Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: P8/tjtr9oTZ6zYWI2eiTJm9umH+erLyVR+5q3mK5qVQ=
Subject key identifier: 93:8B:6B:27:7D:6A:D8:59:08:28:4D:BF:D1:49:95:18:8A:A8:70:97
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 019855A0F51065D5902E731F65FD81B7BC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 12A9
Signing time: Tue 29 Jul 2025 10:01:08 +0000
Manifest this update: Tue 29 Jul 2025 10:01:08 +0000
Manifest next update: Wed 30 Jul 2025 10:01:08 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: mqVhlDyWqwE9RsxgzeM9+9NaMh750/6Ky9Q9YcUxX/Y=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:f5:10:65:d5:90:2e:73:1f:65:fd:81:b7:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Jul 29 10:01:08 2025 GMT
Not After : Jul 30 10:01:08 2025 GMT
Subject: CN=938b6b277d6ad85908284dbfd14995188aa87097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:50:0c:7c:a2:d6:fe:39:fe:68:3b:3d:c4:7f:
57:f6:ff:9a:9f:97:8f:1a:50:68:7d:3f:ed:43:a9:
f0:09:bb:cf:5a:e0:1d:db:4e:8f:ee:64:da:6f:5d:
fe:64:0a:43:f5:e7:a8:76:93:05:a9:0a:c4:bd:4b:
94:5a:a2:56:d2:bf:59:f2:02:2e:b3:51:56:d6:c1:
4c:cb:d1:37:53:e5:0b:40:ea:15:5d:f4:e9:26:92:
fd:73:bc:08:71:08:87:03:52:a6:8d:3f:42:3a:87:
31:98:a8:a3:69:89:a0:ab:29:1c:50:11:c4:98:29:
a1:3a:05:ac:5b:a7:13:63:38:00:00:6e:4c:e1:5b:
ba:31:8c:8e:14:5a:f5:f4:86:30:e3:12:87:a8:84:
f1:02:6b:df:b1:7b:d0:8b:0e:88:6c:39:73:30:60:
6f:8d:6a:31:27:00:64:c3:04:b0:4b:31:4e:77:88:
1e:a0:2c:81:e1:05:e1:31:ed:2d:ff:80:35:76:bc:
46:e4:e7:a4:9d:4c:3b:c2:e7:13:ab:78:79:d3:51:
92:12:4a:17:82:bd:37:1a:08:37:5e:4d:84:d1:3f:
b0:dd:5c:28:e2:ca:e8:c6:86:b4:d1:0a:7c:f7:47:
97:05:bf:6a:c2:b7:cf:eb:0e:c1:c8:6b:bf:12:f7:
3e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:6B:27:7D:6A:D8:59:08:28:4D:BF:D1:49:95:18:8A:A8:70:97
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:a0:66:3c:f0:d8:4a:28:10:9e:df:54:45:a9:44:28:ee:
0d:ec:09:d2:7e:27:9d:1f:8e:af:72:99:19:32:b7:18:b3:00:
3c:15:94:b2:c9:13:d6:76:7e:9a:a7:37:8c:2e:b8:24:0a:ec:
f7:17:5f:32:80:8d:5c:cb:43:27:3b:fb:3f:00:69:35:ba:16:
19:54:bc:d4:e8:df:64:5f:2b:79:ab:7e:57:aa:91:a7:b7:9a:
64:1e:79:68:45:b5:07:58:bb:59:0d:d8:47:81:89:c1:d1:bd:
9a:e2:88:8e:65:e6:4e:3b:83:fe:18:5b:e8:a4:8a:bc:0a:21:
63:28:3d:7e:eb:89:ea:db:5c:48:71:6d:ad:8d:48:7a:ec:b1:
be:04:18:96:b4:14:66:80:b7:ed:71:d0:e5:57:25:a4:e8:70:
f3:fd:aa:3d:2b:cd:e0:e2:ba:47:28:85:58:40:39:98:5b:a2:
ea:7d:10:90:1e:62:6b:85:c3:ad:3b:0d:fe:11:82:d6:84:8c:
ed:b0:7b:1d:1f:7f:30:bb:39:a9:da:bf:a1:8c:43:8d:6c:09:
15:9d:26:32:b6:fd:e6:33:61:1f:3b:a4:7b:46:0a:f5:0c:b5:
ff:58:c5:11:66:43:ef:46:09:fb:e5:c4:b4:04:de:39:83:3a:
6c:00:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:39:03 2025 by rpki-client