Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: KxntHAIU6KI/E3M6R5f0S1RHS+rhUNv9+VV/dqA+QqY=
Subject key identifier: 8A:D3:7C:50:50:C5:1C:28:C2:3A:65:2B:A9:26:D8:AF:C1:AC:9B:E2
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 019922FA55F55F4909F73389CF0564F0F5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0D8B
Signing time: Sun 07 Sep 2025 07:00:55 +0000
Manifest this update: Sun 07 Sep 2025 07:00:55 +0000
Manifest next update: Mon 08 Sep 2025 07:00:55 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: gVEGKoZPPWON6fDv5cp0w7vDVDRNOXk1yTso0yCFmOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:55:f5:5f:49:09:f7:33:89:cf:05:64:f0:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Sep 7 07:00:55 2025 GMT
Not After : Sep 8 07:00:55 2025 GMT
Subject: CN=8ad37c5050c51c28c23a652ba926d8afc1ac9be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:a7:b1:27:6c:94:72:d0:cc:31:ce:95:bd:
fa:44:0d:df:14:d6:e0:e9:9c:77:bb:36:97:97:0b:
de:63:fd:16:a4:50:30:55:36:03:d8:a7:58:65:03:
f1:18:0b:c7:cb:44:4c:c4:02:22:85:fc:d3:33:0a:
5e:23:81:c2:70:13:2a:73:03:42:09:a8:7b:e7:3c:
f5:78:f6:2c:70:c4:ab:7e:c2:39:d6:8d:05:e2:d0:
c5:c0:d5:50:47:62:75:d3:8a:aa:dc:ae:17:df:2c:
2c:d5:f3:ae:31:04:02:fe:bd:8d:51:ea:07:df:00:
03:1d:ce:48:d8:5c:cc:10:26:56:0f:1d:48:55:d1:
76:b0:26:40:1d:a1:fd:87:b7:ea:66:fb:47:32:c7:
b6:66:cc:fd:41:9e:ec:2d:bb:e3:ab:82:fe:15:bf:
32:28:33:ab:2a:12:d3:3f:66:4b:99:5f:c4:82:9b:
c4:1d:a2:eb:f2:b7:2a:4f:89:76:b6:67:8e:83:da:
7e:c4:52:df:94:3b:0d:a3:93:ca:04:46:90:f2:59:
2d:29:2d:bb:85:bb:25:a5:54:06:f4:15:b6:ca:96:
ed:c5:21:2a:f3:39:20:0b:1c:eb:ee:f8:81:87:91:
b2:d5:02:99:e8:6a:9a:7d:cf:54:dd:3b:43:3e:20:
1b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D3:7C:50:50:C5:1C:28:C2:3A:65:2B:A9:26:D8:AF:C1:AC:9B:E2
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:25:f6:44:3d:9a:01:be:f7:8f:b7:5e:47:60:c6:76:6a:6d:
17:ae:4b:f4:92:37:fe:41:64:2c:13:75:81:a7:d4:2e:24:7d:
fb:a0:2c:61:8a:9b:de:fd:eb:b0:9b:81:42:41:f8:2c:ec:e7:
de:b2:02:dd:56:c8:4a:73:b8:9d:12:e2:e6:83:1f:80:98:db:
59:fc:08:1f:c9:ad:6f:bb:14:13:29:bc:f1:81:3e:0c:83:db:
40:99:e5:6b:06:3e:39:6a:f2:d3:19:5e:64:d1:4c:a9:19:bd:
87:08:b8:f1:37:98:4e:a1:58:9b:50:90:4e:1f:6e:a9:57:df:
59:f5:d3:dc:79:b9:18:f7:b9:62:3b:93:5c:70:1c:98:54:13:
96:54:1a:fd:be:52:ef:47:c5:3a:ef:5c:7d:c3:99:cb:b2:6f:
31:51:94:36:a5:a1:81:5e:c7:83:7f:35:d1:1b:92:a7:b1:dd:
f8:f5:cb:77:bb:5c:0e:47:78:15:a4:69:28:82:c1:b2:ba:37:
41:1d:3d:19:de:18:4a:5c:25:fa:51:62:9e:6c:f5:e3:22:73:
c6:b3:5f:c9:b0:b5:7a:a9:6b:d7:2d:bd:5a:29:3c:53:7e:79:
34:c0:82:52:58:0b:20:73:de:f4:4a:0b:65:80:86:70:e8:41:
45:26:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:20 2025 by rpki-client