Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: bXeEyGupFVaUp260qu2wb7FfXtICvTNbD39rbg05ER8=
Subject key identifier: 63:34:35:98:E4:87:E3:A2:D6:C0:E9:AC:94:3C:8F:03:0F:D5:F1:DB
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0199221ED8DFBA50A70EFB3C7E9354FAC043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:01:10 +0000
Manifest this update: Sun 07 Sep 2025 03:01:10 +0000
Manifest next update: Mon 08 Sep 2025 03:01:10 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: RXuEMFLpTwYeKt0Rlr9Tu+3OPanOClSCGoXsyEscj/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:d8:df:ba:50:a7:0e:fb:3c:7e:93:54:fa:c0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Sep 7 03:01:10 2025 GMT
Not After : Sep 8 03:01:10 2025 GMT
Subject: CN=63343598e487e3a2d6c0e9ac943c8f030fd5f1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:48:03:1c:28:b1:fc:e7:18:5f:95:7a:b0:b6:
1b:f4:70:9e:b3:ab:ed:07:57:b4:27:5a:14:42:a4:
e8:92:be:02:11:63:27:45:d3:d7:e3:45:93:b8:5d:
21:c6:6f:fa:83:22:69:80:c7:41:6a:bb:0d:3d:a7:
ac:66:7b:bd:59:33:9d:c8:2a:c2:1f:5f:d9:18:aa:
df:63:a9:14:84:08:48:ce:ac:72:66:9f:50:67:86:
b9:c2:69:21:61:6c:14:57:6f:46:b2:8a:76:a1:d0:
aa:f9:ba:78:85:78:ab:a1:ca:87:37:46:cf:03:ed:
6d:e0:46:78:0a:38:b3:4f:7e:e0:64:16:4f:b1:4e:
56:e2:39:69:eb:4a:d7:96:08:2a:a6:b6:46:4c:18:
51:1b:38:5b:02:db:c0:c8:4e:06:a5:fc:49:d6:96:
7d:02:f0:bf:a4:8d:bb:c2:cb:70:e1:4e:e6:0c:97:
d2:b5:d0:96:c7:a9:66:a3:b8:d4:f9:82:a6:fd:d4:
23:0c:9f:d9:40:47:47:5f:3b:a7:0f:da:73:fb:83:
37:ee:0b:cb:e1:3a:d6:29:32:8e:e2:bd:74:66:ed:
82:00:2a:18:4c:a6:d2:eb:eb:f7:82:6e:4a:84:98:
d9:fb:56:ba:0a:07:aa:27:65:89:8f:35:ed:a8:8a:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:34:35:98:E4:87:E3:A2:D6:C0:E9:AC:94:3C:8F:03:0F:D5:F1:DB
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:84:97:0d:e5:c1:56:fe:cb:78:0f:25:47:99:2f:ff:8e:5d:
fb:ad:3e:1d:24:f2:d4:72:0b:c8:d2:51:27:f0:1e:03:97:9a:
d8:6f:21:a5:7e:8b:0c:94:19:b2:fa:7f:ba:88:82:e1:f3:cc:
3e:ce:b5:f4:95:0a:07:e0:10:eb:bb:40:12:69:90:40:1b:d0:
64:53:e9:f7:82:cb:b2:fe:bb:6c:93:0c:cd:83:f9:7c:7f:f1:
37:f1:16:18:85:13:95:53:2b:fd:3e:51:22:d1:20:16:d7:d5:
3c:58:b1:f2:c6:80:92:26:12:df:f1:52:bd:92:f5:25:50:f1:
05:5e:c7:64:cc:98:12:02:e8:0a:a9:78:de:f0:b8:32:d4:37:
ff:8f:15:23:de:06:f6:28:40:ba:3c:3a:35:34:ec:1c:62:50:
08:00:8f:87:ad:d8:51:ef:57:d0:ec:a5:9d:af:1f:c2:64:0c:
c5:22:b0:64:f6:82:c2:2d:d6:0f:99:4f:75:5d:05:83:b8:4f:
c8:a0:6a:b6:8a:0d:9a:ff:55:9a:f5:15:ba:2c:29:1d:ae:b2:
62:54:e0:45:d3:bd:4a:25:28:f7:e2:3d:0d:fa:db:3a:ea:cb:
0e:35:34:70:bd:08:73:8d:9f:18:d2:49:c4:ad:cf:78:ac:95:
c4:76:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:01 2025 by rpki-client