Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
File: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json)
Hash identifier: rOv7IAw6WNcvGJHJaysQJq7tn3QOse8WBE8BmkEvYl4=
Subject key identifier: 51:1A:09:C1:F3:54:74:DC:C8:AA:A0:42:2E:A8:14:D9:DE:7B:2C:A1
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 019921E741BD960DB347F89F393F0E71B94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
Manifest number: 0B0F
Signing time: Sun 07 Sep 2025 02:00:27 +0000
Manifest this update: Sun 07 Sep 2025 02:00:27 +0000
Manifest next update: Mon 08 Sep 2025 02:00:27 +0000
Files and hashes: 1: 1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa (hash: d0O7JzfUI0auiFcqxl2U8Q+1vT7/+BPs1dhy7hNLrrs=)
2: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: 6Osls11xcpALxUldGAzhdPLmK7/HmapZQt9UxFleJ1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:41:bd:96:0d:b3:47:f8:9f:39:3f:0e:71:b9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Sep 7 02:00:27 2025 GMT
Not After : Sep 8 02:00:27 2025 GMT
Subject: CN=511a09c1f35474dcc8aaa0422ea814d9de7b2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:0a:86:2f:49:15:c3:92:bf:ea:90:0a:3a:
41:f7:23:fb:76:66:96:bb:5b:97:05:86:4b:e5:7c:
05:b8:37:74:42:f1:fa:92:12:a9:07:02:19:b1:dc:
33:2c:61:92:01:ae:bb:d6:ad:0c:2a:f6:f0:1d:82:
75:09:00:c1:d3:0c:a7:3e:ee:13:ec:ca:27:00:c2:
19:3d:f4:28:e8:43:15:30:7a:ac:4b:89:4b:df:ea:
be:21:de:7f:f4:01:5b:6e:a4:45:6f:fc:e2:1e:07:
37:d7:12:a4:0a:ba:2d:ed:70:07:17:bb:f3:51:ac:
e2:aa:3a:a2:cf:ab:e1:5a:c8:d4:fe:9f:10:3e:f2:
ed:a9:e8:31:18:81:6d:49:be:f9:3b:0c:01:57:21:
00:39:14:a9:9d:df:5c:38:51:8e:9b:71:bc:3a:41:
80:53:f3:bc:a2:10:58:3e:1c:1f:06:50:9e:dc:98:
c5:5b:9c:b2:32:b7:04:89:7b:03:76:c6:0c:69:9d:
1e:f7:b2:b2:69:0e:1d:7a:6b:3d:7e:a8:f4:83:b7:
9a:22:0b:de:10:0f:e4:35:6a:b3:8e:84:7b:75:26:
72:9d:c5:29:d6:e2:3c:86:4e:a6:ba:9c:c8:2e:df:
0b:7e:3a:ec:22:48:22:5c:f2:ab:a8:ac:de:ca:d6:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1A:09:C1:F3:54:74:DC:C8:AA:A0:42:2E:A8:14:D9:DE:7B:2C:A1
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:03:d4:cf:e6:93:26:7b:40:ab:f5:41:f3:e0:01:c8:20:6f:
33:df:0f:95:45:85:7a:8d:2b:46:33:74:e3:a9:53:4e:09:41:
ac:17:00:6b:2f:f6:31:98:64:60:57:40:3e:9f:22:03:57:8e:
be:db:81:c9:56:0a:30:7a:f4:18:cc:86:8f:5a:84:65:aa:82:
a0:40:73:d9:34:37:ce:b7:a6:f7:ae:23:a1:e5:04:69:ca:6d:
40:79:bb:b0:5a:cc:e0:73:17:21:28:cd:4c:1a:2e:80:f7:98:
c7:bd:9f:06:ec:c5:3d:dc:5e:0b:64:f7:78:61:ff:13:e4:49:
eb:2e:6a:5d:af:e6:e0:25:cb:d5:34:b6:52:0f:47:8d:d9:0c:
0a:75:bf:33:25:ef:3e:b9:df:85:fc:a6:d9:80:13:ed:40:8a:
91:e4:11:03:73:ca:22:ca:e2:03:de:c4:15:aa:b2:0f:c3:e5:
51:46:ad:9a:74:b0:4b:8e:7c:f1:54:e6:62:d5:dc:51:64:76:
fb:bb:a2:b3:cd:ad:89:cc:16:ba:6d:52:e4:2a:db:78:f5:4d:
9a:49:2c:fd:7b:cc:bf:fb:e5:ec:0b:50:53:b8:ba:f9:33:6e:
c8:59:6b:48:04:88:c4:0a:fb:92:a3:95:16:aa:c7:6c:19:fd:
9d:eb:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:18 2025 by rpki-client