Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: Akn45ydbAPdFV1bMN3CqzZtbfA0lgCqA+IBpjO/ib40=
Subject key identifier: 99:1B:AC:EA:52:6C:88:23:8F:AA:E8:46:B7:E5:25:EB:FA:F1:2C:85
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 0198C9ED673845518D818BC313296D9168C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0FDF
Signing time: Thu 21 Aug 2025 00:00:35 +0000
Manifest this update: Thu 21 Aug 2025 00:00:35 +0000
Manifest next update: Fri 22 Aug 2025 00:00:35 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: 4nmTp+aSYqJ+aoaFMKq5NHD4f0NDA9HGGCKNIfFV+20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c9:ed:67:38:45:51:8d:81:8b:c3:13:29:6d:91:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Aug 21 00:00:35 2025 GMT
Not After : Aug 22 00:00:35 2025 GMT
Subject: CN=991bacea526c88238faae846b7e525ebfaf12c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:fa:35:9b:c6:91:66:49:29:71:e9:67:22:
d0:7e:60:8a:56:8b:1d:7e:8d:f7:42:66:3a:d3:cc:
9d:62:10:8f:a7:db:97:d9:3c:f6:e8:1a:d5:1e:94:
0a:d6:8e:87:25:36:46:ad:cb:15:e8:3d:57:62:44:
61:d1:2e:1f:b6:b1:d6:79:b7:8b:f0:a7:be:ad:40:
74:c1:f7:d2:c4:6c:9a:04:e0:e4:e8:23:74:bb:14:
c5:32:8b:6b:af:08:f6:45:2c:09:b7:4d:fa:74:86:
4e:6d:c5:a5:e0:8f:a4:ab:37:e3:d7:50:44:51:03:
37:9f:4d:ae:af:c7:f5:9d:75:f2:ec:54:ac:01:2a:
4c:35:05:b9:b4:a2:41:69:33:ef:ff:59:d3:d6:fb:
c0:e3:7a:01:3f:0b:e4:37:e1:bb:06:c4:ee:8a:9b:
28:8b:c7:d7:7f:e7:48:b0:06:9b:c4:40:95:ab:2d:
64:3c:eb:40:09:13:da:24:4c:24:7e:77:03:e1:a9:
46:03:6a:2f:ee:f9:ce:b7:c6:1a:ce:bf:86:0c:9b:
37:f3:9e:b8:2f:49:48:0b:5b:93:5a:63:f7:c2:be:
a9:4a:78:5d:3c:fe:d7:60:e7:40:69:28:82:79:5f:
86:1d:a8:a1:04:18:d4:fb:af:35:6f:c6:4c:8b:a1:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1B:AC:EA:52:6C:88:23:8F:AA:E8:46:B7:E5:25:EB:FA:F1:2C:85
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:bd:6b:1e:da:1e:f4:81:9e:ce:49:99:81:e3:d9:c6:d1:41:
0f:f7:1d:6f:26:59:06:56:44:f4:fb:d9:4c:de:1d:a1:e6:92:
07:6d:a9:8d:23:9d:fe:e0:47:4b:d4:e6:b2:ec:e3:65:73:4f:
93:3e:0e:56:c1:82:f4:e6:a8:f2:a1:be:e3:d3:4a:c3:ed:4d:
e3:ca:02:43:99:2c:f0:f5:a0:f4:26:b0:bd:05:76:13:98:7b:
65:92:bf:fe:7e:ac:74:9e:bf:9e:ff:6b:86:e2:b6:29:45:73:
99:59:62:25:cb:19:51:e6:76:f5:9c:ea:00:f5:80:8a:aa:b3:
e1:2f:aa:d7:6e:1f:8a:2f:3d:71:cb:9c:ad:21:93:ec:73:10:
3d:a2:c5:9a:87:71:33:07:ba:f1:23:de:73:7b:4c:7d:c7:b5:
c7:58:98:a1:61:77:d3:78:d2:1c:38:71:e8:af:56:7d:37:64:
10:39:61:99:45:07:66:20:7b:6c:c0:25:77:66:a0:a1:2e:e3:
f6:59:cb:67:3b:f7:3a:fa:12:0c:ed:8d:11:88:fc:2b:5e:5c:
c4:d6:31:5e:fb:25:06:4a:92:b5:35:04:88:ab:c7:5e:67:3d:
af:bf:48:90:4a:90:26:d4:1f:8d:f8:8d:67:f0:4b:9a:88:84:
59:75:fd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:01:57 2025 by rpki-client