Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: W4OIO2YUIM05IORuZOhC+AG6VsjYgkHj2DIiYsb6GqM=
Subject key identifier: 8D:25:17:8B:E3:81:48:70:E3:72:23:1B:89:86:07:B8:58:D9:8C:57
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 0197CEDFFA4473F158600EDBE557E7D84EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0F5D
Signing time: Thu 03 Jul 2025 06:01:14 +0000
Manifest this update: Thu 03 Jul 2025 06:01:14 +0000
Manifest next update: Fri 04 Jul 2025 06:01:14 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: sdZJGrS90nzjZW/8lmnx8hAgEkP5Rc4YGQcqijwrR/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:fa:44:73:f1:58:60:0e:db:e5:57:e7:d8:4e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Jul 3 06:01:14 2025 GMT
Not After : Jul 4 06:01:14 2025 GMT
Subject: CN=8d25178be3814870e372231b898607b858d98c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fa:b9:0d:2e:1a:ff:98:16:3f:be:5e:69:2a:
6c:2f:1b:c2:c1:3c:95:64:b4:e0:03:3b:ed:2a:bd:
99:3b:08:7e:49:48:6c:12:3e:9b:70:6e:cf:48:fd:
93:95:c5:44:cc:1f:12:a8:18:94:50:f6:bd:34:6a:
91:28:18:64:9b:ac:a0:c4:3d:ca:54:a6:d8:4a:3d:
26:92:94:a5:ed:4a:b1:84:48:f6:e9:9b:89:0c:86:
98:83:f5:97:59:c9:78:4f:88:f3:65:16:1c:28:f5:
df:f6:6d:8f:a3:97:92:d6:e5:89:71:86:15:72:ab:
6d:ea:4c:07:9c:e4:39:09:fa:fa:c9:f9:e7:85:da:
47:99:d3:bb:82:01:4e:ae:c6:d3:85:79:39:84:32:
87:16:be:9c:c5:ff:20:fd:a7:8d:41:fc:a2:f9:60:
ad:d8:ae:2b:ed:4e:49:a5:fe:67:bd:62:85:d0:9f:
56:9d:74:6d:d8:31:f0:88:4d:de:a1:de:a5:18:be:
7e:92:dc:00:58:c8:31:ea:33:19:45:3e:2e:ad:8e:
0a:1e:46:18:c8:ce:93:ce:23:92:ce:7b:bc:fe:33:
9b:e3:9c:f5:f6:54:fb:b5:32:06:b4:da:66:6b:b4:
37:cd:51:bd:d9:73:17:1b:b3:c2:52:d8:ff:cb:d0:
64:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:17:8B:E3:81:48:70:E3:72:23:1B:89:86:07:B8:58:D9:8C:57
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0c:b9:cb:d2:d7:6e:fc:ce:06:32:ba:a2:6b:3c:6c:7e:99:
e4:c8:b9:43:94:01:b9:a6:41:0c:e3:20:8c:ee:69:83:62:36:
a7:d0:4d:bd:f6:a7:73:10:df:b4:f6:7a:bc:5e:00:1f:d7:7b:
4e:e2:8c:ce:af:f6:3a:98:f7:90:02:c8:29:20:22:11:4c:d5:
96:45:5c:f6:8f:fb:dd:3d:85:39:63:56:f5:f4:0f:ac:af:2f:
3a:67:96:a4:03:4a:96:2e:65:a9:43:ad:0a:86:c3:49:75:5f:
fe:6c:a8:cf:90:ec:55:19:8c:6e:5b:b9:bb:e3:80:b7:aa:37:
02:5c:19:e3:0f:ac:40:4f:68:6f:a9:44:ff:3a:6a:8b:3f:57:
bd:9e:62:95:85:4a:e4:b3:62:d7:7e:56:10:94:f4:96:2f:85:
7a:ee:32:2c:02:53:21:e9:12:45:ff:a4:ae:35:12:e1:d1:5f:
db:39:af:a4:6e:af:dc:ae:68:11:fa:dc:23:f8:a6:f0:73:1e:
34:89:ca:5a:1d:fd:fa:bb:96:9f:0e:f6:77:9b:b6:b8:25:70:
c0:23:19:74:da:f0:78:ca:47:9d:c0:e8:04:3c:91:d8:ba:15:
2f:1e:ac:a6:9a:e8:9c:13:76:23:07:0c:5a:0c:3a:2a:66:98:
5d:72:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 08:08:47 2025 by rpki-client