Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier: xDaWZKQ4xeYLuQjiAUp+9hEQZhbjM2O9msx9rm/ulrU=
Subject key identifier: A9:FC:28:CE:75:E4:30:DF:88:CB:C2:3B:B7:E7:99:9B:85:54:40:76
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0198C67F527E5D9BE828A6A3E332DBF261EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number: 0AF9
Signing time: Wed 20 Aug 2025 08:01:29 +0000
Manifest this update: Wed 20 Aug 2025 08:01:29 +0000
Manifest next update: Thu 21 Aug 2025 08:01:29 +0000
Files and hashes: 1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=)
2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=)
3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=)
4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=)
6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: HCF6QPQijyTNSl1IVKOkHeVfAOIbEraB5IVtMpro/jI=)
7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:7f:52:7e:5d:9b:e8:28:a6:a3:e3:32:db:f2:61:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Aug 20 08:01:29 2025 GMT
Not After : Aug 21 08:01:29 2025 GMT
Subject: CN=a9fc28ce75e430df88cbc23bb7e7999b85544076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d1:87:83:a9:75:69:64:2b:85:10:e9:ce:32:
4b:3d:f9:de:cb:5e:e5:ca:53:9b:86:04:a0:12:32:
92:65:0e:42:59:ed:53:7a:bc:cc:c9:51:a5:af:b6:
e9:1e:48:37:04:f0:fb:d1:54:f0:f9:aa:f9:7a:0f:
d2:85:8f:a3:d6:82:36:f0:86:03:dc:b0:da:4a:8e:
89:da:15:70:7e:8a:48:ad:a4:68:9b:91:fc:97:f0:
c8:81:a4:ec:fa:76:27:0d:e9:2f:d0:c8:e8:a6:05:
09:20:3b:b6:99:a4:88:05:1d:1d:4d:c2:64:44:ee:
af:45:92:54:52:bb:71:d2:ba:e7:6c:ac:3c:0a:d6:
ab:e1:43:74:ee:c6:08:dd:48:1a:f4:1d:89:db:e0:
80:9a:d2:2f:79:48:9d:03:c9:9c:0d:16:18:24:10:
25:8b:b6:a2:01:3b:b9:53:3d:6f:13:05:65:0a:82:
7c:27:80:cb:e8:0d:5e:cb:c7:06:8a:7e:25:a2:26:
0d:f7:25:aa:a8:08:5c:c5:3f:fd:79:7d:d4:71:b2:
e9:6e:3c:7f:95:d4:8c:81:f1:a8:a3:a0:68:6a:5b:
f5:12:f8:08:02:88:5c:0f:08:e4:fc:c9:e0:aa:e0:
21:34:60:0e:72:b7:ba:6b:c2:c3:8e:37:9c:21:1b:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FC:28:CE:75:E4:30:DF:88:CB:C2:3B:B7:E7:99:9B:85:54:40:76
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e8:4f:0b:1a:5a:73:9e:c5:e1:63:57:d2:48:10:d6:80:b7:
81:d2:39:bc:af:35:98:03:d5:28:d0:e2:1a:11:8b:61:7c:30:
c1:e3:ec:99:29:c9:0c:1f:28:04:22:ec:ce:7b:ca:59:4a:64:
2e:1f:52:48:98:3f:f8:0b:00:05:65:59:10:0b:6e:5e:dc:cc:
cc:73:97:7b:cc:76:09:f1:52:f5:9f:0a:e8:85:98:f3:29:55:
4b:83:f8:05:23:63:1c:3f:b3:a1:c9:7f:f3:55:66:86:42:17:
94:32:26:49:69:10:78:40:37:ce:98:77:79:66:d7:bb:db:f1:
71:76:1e:2c:71:af:73:c4:a2:52:86:8b:de:d1:2b:74:6d:46:
5b:34:0d:a7:29:b3:0a:83:87:b2:81:91:c4:97:f4:af:bc:da:
e0:d6:07:fb:75:ec:da:ca:7e:0c:95:ff:e3:ba:21:68:6b:1d:
d3:f0:0a:94:b3:95:27:a8:d1:85:cd:12:fd:b3:22:10:9f:bb:
6d:7f:2f:7f:ea:32:b8:ee:33:69:00:77:7a:71:c4:10:b0:0d:
de:75:7f:a3:51:6e:0c:58:e7:d8:c4:8a:fb:a7:32:d8:f1:c2:
79:30:9b:18:5f:2d:b3:ed:85:d2:f0:6b:ad:01:3d:9a:e0:ab:
4a:34:18:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:29:15 2025 by rpki-client