Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
File: pPC-25eOGSjR6XDKLtlpNxGP_2g.mft (raw, json)
Hash identifier: Jk/fFEKPNSAJl8dtkBtOHxlF+dcOtFSEfVvm7cDaecE=
Subject key identifier: A5:EE:F8:43:9D:6D:64:DA:79:72:35:A6:20:CB:F9:8B:7A:56:45:1A
Authority key identifier: A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
Certificate issuer: /CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Certificate serial: 0198D404ACA1ABAE260C42B233EF5BB59B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
Manifest number: 0FCA
Signing time: Fri 22 Aug 2025 23:02:12 +0000
Manifest this update: Fri 22 Aug 2025 23:02:12 +0000
Manifest next update: Sat 23 Aug 2025 23:02:12 +0000
Files and hashes: 1: 9p8e9WoA4C2DPVeIchZFPcz6XaE.roa (hash: 08xeCtquw3Dlp/xIPaCDCsu7UXWt+ysM9TiqCqTDfRY=)
2: pPC-25eOGSjR6XDKLtlpNxGP_2g.crl (hash: AvI2mNfL5xxAH5jpHzPninnuF2tk/qb9YYBRU4liV7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:ac:a1:ab:ae:26:0c:42:b2:33:ef:5b:b5:9b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f0bedb978e1928d1e970ca2ed96937118fff68
Validity
Not Before: Aug 22 23:02:12 2025 GMT
Not After : Aug 23 23:02:12 2025 GMT
Subject: CN=a5eef8439d6d64da797235a620cbf98b7a56451a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:db:88:ac:ac:bc:d4:b1:71:c7:2a:53:38:
f8:26:ff:bd:0d:3f:3a:82:2e:14:fa:df:18:03:2e:
11:3a:50:fa:b2:2a:f6:5f:84:1d:c7:a9:39:8c:cc:
7d:16:de:83:fe:7b:12:75:da:20:8f:fc:b6:7f:99:
d2:e7:b7:a8:67:d4:17:2f:52:6a:3c:e7:cd:7a:b4:
6d:17:31:ed:d1:ac:3a:81:1c:52:4d:cd:f6:48:15:
b6:9f:b6:46:fc:77:88:13:e0:90:e3:d1:93:ea:d5:
16:98:19:6d:9b:e6:9c:c0:b4:18:4a:e6:70:80:2d:
0c:41:44:12:80:76:a0:c1:68:12:b3:be:a9:b2:4b:
3e:58:71:22:7c:fa:61:a0:d1:df:5d:a3:b5:40:38:
da:3b:32:c6:60:9a:23:bd:10:02:02:52:4c:d7:75:
b8:03:85:9a:f5:4a:78:95:d2:e0:86:38:31:4d:3f:
76:12:6d:fc:93:23:14:04:7d:46:79:26:a1:bb:5c:
16:d0:72:2e:ac:2c:c1:44:dd:ed:df:aa:43:57:63:
0a:20:fb:d2:8f:f8:a4:43:9f:89:fd:a3:a9:b6:42:
6e:0a:d9:1c:50:52:c0:f5:4f:6a:c1:3f:75:90:11:
f9:0d:03:27:42:18:7d:37:e5:91:a5:ec:70:56:d6:
3f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EE:F8:43:9D:6D:64:DA:79:72:35:A6:20:CB:F9:8B:7A:56:45:1A
X509v3 Authority Key Identifier:
keyid:A4:F0:BE:DB:97:8E:19:28:D1:E9:70:CA:2E:D9:69:37:11:8F:FF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPC-25eOGSjR6XDKLtlpNxGP_2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d8d705-62ef-4e66-b7e6-e83e5ff618dd/1/pPC-25eOGSjR6XDKLtlpNxGP_2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3e:65:2f:2a:c7:35:71:e7:64:07:04:ff:2c:ff:75:42:4f:
02:ba:a3:1a:ce:ac:a2:33:19:bc:be:23:54:74:62:93:95:17:
56:6c:32:c8:d2:1b:d7:c9:68:c3:0c:83:72:79:63:72:68:e1:
f9:3f:8f:00:6c:25:81:5c:97:6b:68:46:49:5d:1e:4a:9e:5b:
30:06:84:a8:ac:d2:d8:08:43:14:fb:65:aa:42:bd:6e:b4:7d:
db:f1:da:4f:35:63:a3:e9:c7:3c:d8:a4:7b:54:a8:3b:31:c5:
58:b9:53:e7:b3:0a:d1:49:a8:59:5a:97:a9:56:8a:d8:83:85:
09:d4:82:76:44:c1:57:e4:f0:b7:8a:8b:df:b9:e3:7b:6b:81:
6a:e9:74:2f:34:d6:d0:ae:ca:6b:17:ce:f8:b0:f5:79:9d:28:
16:48:69:d3:68:bf:ff:12:35:7b:5a:d1:20:31:1d:a9:cb:90:
9f:85:7f:67:ab:fd:5a:1f:3a:ff:4f:a3:f4:0b:0c:47:f8:28:
85:a8:a4:1e:fe:7c:8c:ec:1f:cc:0f:25:2a:7e:5e:ba:1b:aa:
ec:ca:a9:ad:4b:bf:1f:55:30:98:17:28:80:92:c1:70:06:76:
67:3d:5b:71:79:c1:24:29:bc:27:63:d2:2e:37:ff:26:2c:70:
26:06:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:35 2025 by rpki-client