Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File: PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier: HWTqTtQXQlIe4hOHDfeXEkA8t18xsU9NHLjQiLe2oR4=
Subject key identifier: 7B:95:C9:0C:60:73:2A:6B:0F:8F:3D:E7:0A:25:CF:51:74:82:B4:E7
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 0198485330D77188FDB94C6D4045B2D5E190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number: 0A08
Signing time: Sat 26 Jul 2025 20:01:08 +0000
Manifest this update: Sat 26 Jul 2025 20:01:08 +0000
Manifest next update: Sun 27 Jul 2025 20:01:08 +0000
Files and hashes: 1: GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa (hash: 6erLpsgMI9bO4qfOCcfgJUCMEDYhGzxWY2AMUbeslCE=)
2: IHvKxmr3uwpJKwkutA9nKfip_F8.roa (hash: E257yWlPmy47lDQ49F17JotJ+RKeZHzV+AfLNrTNJCw=)
3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: IlGKzbxY5PmFvfhzop/HDmJha4yyph2mnVkI1aA/TtI=)
4: pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa (hash: t46mDE1wE8ruzgJ1jDR113WnhduQHovpLeyn+ltLQ0w=)
5: sS3umUajXXmqMBA_9lX5Ye0iJuQ.roa (hash: IM/xG6YgVa2blydnHEIN0rcU5aCmvFCbaiZgSErPPdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:30:d7:71:88:fd:b9:4c:6d:40:45:b2:d5:e1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Jul 26 20:01:08 2025 GMT
Not After : Jul 27 20:01:08 2025 GMT
Subject: CN=7b95c90c60732a6b0f8f3de70a25cf517482b4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:6e:4f:fa:b3:70:7f:4f:0e:d4:f4:22:b4:
7c:23:6d:90:f6:fa:a4:2b:6c:74:99:28:92:e1:68:
fb:5d:d1:e2:fc:ae:e7:1e:88:b8:e9:0d:72:ab:b3:
04:57:56:a6:00:fd:17:a5:2a:00:dc:e5:8b:48:f3:
e8:b5:5a:22:ed:2b:30:ab:ad:8a:7a:0b:59:99:c2:
7a:33:16:63:82:31:43:24:39:b1:21:1d:b4:71:27:
35:33:ee:18:fb:ba:42:5f:7c:81:fc:ed:98:b6:d4:
3e:e1:4a:5d:59:67:3c:ee:47:6f:9d:65:28:1c:7f:
99:29:93:25:31:16:e8:28:60:5b:ad:48:b8:57:da:
b2:29:c1:b8:27:b4:02:7f:a9:02:6d:f8:62:26:68:
20:af:18:38:c1:1d:d5:03:a9:4a:71:3f:d8:79:2c:
04:2e:6b:65:66:2c:65:33:ea:80:97:a4:d8:d1:a2:
04:f8:26:1e:06:9d:61:55:50:cb:ea:37:6d:35:2b:
27:e2:83:4c:de:e9:11:d8:9e:36:1c:92:ae:3d:74:
75:85:57:33:e8:1f:dc:43:e5:95:75:6d:5c:54:0c:
0c:2f:5d:b0:a4:93:2f:06:d1:da:c2:ff:6b:54:71:
d2:d9:f3:14:66:ce:2f:37:e7:f0:c1:3a:42:1a:ba:
a0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:95:C9:0C:60:73:2A:6B:0F:8F:3D:E7:0A:25:CF:51:74:82:B4:E7
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e3:8f:68:e5:00:57:56:66:b3:c2:aa:14:83:8f:d4:d9:36:
d5:a1:f7:b7:59:4f:38:c5:d5:6f:d2:ac:bc:dc:1d:c5:ab:d7:
a4:22:12:4f:49:9d:5d:29:71:8c:90:65:e2:4e:18:46:35:4f:
a4:9e:ae:65:56:ae:74:90:92:cc:27:53:13:bb:b9:9f:28:33:
77:25:ae:db:67:b4:ca:4e:af:bb:78:21:e1:2d:e8:63:0f:31:
c7:2c:1e:4e:93:28:1b:05:0e:1d:5d:40:4a:8e:39:57:f0:6c:
b7:7c:88:d4:67:e2:0f:41:03:11:fc:a9:d1:32:8d:e1:9e:44:
1e:5a:7b:69:1f:07:3c:07:77:ea:93:90:72:0c:12:0c:43:46:
8b:0b:0e:11:ed:de:fa:6b:c8:b1:ed:50:eb:e3:b5:05:8a:67:
ae:97:09:e6:02:fb:d4:fd:45:23:45:ba:a5:5f:65:d5:f2:6a:
81:ff:82:96:f2:b4:cd:c4:a6:1b:8a:bd:8d:78:8d:20:00:8c:
32:9b:3c:0d:93:7c:82:0b:92:52:a6:67:92:27:2e:c8:13:bf:
44:3b:e2:c5:d1:da:a9:d7:fd:e7:f3:ac:c9:fe:77:c4:c0:bf:
b0:79:5b:8e:d4:6f:d2:37:6d:53:0b:e1:25:97:3f:cf:79:a2:
73:bf:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:55:16 2025 by rpki-client