Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: +jdYTq7D0sypmJcBocWwzVxwp4fsrmYi3tRGC02Jn7U=
Subject key identifier: 57:DE:4E:5B:1B:25:4C:A6:99:2A:4F:DF:2B:11:EB:01:65:90:B5:35
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 019848894BAB2F269BFA1E2E70BC179AC69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 04DF
Signing time: Sat 26 Jul 2025 21:00:14 +0000
Manifest this update: Sat 26 Jul 2025 21:00:14 +0000
Manifest next update: Sun 27 Jul 2025 21:00:14 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: CDuCNAYnpEOHTV4bE2kConkfhi5I12a9yelwY1bs97Y=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:4b:ab:2f:26:9b:fa:1e:2e:70:bc:17:9a:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Jul 26 21:00:14 2025 GMT
Not After : Jul 27 21:00:14 2025 GMT
Subject: CN=57de4e5b1b254ca6992a4fdf2b11eb016590b535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:c0:ef:c7:d4:df:60:f2:e3:c1:2a:64:a4:
c7:7f:c6:db:08:87:54:2b:03:96:34:bb:ce:66:aa:
5f:b9:d1:6a:c7:84:76:5e:68:bb:bc:b8:54:42:a6:
3a:ba:8e:77:72:fe:90:ec:d5:08:98:86:de:2e:9d:
12:d4:c0:9a:a1:75:07:c6:76:52:13:16:df:b4:b0:
00:ac:08:b7:00:a4:6b:a6:41:b0:83:7d:d5:bc:3d:
91:6a:9b:3c:23:a9:68:1a:8e:ee:58:76:7f:e9:21:
ee:63:6b:96:e3:91:ea:3b:3e:8a:e1:28:59:83:69:
c0:67:52:f4:31:99:d6:c7:b5:92:03:ad:95:02:7c:
a2:b2:c7:ec:05:2e:92:ce:b3:f7:87:1b:52:00:a1:
63:2a:df:07:9c:56:0d:a8:5f:31:cc:95:af:8a:0a:
55:d6:c2:94:fe:14:66:36:ba:24:9c:39:69:fa:5d:
11:7f:04:30:58:ab:96:ad:06:7e:2b:3a:45:d4:21:
49:55:32:fe:9c:cb:38:d5:b6:61:3f:97:c5:b0:85:
3e:b4:7f:11:9e:21:da:7e:31:f3:a9:64:fc:25:ee:
6d:35:5f:58:31:3d:07:d2:a4:84:8f:f9:21:e4:af:
5d:21:26:9a:e6:9c:c7:13:84:08:3f:1e:e1:b0:9c:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:4E:5B:1B:25:4C:A6:99:2A:4F:DF:2B:11:EB:01:65:90:B5:35
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:bf:58:cf:c5:72:01:cb:bd:0b:8d:ce:62:61:67:cf:0b:
f5:27:03:97:71:44:06:8c:2c:71:1c:44:03:eb:fe:2e:68:5f:
12:37:9d:d4:a7:b0:03:2d:14:37:8c:47:e8:6e:f3:fc:fd:0d:
b6:0a:73:86:ce:d1:e2:a1:17:da:15:05:df:85:cd:d4:59:f7:
52:46:cc:a0:c3:33:ed:73:94:26:97:98:4c:14:c7:f5:71:b6:
a4:5d:58:a4:f7:e5:00:50:8c:e3:52:32:af:99:6a:e2:32:dc:
e5:e2:4d:10:b3:51:b5:bb:47:9c:9e:04:06:4f:71:5c:6b:98:
1a:a1:69:97:91:e7:00:5f:b5:ac:ae:38:95:fb:5d:0c:fe:ff:
62:4c:83:ed:90:c0:49:4f:dc:af:45:ba:82:58:91:d0:8d:0f:
6b:c9:a7:5f:71:b7:5e:cf:7d:e5:65:94:b1:9d:5e:0e:20:70:
e6:ad:ba:c2:26:42:d8:e9:a6:97:ee:ab:80:d9:fe:85:86:7f:
d5:e2:5e:d9:af:76:a4:9a:89:eb:08:93:cb:11:06:6c:5d:c8:
d5:2e:28:bf:da:16:68:fc:2b:1b:8f:9d:01:03:ba:ec:9b:c8:
ed:1e:3c:ac:94:95:22:9e:44:6c:e1:cb:81:a4:be:e6:49:6a:
5c:c3:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:48:11 2025 by rpki-client