Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: 9u2dfhILlrcZHKsqh7gxde/IXVo34l4lBs2VeLkoBpg=
Subject key identifier: F0:CB:10:98:A7:EE:EC:CE:77:2C:FD:8C:88:19:B5:53:DC:52:3C:B0
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 0198D6CD6FEDAF85921B4A13CD3FD82B9A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 11D3
Signing time: Sat 23 Aug 2025 12:00:44 +0000
Manifest this update: Sat 23 Aug 2025 12:00:44 +0000
Manifest next update: Sun 24 Aug 2025 12:00:44 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: DQKXZ2EuqBwIZehw4YN65nDx8cXc3RtP5RSF8U6Zg/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:6f:ed:af:85:92:1b:4a:13:cd:3f:d8:2b:9a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Aug 23 12:00:44 2025 GMT
Not After : Aug 24 12:00:44 2025 GMT
Subject: CN=f0cb1098a7eeecce772cfd8c8819b553dc523cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:8c:3b:2f:20:89:72:95:49:51:df:c0:35:
b2:f2:31:48:e0:52:4c:22:66:bc:65:04:38:41:02:
4f:c7:22:ad:86:c7:e0:e5:ad:b1:19:40:22:85:03:
1d:da:a1:ca:b5:6a:dc:c6:9b:ec:61:55:d6:9b:a0:
13:fc:c6:33:4c:38:e8:ba:5d:6f:b6:38:47:e5:bf:
8c:b5:26:7f:31:dc:38:e4:61:ed:df:ea:dc:36:44:
0c:04:d1:fc:07:52:08:ea:bc:60:d9:4a:97:f7:5f:
c9:dc:7a:f7:07:00:81:dd:df:2e:d8:19:67:c4:8e:
84:e3:ea:9e:09:08:cf:be:de:f9:fe:5e:70:cc:d9:
24:cd:74:c4:a8:00:b4:77:d7:66:0a:f4:eb:4f:3d:
6c:4d:28:eb:68:c3:43:58:df:f2:66:af:ac:91:77:
bf:30:f3:fc:7c:09:14:9a:33:71:10:24:81:9b:e3:
9c:5b:25:cd:00:72:ad:60:9d:4a:55:b1:39:b5:06:
2e:f7:8c:b4:11:22:9f:9f:07:aa:02:31:46:bd:0d:
14:b3:b2:0f:11:75:ca:78:93:ab:c5:e6:40:25:8f:
e0:f9:f3:df:96:ee:ae:73:69:be:cc:1e:22:0c:66:
cb:fa:56:ea:aa:60:c9:79:b9:2a:85:c8:04:b6:87:
c0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CB:10:98:A7:EE:EC:CE:77:2C:FD:8C:88:19:B5:53:DC:52:3C:B0
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:e3:26:6c:26:1b:19:4c:ce:5c:af:0e:62:af:f6:bf:81:
10:b4:42:09:2b:66:8d:e2:40:45:c8:7f:fd:3a:8b:1a:dd:d2:
fd:51:49:23:03:85:11:e0:d5:05:2b:db:44:74:ee:5c:8d:39:
0e:17:27:24:e6:4d:80:d5:c2:29:30:6d:a3:68:b6:50:b4:ac:
5a:ba:64:01:de:1d:1e:54:ca:93:1d:a2:57:26:d2:84:e1:87:
e0:47:ae:41:21:2f:8a:25:a8:7a:f5:00:64:72:d7:01:3a:e2:
fe:9c:45:fa:4e:66:66:8a:9b:12:c1:61:b9:eb:9d:f7:9f:d5:
20:16:3c:b5:34:ea:91:bb:15:11:3d:57:60:24:67:7c:5e:f6:
f6:ef:9a:c7:bb:4d:c6:b8:fe:6d:5a:a4:87:60:a3:55:26:b9:
88:7f:62:ed:ed:48:d1:93:d8:3f:79:03:29:28:cc:ce:b2:dc:
44:79:83:60:c0:48:ea:04:26:99:35:15:c2:0b:15:35:8d:8c:
c7:b1:19:11:dc:d4:4f:c1:1d:dc:13:a8:b6:ad:fe:8e:23:a3:
20:3e:5f:34:56:6c:72:df:f9:a2:eb:0a:87:23:8a:20:88:35:
c4:fa:7e:52:8a:71:ca:7e:c5:d7:bf:ee:2c:fd:19:28:1b:8f:
64:7d:64:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:06 2025 by rpki-client