Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: CGtrOFPYC0rCqlQCnAyZ91TOaB8kRCHasB6zme8BjAM=
Subject key identifier: 9B:27:50:AA:16:61:84:3C:E4:2B:E7:6A:E9:A9:9A:DC:28:68:4B:E0
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019922C39037740AD7AF001B910D19CB755C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:01:05 +0000
Manifest this update: Sun 07 Sep 2025 06:01:05 +0000
Manifest next update: Mon 08 Sep 2025 06:01:05 +0000
Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: 4ZMi3PCE/Y5Y7r7MQBFeiRWWpri+jKpQWtnqemLyc84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:90:37:74:0a:d7:af:00:1b:91:0d:19:cb:75:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Sep 7 06:01:05 2025 GMT
Not After : Sep 8 06:01:05 2025 GMT
Subject: CN=9b2750aa1661843ce42be76ae9a99adc28684be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:57:e4:fc:dc:08:77:46:e1:15:93:dc:d3:c2:
71:3c:50:b3:67:53:cb:0c:34:00:cb:0e:4d:da:56:
39:37:6f:4f:0c:f8:e6:90:e0:ef:15:db:f9:49:c7:
71:4a:7b:c4:4d:db:1e:6b:d6:91:30:0c:82:4b:69:
c0:b7:4e:d3:a3:7c:64:34:a5:a4:2e:3f:52:46:cb:
f4:b9:b3:cc:20:36:ad:4e:0f:15:9b:dc:97:61:46:
52:ab:a2:b2:0d:ab:57:57:31:e5:51:65:c2:b8:e3:
98:d1:4e:f7:ed:fd:67:60:61:b4:49:0e:36:27:a9:
b0:a5:bc:e6:40:54:a1:c4:ab:bb:c5:1f:71:ce:8b:
0a:fb:6d:d5:ae:4f:89:3b:a0:b2:c2:a7:e7:e7:e3:
d0:bb:de:7f:b9:b1:ce:dc:86:5a:e4:33:9c:a0:7d:
be:28:0b:9a:15:63:a7:29:38:19:9d:40:23:f5:ff:
77:c0:ee:f4:a4:b1:75:cf:f4:30:07:03:a8:e7:6f:
f0:80:96:31:a4:22:c0:cd:ec:75:31:d6:a7:f4:c7:
32:f2:7f:64:57:74:e8:e4:9c:c0:52:85:d7:4d:4f:
ac:31:7b:7d:8f:56:2b:a2:d8:ba:58:9c:b9:b2:de:
8d:80:b3:a1:25:34:8a:17:72:f2:b1:d8:12:e5:46:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:50:AA:16:61:84:3C:E4:2B:E7:6A:E9:A9:9A:DC:28:68:4B:E0
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:fe:4b:c7:f2:35:63:24:a3:54:04:3e:a3:99:84:27:82:c7:
00:df:4e:ea:09:fe:0b:b9:c1:88:a2:0a:14:aa:b6:66:ac:1a:
f5:91:2c:21:a9:6a:00:03:c4:0a:99:9e:11:d1:07:a6:e2:7f:
8a:19:26:0d:c8:aa:7d:81:75:67:33:90:7d:cc:ca:41:3b:20:
b6:f5:47:4b:f1:d5:0d:11:12:76:9f:77:d1:5b:70:4e:ba:3b:
5b:bd:b5:56:ac:59:17:b9:5b:c2:2c:d7:e5:f9:3f:bf:85:8d:
da:be:8d:2a:c3:ec:b3:92:03:60:dc:4f:2d:7b:83:46:4d:94:
34:15:5a:69:1d:af:37:99:23:ed:0a:0b:21:2e:bd:6d:1d:6c:
53:c7:92:f7:d5:62:61:fa:6a:6e:e3:cc:8f:ab:4d:8d:aa:12:
06:40:a4:bc:1a:f2:33:78:ab:38:79:40:c5:52:b8:39:fe:d6:
14:f2:de:fe:c5:ef:d1:e9:0a:eb:1d:0f:62:ac:71:92:f7:fe:
03:be:4c:29:91:f6:bb:16:86:d0:2a:41:5e:9e:a4:9e:2a:1e:
a9:e4:d3:94:54:b6:85:8a:cc:f5:4f:71:5b:77:59:7b:a9:1e:
ff:2d:de:8b:54:98:e9:39:9c:72:2d:9b:a0:9b:5a:e0:b9:74:
b1:20:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:02:54 2025 by rpki-client