Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: MxwpH/qM9GFli72mDrGAL6jbNM++4XPUUGBJMn03OMQ=
Subject key identifier: C7:88:75:35:A3:01:29:61:99:CD:70:25:2D:09:5A:49:C9:2A:8E:37
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 0198D58372EC22F1D5AE994305A75F0DAFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0FE5
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: JW/Rqev27InMlVLEe143UesN9pyF2eAJkW6kH6u4v9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:72:ec:22:f1:d5:ae:99:43:05:a7:5f:0d:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=c7887535a301296199cd70252d095a49c92a8e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:b7:dc:0a:04:b6:04:31:d8:7c:89:dd:8b:
b2:60:ac:1b:71:d2:8f:27:27:ef:28:fb:dc:32:e3:
32:15:13:4c:5a:6c:91:7b:7b:d7:d3:81:0c:c9:c2:
12:dd:8d:09:61:d0:e4:5b:1c:c4:a1:91:e2:46:7d:
90:a7:98:12:f6:68:2c:85:b2:dd:19:dd:a5:20:1f:
b4:f6:d5:f3:46:9f:af:17:67:88:32:d6:f4:56:a4:
33:21:a4:ef:56:ae:7a:c0:3a:fe:cf:bc:6c:da:53:
da:50:40:07:c0:5a:b9:84:d6:cc:7a:4b:5a:3e:99:
17:4b:f6:14:17:76:0a:ae:9b:65:d1:93:5c:dd:50:
56:7f:63:70:16:69:de:11:d2:2f:b7:69:9e:2c:8f:
bf:0c:9a:f2:5d:62:ae:a1:ad:7f:a8:35:21:1a:db:
ae:b0:2e:bb:38:11:ac:ae:58:94:15:c7:b8:be:f8:
c5:40:76:29:44:a0:ea:4d:4f:ae:96:9d:08:9c:e2:
da:0f:20:cd:5c:cc:f0:8b:9f:fa:b8:1f:e0:1e:d5:
4b:96:43:5a:b3:37:f4:89:c5:ef:bd:d1:7e:9b:c2:
c6:e2:ca:bd:59:97:33:2b:a0:36:f8:69:96:75:08:
6e:ac:e5:72:4a:81:01:c8:3e:05:82:b9:f5:67:4f:
42:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:88:75:35:A3:01:29:61:99:CD:70:25:2D:09:5A:49:C9:2A:8E:37
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:49:ad:fb:74:63:d8:86:e7:38:59:ac:34:1b:18:8a:a9:bb:
37:9b:10:78:de:5f:5c:78:65:07:89:f0:17:c5:16:ed:81:17:
93:51:2a:e8:8b:14:98:0a:58:ee:71:54:1a:9b:97:74:08:7b:
53:21:7c:71:80:cc:e9:2c:98:9f:32:99:7d:4a:b4:20:cf:19:
c2:c2:e7:7b:48:f0:ca:c5:f0:0d:a5:2e:ee:24:31:f5:96:44:
8b:b1:db:12:ed:97:57:50:83:ce:54:2c:5f:cc:98:9d:74:74:
aa:74:a5:03:f4:3b:9d:01:11:5b:cc:33:2d:ee:f4:70:0e:61:
13:e0:b5:06:68:30:49:6b:20:79:a0:9e:75:08:9e:09:b6:20:
ad:fe:c4:60:74:9f:ba:cb:6d:33:87:d9:e4:1a:47:81:53:5b:
df:fc:cf:37:5b:88:fc:d9:8b:14:ae:8e:68:5c:c2:c2:a6:b9:
00:97:4b:4f:b9:fa:55:70:77:93:83:bf:45:cd:e8:86:b8:50:
1f:25:3c:fe:f0:1d:46:3c:e9:95:76:f4:cd:f9:ff:dc:20:ce:
c6:51:13:d9:28:39:29:40:b9:ad:02:87:7f:73:87:4d:b8:cb:
25:1b:63:74:54:cf:67:6a:8c:97:ab:0c:74:d5:8f:fb:16:1d:
a3:6c:0e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:43:00 2025 by rpki-client