Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: ZNiEL3Rv4O/lpQOOib19Vl6pRI2WyG6btZkwqSVsV7A=
Subject key identifier: 4B:BF:FF:F0:75:F8:28:AF:BF:13:57:A4:76:39:DE:49:17:03:AF:F1
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 01984A40D92EFF7A683AEF2E1BDD3AC01D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0CB7
Signing time: Sun 27 Jul 2025 05:00:20 +0000
Manifest this update: Sun 27 Jul 2025 05:00:20 +0000
Manifest next update: Mon 28 Jul 2025 05:00:20 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: 8JLTpW+ru5na/06yVc69LbU+7pPr57EQicacJNs+UA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d9:2e:ff:7a:68:3a:ef:2e:1b:dd:3a:c0:1d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Jul 27 05:00:20 2025 GMT
Not After : Jul 28 05:00:20 2025 GMT
Subject: CN=4bbffff075f828afbf1357a47639de491703aff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:85:d9:2a:7d:3b:7b:38:36:4d:fb:89:ba:
49:1d:f3:98:e8:3c:1d:d1:60:0e:a4:f7:be:a8:d8:
ab:f3:10:87:bc:f6:2f:6e:c2:d3:68:41:0c:41:49:
ea:20:45:cd:60:9e:b5:d3:92:db:ec:26:ac:07:0a:
b7:a0:80:e2:33:61:95:ee:75:16:7b:d2:ab:07:7d:
fa:0e:04:66:3f:48:28:77:35:24:18:45:05:37:02:
23:d1:ca:1f:fa:13:6c:cb:ce:b9:c8:08:75:1f:ef:
9b:90:71:de:62:17:4e:26:e1:05:f4:c8:ed:93:81:
84:a8:41:3d:08:d6:30:b4:a8:ca:93:7d:0d:ae:85:
7b:63:25:1f:60:d4:cb:e7:68:a8:8d:22:e4:d2:6b:
94:bf:4f:19:d2:6f:ea:8e:dc:29:04:1f:f8:68:4f:
2a:03:c3:c4:84:42:0c:27:44:1c:37:35:02:42:3b:
64:a1:15:f0:4d:a9:d3:af:31:79:56:6f:b4:70:7f:
2a:c7:b8:05:1f:62:68:c6:35:b4:12:cb:85:f7:8e:
d0:0e:a8:8b:53:24:c0:41:52:6c:85:b3:40:45:e5:
ab:d1:71:60:62:fe:8d:45:10:3c:a2:ca:75:07:da:
f0:0e:27:e2:29:fc:fe:7f:ea:a8:0b:4c:3e:e5:40:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BF:FF:F0:75:F8:28:AF:BF:13:57:A4:76:39:DE:49:17:03:AF:F1
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c8:1a:bb:4c:b1:38:ef:9b:f9:04:70:b0:52:e7:13:0b:d3:
80:ad:39:3e:de:9a:a8:c9:d7:c7:51:bf:ab:6f:20:55:4d:de:
cf:ad:a3:0e:c9:92:59:20:0a:cc:4f:71:81:12:e3:c7:d9:3d:
c7:ca:42:e9:73:4f:73:c2:34:92:3e:05:dd:41:42:e7:6b:32:
55:61:3d:cc:30:0a:85:95:9b:98:ce:cb:76:39:0a:5f:29:6b:
7a:c9:a1:25:40:57:6a:00:06:ce:61:d9:88:7e:33:3a:ab:74:
d3:92:c4:24:a0:f2:38:6d:7b:86:cb:64:95:76:f6:b7:c2:74:
4c:d4:df:bc:f3:35:cd:56:04:3f:db:e8:6e:dc:f2:15:ff:af:
45:0a:7b:45:18:a0:2c:6c:ff:6d:bc:d2:01:8f:c0:9b:c9:85:
59:84:60:44:1f:32:93:f1:7f:59:83:3d:ba:35:4b:0b:7a:56:
01:68:95:41:91:ff:2a:89:81:d7:80:fa:22:42:f3:c6:4c:09:
f4:14:5f:ac:a9:fc:32:73:f1:9d:fe:a8:6b:db:03:78:17:e6:
1e:7c:dd:18:9b:b9:85:ee:26:c3:bd:55:a5:98:50:d7:25:65:
26:33:98:c6:66:e8:7f:20:5c:c2:de:fd:f7:f8:6f:96:b1:d7:
ea:5b:a5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:27:39 2025 by rpki-client