Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
File: pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft (raw, json)
Hash identifier: y02MratQc37f0vggcPaPFjUohAFJxh7ck8oEdNB8KiM=
Subject key identifier: B9:5B:AC:E0:9D:42:CF:FF:31:7F:76:E2:3B:AF:FA:62:A2:0D:67:53
Authority key identifier: A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
Certificate issuer: /CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Certificate serial: 019922FA0B798F2BAAD82A598DE06237FB32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
Manifest number: 9C
Signing time: Sun 07 Sep 2025 07:00:36 +0000
Manifest this update: Sun 07 Sep 2025 07:00:36 +0000
Manifest next update: Mon 08 Sep 2025 07:00:36 +0000
Files and hashes: 1: g6lOJZk_IOKaTF7q4TnhPviaoeE.roa (hash: 3uBzUH3gzYo8KFcFQD+b7edt/srB4qwjOtcspxNTXPs=)
2: pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl (hash: w1KuBCpdx/0XWh9LLXCmXJvmTK3B5Yk28dDkXhqTt/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:0b:79:8f:2b:aa:d8:2a:59:8d:e0:62:37:fb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a3a9c71391d8fa06b7342aa92c6eea2a53e5c0
Validity
Not Before: Sep 7 07:00:36 2025 GMT
Not After : Sep 8 07:00:36 2025 GMT
Subject: CN=b95bace09d42cfff317f76e23baffa62a20d6753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:79:13:bb:6d:19:c8:be:ff:1b:ee:2f:c0:
a3:ab:14:47:d6:19:d5:a6:12:43:3a:a2:d9:36:31:
b8:ee:5d:f5:cc:bf:fc:e2:39:be:6e:ab:a4:8b:62:
7e:68:66:33:a3:d8:92:b2:ca:d3:c7:fb:eb:c9:33:
99:b6:c6:b8:2d:28:ec:75:6b:a2:33:e9:17:af:d4:
89:06:43:a5:c9:5e:87:94:ee:02:c2:84:77:4d:a2:
50:bb:36:a4:be:6a:07:6b:d9:da:30:d9:79:f4:e9:
9e:0d:95:21:f2:18:41:29:8f:f5:10:44:f7:a5:d7:
cf:08:33:04:99:7f:7b:93:15:b9:03:47:19:da:c9:
cf:f8:bd:fa:cd:f6:56:57:4e:b7:54:cf:9d:c1:a9:
e2:64:d4:37:08:b1:2c:4c:59:49:a1:b8:45:34:6a:
a6:8f:8a:d4:97:27:b9:8f:08:af:ca:16:2b:b9:94:
3b:1c:bc:65:06:fb:e8:b7:3b:d9:97:5a:aa:df:15:
6f:c7:71:c7:c7:e6:e0:67:a1:51:c9:31:1e:11:12:
e1:d5:51:32:71:05:06:c9:95:1c:dc:2f:39:4a:d3:
9b:7d:f0:c0:9b:85:8e:4d:c8:d6:f2:f7:20:80:ac:
d9:7c:cd:35:c1:38:2e:e2:62:31:24:2a:4a:d3:07:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5B:AC:E0:9D:42:CF:FF:31:7F:76:E2:3B:AF:FA:62:A2:0D:67:53
X509v3 Authority Key Identifier:
keyid:A6:A3:A9:C7:13:91:D8:FA:06:B7:34:2A:A9:2C:6E:EA:2A:53:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqOpxxOR2PoGtzQqqSxu6ipT5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/25e466-6dee-485d-ae2c-c670f0eb23a4/1/pqOpxxOR2PoGtzQqqSxu6ipT5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5c:b9:41:df:93:51:21:b7:c1:a4:b5:a6:e9:1e:41:fb:36:
85:30:5b:00:22:d6:e7:e4:c8:5c:b0:55:a8:ba:9b:20:7c:ed:
17:1b:79:49:8a:6c:aa:68:05:69:e3:83:ae:d4:82:c2:e9:cb:
7a:f3:ab:4d:ae:4c:86:87:65:60:8c:4b:a1:77:51:3d:93:af:
e5:30:31:a4:46:89:34:32:cd:b0:f3:7f:f7:5f:9d:cb:de:ac:
60:74:f7:b8:0b:f2:c5:8f:b0:65:3c:6f:c6:a5:da:d4:f3:76:
3f:9e:f0:2b:20:34:08:34:0a:7e:3d:86:69:66:d9:35:c1:ab:
19:1c:7e:81:a5:e5:44:f4:ca:44:b6:60:4d:db:c8:36:90:b2:
d7:12:ee:a4:4a:f7:54:26:96:d9:a0:6a:5c:2e:c5:96:ac:8e:
00:47:43:f1:70:11:04:9b:6e:d2:ba:d6:60:b5:00:da:b5:39:
15:1b:1d:97:95:3e:df:81:af:cf:f1:48:f7:f8:bc:b1:c1:e2:
1b:3a:83:cf:c0:2f:f3:2f:9c:00:21:39:b9:76:74:7c:86:d8:
30:b9:07:d9:f3:30:86:70:a6:d0:2d:1b:07:e4:85:dc:9a:6c:
14:16:ff:67:ce:db:84:90:f0:44:5a:de:5a:28:5f:36:23:c4:
2f:56:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:38 2025 by rpki-client