Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: JIiMvjpnOHfjE99YIJ9OoZgW+lwNMiGn6pWGZN9i1+s=
Subject key identifier: C2:6C:3D:4C:21:95:12:99:2A:80:9F:59:96:A6:27:59:49:81:53:53
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 0198462D2EEF31C639081649C47F8312CA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 084E
Signing time: Sat 26 Jul 2025 10:00:22 +0000
Manifest this update: Sat 26 Jul 2025 10:00:22 +0000
Manifest next update: Sun 27 Jul 2025 10:00:22 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: TpyeNY3JZpnlfdC7tNw6xexAv4GDzSm4F/0MgLd9+Ic=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:2e:ef:31:c6:39:08:16:49:c4:7f:83:12:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Jul 26 10:00:22 2025 GMT
Not After : Jul 27 10:00:22 2025 GMT
Subject: CN=c26c3d4c219512992a809f5996a6275949815353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:7d:29:9c:33:1f:76:5d:65:6d:a9:f1:15:
d7:42:c6:fb:78:05:e9:03:1d:b1:2e:6f:c8:c7:92:
4e:da:fe:d2:cb:3f:a3:f6:57:20:52:6d:a9:85:d6:
3c:67:bd:ce:b3:44:23:50:c6:1b:64:47:42:6a:01:
46:32:1a:30:66:f5:3d:b9:82:49:88:c7:e8:40:0e:
1f:4a:ca:84:c8:e1:1f:d6:14:9c:39:24:8d:07:72:
fc:d9:cf:cd:33:f4:53:8b:82:e0:f3:e7:51:0a:53:
70:f8:f4:f2:59:f7:16:30:7e:7d:10:4e:42:36:b6:
55:cd:8e:bd:65:00:9d:59:1d:19:46:9b:fd:62:fc:
1c:e7:35:22:b1:a3:f8:19:bd:31:0f:b9:bc:26:ad:
61:b8:dc:99:5d:87:b9:5e:58:70:be:7c:2d:59:8f:
96:a5:01:7c:49:79:0b:83:83:25:ee:a5:8f:77:f8:
d5:72:44:ed:48:3a:f2:9d:66:51:0f:00:62:f2:15:
36:76:32:54:d6:8d:5c:98:53:aa:a2:aa:e3:ee:00:
3d:6a:d7:3e:69:f8:00:55:06:9e:8e:f7:5a:e9:af:
1a:c7:be:97:3b:e8:35:77:cf:f3:99:a5:b0:fd:e0:
c9:10:9c:da:25:37:f1:b9:82:e6:1b:24:b0:8d:1b:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:3D:4C:21:95:12:99:2A:80:9F:59:96:A6:27:59:49:81:53:53
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:91:90:6f:2a:e9:5a:35:e8:d4:6a:d0:63:80:9e:4a:92:44:
c1:b3:bc:4b:67:f5:d9:3f:0f:0f:28:52:c2:5c:4a:c7:01:67:
5c:c7:38:1b:23:15:76:b3:07:5f:41:12:57:50:c8:02:21:0a:
8f:a1:19:fe:45:97:34:a4:a3:7a:5f:c4:77:6d:d7:8c:3b:bb:
dc:5b:dc:67:e6:84:b0:f9:05:fb:8d:b8:dd:37:3d:9d:09:71:
f8:b0:a6:86:34:39:2d:07:88:17:2e:aa:66:29:a2:77:85:e4:
43:a6:3d:fc:8f:f7:ec:72:ba:09:c8:a7:57:5d:4b:f6:aa:37:
1f:23:59:47:ac:14:70:f1:38:11:76:13:7a:cf:9c:63:1e:e8:
49:ca:f2:fd:5d:13:24:62:38:0a:9e:81:37:19:d7:ce:84:34:
81:f3:e7:30:27:30:4f:37:56:58:c0:2a:9d:50:4d:40:41:25:
b7:09:f1:bb:42:b2:6c:f9:c7:f0:84:c5:61:26:df:45:94:c3:
ec:27:5b:cd:b2:3a:5a:93:17:a2:db:8f:b1:4c:9e:4d:1f:9c:
27:ea:d7:6c:c1:66:26:2c:a5:ba:b9:80:08:dc:60:52:47:03:
13:e9:50:7d:5c:a8:6e:e9:35:be:87:89:b8:c7:da:e3:a6:9c:
85:4c:df:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:42:03 2025 by rpki-client