Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: t/0xel/6Kg6f7VzAR034gJi3MbMN/bREvL2n9veky/k=
Subject key identifier: 2B:90:9D:32:89:AD:C8:75:E8:0A:E5:6D:36:48:EF:A3:FE:BC:12:DD
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 0198CB376D18770FDA81C79B0464E60AD168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1646
Signing time: Thu 21 Aug 2025 06:01:03 +0000
Manifest this update: Thu 21 Aug 2025 06:01:03 +0000
Manifest next update: Fri 22 Aug 2025 06:01:03 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: Hgn6F1/dMS7CPdTGIQJNOawOnXirk7iUxtQ8sOXTWDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cb:37:6d:18:77:0f:da:81:c7:9b:04:64:e6:0a:d1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Aug 21 06:01:03 2025 GMT
Not After : Aug 22 06:01:03 2025 GMT
Subject: CN=2b909d3289adc875e80ae56d3648efa3febc12dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:c3:b8:47:8f:e2:db:29:db:f1:ef:29:0c:
c8:fa:91:9a:48:c7:b0:bd:65:b1:55:87:8b:63:81:
e9:2d:ca:db:fc:1c:46:a3:e3:24:aa:aa:b0:cc:6f:
a0:fd:d2:b9:fa:3e:8a:cd:c9:76:48:53:be:78:ca:
44:0b:7e:4b:33:8c:8e:63:db:8d:a4:f2:e5:7a:9e:
3d:63:bb:21:27:d8:c0:35:46:75:41:22:f5:76:86:
a3:5a:13:b4:0a:84:eb:1e:ff:48:10:9e:d4:83:8c:
5b:2c:51:8a:49:e0:c4:9f:f8:5f:13:66:f5:bc:ed:
ec:e1:65:b2:47:ec:e2:c6:86:33:c6:62:cc:47:c3:
ac:98:4c:55:59:4f:78:ec:f6:91:57:ce:08:96:14:
37:0b:32:f4:03:14:af:ca:26:52:8c:8c:7b:2f:86:
c2:5c:0c:d6:40:55:f2:cd:78:33:bb:b1:d5:56:60:
53:92:91:5b:89:63:ea:94:bd:b7:43:11:da:5d:fc:
77:31:cc:99:f6:c1:c7:2f:61:44:23:34:81:bc:b5:
74:fe:06:03:db:f7:b1:c8:d0:12:a9:a3:0f:43:d9:
6b:4c:29:b4:ce:06:e0:bb:2a:3c:f7:d4:a3:86:8b:
04:fd:39:05:12:d4:a2:95:cf:8d:b1:7a:ba:d9:76:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:9D:32:89:AD:C8:75:E8:0A:E5:6D:36:48:EF:A3:FE:BC:12:DD
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3d:8c:68:1f:a3:3a:6c:5a:a4:50:ab:0d:66:36:8c:03:41:
7b:77:65:74:4f:b9:da:01:e8:31:22:8d:bd:f7:04:47:1f:d5:
fd:e6:84:61:1b:43:de:69:bc:ae:d5:66:14:4b:54:d7:7c:d6:
1b:b1:9b:5f:31:e0:fb:9e:a1:94:3f:69:84:d9:61:07:40:b0:
ad:92:29:0a:30:1a:b6:03:41:ad:0c:fb:a1:91:a6:ea:11:af:
f4:ac:d5:12:c7:0d:10:e7:8e:0c:0d:3b:17:6a:97:c3:de:9c:
49:41:ce:e3:8a:c0:0e:c7:44:78:c2:ec:06:27:19:9f:cc:8d:
57:1c:cc:69:b0:86:15:e0:57:41:f0:db:a0:fc:dc:6b:2c:7c:
90:ea:9a:e7:b0:dc:31:71:d0:a5:e6:93:6d:ed:37:22:e9:e5:
4a:11:3d:2c:ae:58:c0:64:b1:db:77:e7:c9:f9:9f:7d:f9:33:
96:53:77:cd:f3:b8:40:b8:7d:51:4f:21:03:5c:ca:c4:97:42:
8e:43:37:ba:c2:d5:6f:93:cc:b9:a2:cc:d8:a5:e2:2f:71:15:
2d:5d:57:20:71:59:53:43:f1:b2:71:f4:51:97:f4:81:c8:1e:
b3:6f:c2:24:3a:b9:7a:e3:8d:49:04:19:55:ac:74:de:4e:64:
80:55:9b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 15:22:42 2025 by rpki-client