Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
File: pdCLMVCtNN4riFkhdBkkCDlvEfs.mft (raw, json)
Hash identifier: WeWn8Qu37G4lPJrp85bK47pjGdmnm9CuPj9rdcoTzio=
Subject key identifier: DC:04:34:54:23:23:6B:F8:E1:82:B1:0E:B3:C4:71:B2:97:47:F3:4B
Authority key identifier: A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
Certificate issuer: /CN=a5d08b3150ad34de2b88592174192408396f11fb
Certificate serial: 0199240D090F86EC02DDD83DB6A2AEC9F4F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 12:00:58 +0000
Manifest this update: Sun 07 Sep 2025 12:00:58 +0000
Manifest next update: Mon 08 Sep 2025 12:00:58 +0000
Files and hashes: 1: bY2tBQ51YL8a-pcphuYuVQz7bOg.roa (hash: FnAC9AE4W5+r++w2y10UXXpTgultC6LrjOa8S41rhns=)
2: pdCLMVCtNN4riFkhdBkkCDlvEfs.crl (hash: RwddrFx2jiSDAKk8DxfrQI6qjqHctZOyDFZSsMoJ7H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:09:0f:86:ec:02:dd:d8:3d:b6:a2:ae:c9:f4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5d08b3150ad34de2b88592174192408396f11fb
Validity
Not Before: Sep 7 12:00:58 2025 GMT
Not After : Sep 8 12:00:58 2025 GMT
Subject: CN=dc04345423236bf8e182b10eb3c471b29747f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:04:62:c9:be:86:40:a3:4f:8a:ef:32:93:
8f:f5:49:01:9b:9f:5e:36:d5:16:c6:94:9a:6e:6c:
0a:ab:95:77:36:e3:8f:64:99:32:a9:e0:f4:aa:15:
06:48:8f:56:2c:07:e1:30:19:c9:a0:ef:a2:c8:cc:
b9:65:e1:93:9f:6b:75:bf:b5:28:1c:bf:c5:05:83:
fa:82:77:39:66:06:93:a6:3b:8d:5e:5e:2b:fc:34:
f5:a8:80:d7:0f:28:a9:c0:55:e3:36:7e:50:af:80:
d5:e8:2c:63:15:fd:73:23:7a:6c:be:3f:48:55:80:
b2:0c:eb:aa:53:01:86:cc:e0:84:ae:ee:b5:ce:cc:
2e:8c:b3:fc:4b:47:37:ec:97:e1:91:c7:a6:55:16:
df:b3:0a:30:8a:19:7f:cd:ca:31:e8:37:86:59:a2:
89:62:7a:7e:dc:97:a6:d9:0c:d7:df:c7:91:2d:1a:
3a:96:0b:47:75:cc:6a:3f:45:80:d0:a4:bc:1f:96:
6e:0c:23:f1:6f:4e:8e:0e:48:9c:c1:e6:aa:db:1c:
c8:da:af:a5:00:63:62:91:38:b0:50:d9:ee:4c:ce:
40:d0:fa:1f:0f:aa:65:d6:90:b6:77:c4:52:66:25:
95:1c:85:40:db:ff:ed:fd:81:3c:1d:b3:32:6d:69:
55:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:04:34:54:23:23:6B:F8:E1:82:B1:0E:B3:C4:71:B2:97:47:F3:4B
X509v3 Authority Key Identifier:
keyid:A5:D0:8B:31:50:AD:34:DE:2B:88:59:21:74:19:24:08:39:6F:11:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdCLMVCtNN4riFkhdBkkCDlvEfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/901839-0ef2-40ec-99b3-43cc5b46d5b2/1/pdCLMVCtNN4riFkhdBkkCDlvEfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a7:79:c1:5c:0e:5a:d2:e9:33:6c:03:6d:01:e7:29:67:db:
10:f5:02:ec:3c:4d:8b:04:4f:d0:a8:62:74:a3:55:81:4e:a5:
49:aa:78:bd:e2:dc:b4:de:2a:47:f8:5b:f4:d9:cd:f6:c3:1e:
a6:a1:d1:6b:ca:26:ce:40:4c:9c:38:3e:ff:26:1d:4a:d1:7b:
38:45:b0:c9:33:a5:5e:64:c3:1e:ca:44:9b:69:e7:20:08:b2:
19:78:5d:84:9e:08:9c:05:60:0c:53:af:6a:33:e7:8f:5e:b8:
1e:ef:71:93:ef:48:4a:31:4b:c7:cf:55:64:0e:3f:df:73:a6:
b5:51:42:a2:ce:ab:f0:62:3e:83:2f:c5:ac:65:f3:2e:05:38:
80:ea:c4:14:e6:a5:77:6f:0d:a4:70:5f:34:a5:ce:ec:e6:e6:
28:45:07:1d:94:5d:5d:6c:f4:33:5b:74:7c:94:3e:2b:51:72:
7a:4c:27:80:8b:9b:e1:e0:d3:31:dd:0f:a4:c5:5a:b9:7c:f8:
86:02:7a:f8:fd:2d:d9:47:7f:0a:27:de:43:50:0e:e6:25:39:
27:64:ec:42:2e:40:be:27:06:74:47:2a:90:c7:bb:0c:71:42:
a0:47:61:b7:39:4e:3f:97:56:0b:a8:7c:fd:b0:7e:c3:3e:7e:
4d:62:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:48:37 2025 by rpki-client