Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: J68yFROW5/EogFMFOU6ConFTRbHMaTuZpqVoxEXyZ84=
Subject key identifier: DE:BC:B2:96:AD:A5:AB:92:0E:6F:E4:55:57:26:BD:57:2C:4F:3B:48
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019848C08EF1F7ABFAC9007B358BFFE4AD39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 22:00:35 +0000
Manifest this update: Sat 26 Jul 2025 22:00:35 +0000
Manifest next update: Sun 27 Jul 2025 22:00:35 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: 4zpuqaOaH31X66+dmcXQXQ+gACoE+H5oOF6VIpebGok=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:8e:f1:f7:ab:fa:c9:00:7b:35:8b:ff:e4:ad:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Jul 26 22:00:35 2025 GMT
Not After : Jul 27 22:00:35 2025 GMT
Subject: CN=debcb296ada5ab920e6fe4555726bd572c4f3b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:33:13:02:2a:83:5b:7d:3d:fc:8f:18:77:
1d:d3:97:49:8b:2b:96:45:4b:3b:d1:ab:b5:2e:27:
24:85:91:bc:25:66:55:32:85:f4:da:9e:31:88:1d:
5b:a7:19:f1:51:32:c7:a1:3e:84:d7:67:47:9a:08:
38:d3:43:04:df:78:b3:9b:64:c3:f0:e7:f6:ab:0e:
08:89:b9:55:4b:ef:da:ab:94:e5:86:5b:a1:10:72:
80:9b:ac:82:68:5c:4c:a1:b5:55:46:ec:95:45:a4:
6b:e6:93:ba:a6:ef:2e:71:94:3b:e6:42:0b:37:aa:
a6:93:69:a1:f6:79:b8:d5:71:27:1d:d5:9a:ad:11:
fb:6e:f5:e6:1a:f3:9c:34:d2:64:50:d6:4c:a2:cc:
63:14:1c:40:24:27:c1:29:06:2b:50:71:51:3f:a9:
fb:2d:28:9d:c6:94:82:3f:4c:ea:00:93:ac:a4:d4:
47:80:3f:f9:40:89:8a:32:29:be:f3:66:ad:1c:ec:
93:5c:5f:be:2d:e3:fc:76:f6:08:f5:f8:d2:32:17:
4c:b5:f2:6e:be:3a:64:0d:09:5b:aa:b2:f3:70:5a:
75:f7:d2:73:8e:be:65:d8:72:e0:a5:04:2a:26:5f:
96:f4:f0:b2:03:1b:92:be:e7:22:f6:8e:ad:57:8c:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:B2:96:AD:A5:AB:92:0E:6F:E4:55:57:26:BD:57:2C:4F:3B:48
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:74:92:8f:4a:f6:25:8f:68:ff:89:da:d9:1f:75:bd:b7:7d:
7b:26:70:33:3e:86:38:65:67:3a:77:e9:76:9e:a8:d1:fb:a6:
7a:d9:df:8c:b9:32:40:76:fd:cf:30:4a:37:fb:3a:90:84:fb:
0a:7b:63:e2:21:56:8a:e7:e3:2f:27:b8:c8:e8:ec:0a:d8:65:
e7:cc:b8:cd:6d:ec:8d:ac:82:f3:d0:04:e8:af:e2:54:cc:80:
40:18:2e:b3:32:06:88:18:99:76:60:56:f2:52:b9:23:a7:d5:
20:a2:12:57:21:89:b7:af:0a:98:4b:fa:44:d9:d4:05:23:1c:
e8:52:38:84:4e:27:d1:cc:e4:16:10:6f:83:94:33:4a:ad:62:
3d:54:37:b3:24:da:28:81:23:1d:bc:6c:e1:8a:e0:a8:49:d8:
d7:02:a6:5e:7e:bc:5a:c5:ad:53:28:01:15:dd:ff:0e:5f:cf:
d0:2b:a5:9e:8e:1a:fb:b1:f0:9d:d5:7c:db:58:9b:55:f0:b4:
4d:c2:d2:06:6d:1a:a8:8f:50:f8:00:cb:1d:68:88:0c:56:19:
32:a7:ef:0a:d5:9a:1f:62:87:4c:13:c9:ce:f9:30:0e:99:91:
2b:75:bf:6a:ac:0b:97:5d:7e:38:13:5b:fb:3d:5d:f1:36:a2:
ac:f8:2d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:33 2025 by rpki-client