99:F1:CA:55:BF:F4:4F:2A:24:36
X509v3 Authority Key Identifier:
keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:17:6e:eb:b1:58:ff:c7:bf:04:47:80:b8:3c:93:d2:35:21:
e7:5b:22:c3:ec:b6:d0:c2:d7:ed:0e:ae:a0:95:8f:a4:5c:da:
a9:23:d5:34:f2:00:20:30:35:91:84:f6:10:ca:af:c0:4f:99:
87:a2:0a:02:b4:39:43:bf:da:66:73:24:f2:7e:55:b7:b3:6e:
5b:d1:75:cb:38:1a:04:ce:0e:35:f3:99:2f:90:73:85:9c:22:
df:b7:d5:c7:30:9e:06:75:17:1b:74:ec:26:f6:fa:92:fe:55:
b0:3e:c6:b2:90:b7:a3:6e:bf:14:73:8d:f6:bd:66:d7:c9:49:
50:b8:dc:22:3d:5e:8d:9d:08:6f:3e:18:0f:54:c5:ac:16:fa:
65:b5:b6:63:b7:bb:24:cf:16:e4:3d:c4:43:bc:b6:30:23:f3:
7a:61:1c:c1:27:87:27:78:8b:7f:60:98:24:33:d8:e4:25:70:
f6:92:f0:63:ea:ec:b4:97:aa:e8:15:de:e7:bd:cf:91:fa:13:
17:4c:d4:30:a5:a8:f6:6b:7a:ac:50:0d:27:9d:e8:b3:ab:15:
12:84:6d:81:c1:ac:41:d5:9a:37:7e:ad:d7:81:1e:a2:d3:f0:
02:b6:43:f5:7f:bf:03:fa:37:5c:16:20:fe:d3:67:ff:57:56:
7e:c3:37:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:13 2025 by rpki-client