Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: dCcqzN+qtOPfP6/HM0/s/t+fjLKsnV4GaVxC5Qq6plU=
Subject key identifier: 31:DA:55:0A:14:37:84:23:C0:5C:89:C3:08:37:9E:AD:A5:F0:13:25
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 01993424A945EEB2FB7BA34B568B064DA954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 15:00:41 +0000
Manifest this update: Wed 10 Sep 2025 15:00:41 +0000
Manifest next update: Thu 11 Sep 2025 15:00:41 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: FrTLfCu1qeQvMwNsnXL2DWsX9bTmcHS21Tp2cf48Uso=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:24:a9:45:ee:b2:fb:7b:a3:4b:56:8b:06:4d:a9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Sep 10 15:00:41 2025 GMT
Not After : Sep 11 15:00:41 2025 GMT
Subject: CN=31da550a14378423c05c89c308379eada5f01325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4e:dd:6d:11:b9:57:c4:a6:6d:7c:af:72:44:
7b:ed:35:fd:48:8f:4c:62:41:4f:3c:5b:91:2f:f8:
70:2a:5e:5f:d5:87:06:78:7d:20:57:81:0f:42:59:
6b:99:cc:38:f4:ea:c8:30:17:53:72:ec:05:8e:93:
6c:e2:b9:ee:b3:49:c9:94:45:5f:3f:c7:d4:87:d0:
c2:e0:95:33:0a:ce:13:73:6e:c3:06:50:51:1e:47:
33:b0:bd:12:a5:d5:4d:07:12:49:ec:6f:9d:6f:61:
d8:68:d2:2a:0e:34:18:fb:2a:f3:27:7b:ec:2f:98:
d6:6e:fb:78:b8:fc:39:2a:5b:c8:d4:27:3a:eb:6f:
9c:64:80:bf:86:87:b9:25:64:ff:c4:12:2e:e0:58:
30:df:d3:fd:08:4c:35:3d:b5:39:a7:68:34:56:9e:
f6:ff:55:40:26:57:f3:a3:31:0a:3e:66:e3:d5:83:
a2:b8:c6:a2:ae:aa:25:ba:c4:a6:a9:68:2b:47:6c:
b9:f9:4e:9e:f3:38:5f:4f:df:65:71:85:fb:8f:63:
71:1e:2f:53:bd:eb:e9:45:10:da:80:eb:1f:c9:c8:
35:9c:f3:33:9c:18:13:1b:6a:8f:f3:bd:07:4c:6c:
88:31:ad:3a:70:a6:89:d9:cc:6a:af:86:0e:c7:d6:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:55:0A:14:37:84:23:C0:5C:89:C3:08:37:9E:AD:A5:F0:13:25
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0b:8e:2d:39:b9:23:1c:04:7b:ab:7e:d3:f2:59:71:2d:23:
9e:86:a6:2b:41:cd:0b:b7:81:08:da:6c:4e:4d:6c:84:ab:fd:
8e:0e:7b:6b:a6:54:ef:e4:20:f4:e8:5e:8f:3d:03:89:2f:65:
6c:97:a1:4d:6d:25:7c:78:73:3c:cd:90:26:f9:b8:79:5c:05:
65:2d:ed:af:a1:a2:57:1b:19:89:74:08:af:5a:be:d3:1f:9e:
d1:7d:70:be:a7:13:10:18:06:ab:d5:65:5d:09:df:37:1f:5b:
59:7a:00:f5:62:d2:34:7c:bc:20:05:b6:f4:ce:64:14:1a:61:
16:98:b3:e5:eb:65:13:78:89:94:7b:ef:b1:31:d5:3a:d3:c3:
31:ee:48:a8:11:5a:44:bd:81:1a:ce:0b:a6:0b:25:2a:92:fc:
7b:88:84:a0:d2:0e:9d:e6:ed:b6:7d:0d:2d:85:76:54:fb:d5:
01:51:61:4c:97:80:20:5f:c8:63:7c:b7:60:24:48:53:87:0c:
1d:b3:3d:6a:81:64:6d:dd:7f:a8:05:eb:d6:60:b5:62:c3:47:
7c:64:31:93:dc:63:1e:aa:e2:3d:0e:8e:9f:1a:2e:74:01:51:
54:c3:27:ad:97:6d:82:23:1e:10:82:e5:00:75:31:99:8a:1f:
bf:e5:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:46:03 2025 by rpki-client