Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
File: PkJOJFpkMkpocx3SbzDGhbqopng.mft (raw, json)
Hash identifier: vQU3sqCRv16Wp458GGsPGEy1+TaxlksF3aB5TUpsmLU=
Subject key identifier: 9D:D1:3D:37:71:A2:2F:7A:76:44:CB:D8:31:31:AC:C0:5B:B8:20:6D
Authority key identifier: 3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
Certificate issuer: /CN=3e424e245a64324a68731dd26f30c685baa8a678
Certificate serial: 019921E74EB54BE3312FCBB4FD54A0A47FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 02:00:30 +0000
Manifest this update: Sun 07 Sep 2025 02:00:30 +0000
Manifest next update: Mon 08 Sep 2025 02:00:30 +0000
Files and hashes: 1: 9BKbZIRd9-X7DwnbmN0tiFBfwDk.roa (hash: sc6ZIVElHs/p3IrdFGLfeuXuK5hZseBYNoiFQsWbBIY=)
2: PkJOJFpkMkpocx3SbzDGhbqopng.crl (hash: XHqB3jvkZoJOAo9K4r5g/L0/dM4Sh70x5CjObijlFuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4e:b5:4b:e3:31:2f:cb:b4:fd:54:a0:a4:7f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e424e245a64324a68731dd26f30c685baa8a678
Validity
Not Before: Sep 7 02:00:30 2025 GMT
Not After : Sep 8 02:00:30 2025 GMT
Subject: CN=9dd13d3771a22f7a7644cbd83131acc05bb8206d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:14:f7:74:a9:54:13:20:ab:f9:c5:de:70:aa:
48:80:75:64:95:ff:a9:d8:c6:4f:21:63:13:c5:75:
36:c4:39:8a:89:12:04:19:37:0d:c2:ad:29:bf:f0:
cf:10:1b:a7:02:d8:0c:c2:dc:d1:38:cc:06:0f:db:
9a:f0:c9:5a:e5:94:29:39:ca:ad:aa:8f:1c:7a:9e:
a5:95:cf:6a:4e:13:0d:cc:a5:74:97:fa:f1:15:85:
d1:f6:e8:67:15:70:83:f2:37:99:49:89:6c:97:0e:
ef:aa:62:c6:e3:7b:3e:8f:84:8f:79:ab:d0:d8:33:
3f:55:f5:8a:59:d3:91:1e:79:c4:f7:69:a5:00:1c:
4f:75:f7:45:e2:40:cc:6b:ce:5e:0f:11:13:a0:f3:
75:66:f1:08:6b:73:73:dd:6a:b7:95:1e:ab:aa:ca:
da:44:c8:87:d3:03:26:aa:34:50:0b:a5:03:a3:19:
3c:cd:f4:38:2e:71:c5:c1:2f:db:62:d5:e4:d0:40:
7e:0d:0d:36:fa:cd:3b:7f:b0:59:d4:96:51:7f:5b:
29:f6:51:54:1d:e4:7a:16:c2:21:8b:9b:d9:eb:0f:
5e:9e:69:48:d0:3b:32:b0:67:b6:3a:77:70:61:98:
35:bb:43:ed:f2:61:aa:fb:94:e7:b3:d4:92:60:11:
43:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D1:3D:37:71:A2:2F:7A:76:44:CB:D8:31:31:AC:C0:5B:B8:20:6D
X509v3 Authority Key Identifier:
keyid:3E:42:4E:24:5A:64:32:4A:68:73:1D:D2:6F:30:C6:85:BA:A8:A6:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkJOJFpkMkpocx3SbzDGhbqopng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1002c1-00bc-4308-b55d-54da0468fdad/1/PkJOJFpkMkpocx3SbzDGhbqopng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6b:44:c4:e8:d6:fb:cf:63:79:ef:01:ec:83:71:84:45:9e:
b4:17:af:27:fe:0d:76:d1:7b:68:fd:02:64:79:9c:26:99:fe:
5c:f6:4d:c2:02:78:7a:bc:f7:e7:43:33:7c:73:b4:24:22:a2:
ad:84:e9:2a:62:af:d4:6e:86:d4:c2:2d:ba:a4:39:2f:b2:d1:
51:22:a4:e2:8c:8d:fd:c6:d0:2e:f2:9f:ff:7b:8a:bd:d1:6b:
eb:32:07:d2:ff:bb:01:f4:61:14:82:f8:22:35:d8:52:bb:0d:
68:8e:20:ab:2d:55:97:eb:e2:02:fe:fd:2f:8c:8d:40:ad:c3:
46:d6:44:d1:9b:e1:70:b4:f1:8b:40:cd:34:e7:af:81:9d:56:
f8:ba:a1:9d:c9:8d:67:93:c2:55:d9:81:10:bf:82:44:c1:77:
4f:d9:f0:04:0c:7b:e6:1b:1f:41:86:1f:c5:4f:14:33:e5:3e:
cc:c5:79:5c:b0:6d:37:4f:c6:89:97:df:c6:13:33:36:23:7e:
82:d6:08:e1:ff:f5:46:3d:09:61:a0:51:04:38:bf:d5:39:a9:
40:9f:5f:8e:21:45:97:95:e2:93:22:fd:8a:b2:74:65:eb:b8:
72:c7:50:f1:28:b5:7b:e7:b7:63:06:ef:32:42:ab:00:08:b9:
d8:43:f0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:09 2025 by rpki-client