Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier: 43o73QqdsH76lfsNeyRN4VeXF0KiMZ8Ho80AhxRhfiA=
Subject key identifier: 7B:18:01:4B:40:57:98:E4:3D:16:19:C9:35:A3:EA:1F:EF:74:4D:80
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 01992330CB50EEDF7E7EE3BC39923E3E4F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number: 0FF3
Signing time: Sun 07 Sep 2025 08:00:24 +0000
Manifest this update: Sun 07 Sep 2025 08:00:24 +0000
Manifest next update: Mon 08 Sep 2025 08:00:24 +0000
Files and hashes: 1: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (hash: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=)
2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: Ru7nkfGfeY1x4wW6B/4m8GK1jyeXNwKy4lHACkwK+1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cb:50:ee:df:7e:7e:e3:bc:39:92:3e:3e:4f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Sep 7 08:00:24 2025 GMT
Not After : Sep 8 08:00:24 2025 GMT
Subject: CN=7b18014b405798e43d1619c935a3ea1fef744d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:bb:3d:b5:45:59:13:47:9f:29:c9:ce:b5:
d7:31:9c:a1:51:21:4f:7b:72:96:91:90:dd:db:e1:
3a:5b:92:4f:0f:f8:0c:32:c2:35:4e:99:42:39:a0:
93:78:0f:4f:63:5e:ec:8c:c9:8e:4a:2b:07:c1:f4:
8c:7b:80:64:a6:85:2c:94:95:57:b7:b2:cd:6b:fe:
d9:86:5f:1b:e5:16:d2:6d:76:e5:7c:80:bc:04:ea:
ba:5c:b5:5b:dc:17:b0:88:93:39:d0:02:fd:7d:1d:
c7:c4:2a:1c:73:d2:56:41:0e:9e:c6:8c:f2:77:03:
86:a1:ff:cf:58:64:4a:65:5b:76:91:d9:01:0f:8b:
0b:1b:2e:75:ac:2d:9f:de:16:3e:e1:fd:d0:3c:58:
d2:93:ee:84:42:fd:0f:cf:df:83:2c:f9:29:5b:09:
cc:0b:88:70:8c:c5:b4:07:71:98:16:68:f3:8d:d7:
43:36:ba:15:2f:e2:dd:89:20:9f:84:b8:e7:2e:2b:
a3:17:93:5c:f5:d0:be:f4:36:c9:e0:63:fa:c0:ca:
5f:57:d6:b0:d1:65:c1:c6:55:dd:b9:8f:0e:7b:c8:
98:e5:51:7f:6f:f8:dd:3d:2a:ef:ba:99:c3:12:f4:
5a:90:5c:df:79:f8:b3:2a:1a:11:3e:e2:d5:7f:86:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:01:4B:40:57:98:E4:3D:16:19:C9:35:A3:EA:1F:EF:74:4D:80
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fe:c1:04:61:8b:ad:77:2e:81:40:93:e6:e2:62:4d:c1:9d:
6c:13:eb:3b:60:b7:a9:b5:e9:dc:1b:1f:97:ca:19:de:6d:b0:
2e:b1:43:ee:43:d8:25:6d:5c:53:be:ef:13:7c:66:9a:da:f7:
72:9e:9d:28:9e:e8:30:45:c0:c0:7f:e4:d2:fc:b8:e9:3e:64:
50:40:21:50:42:17:8a:9e:80:3f:c3:48:70:6f:2a:13:5c:15:
66:04:15:43:04:df:8f:58:f7:81:46:f2:09:0c:18:f0:ca:aa:
c3:e0:cf:56:a9:f4:77:5e:78:b9:b1:e9:75:b0:56:f6:18:5a:
b6:6d:da:ba:5d:42:8c:60:61:2a:5c:9e:94:04:6d:fa:38:aa:
6e:e3:6e:30:42:96:1e:3f:1d:fb:0f:89:f4:87:dd:af:e2:e5:
1d:3a:fe:f5:38:bd:3b:55:a7:09:48:44:c7:4f:a5:bf:4c:16:
b0:d9:e5:a6:91:40:c4:c6:6e:02:97:b3:7c:79:13:5f:03:cb:
98:34:a1:33:89:95:55:e2:b6:f8:8f:ad:04:c8:77:e5:2e:30:
b3:ce:1a:ee:27:86:13:98:d6:b0:d6:24:4a:be:c1:33:4f:dc:
4c:99:af:32:7c:66:6e:67:64:23:98:db:e2:62:64:e4:c8:0f:
40:4e:2a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:44 2025 by rpki-client