Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File: PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier: 026dFgVH3Ahug9QFHugCz9KglFzgs8LogzZMNNvqpL0=
Subject key identifier: 1B:7E:5B:9B:6A:3C:0A:62:30:68:1D:CE:F9:CC:D4:F6:88:43:BF:BF
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer: /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial: 0198D6604F757D99467368D97D35A94A1281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number: 11ED
Signing time: Sat 23 Aug 2025 10:01:32 +0000
Manifest this update: Sat 23 Aug 2025 10:01:32 +0000
Manifest next update: Sun 24 Aug 2025 10:01:32 +0000
Files and hashes: 1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: 6EwTEm1QuwYxuAeKrm8HvqTYDvJsG2csa0rJp/BXHGg=)
2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4f:75:7d:99:46:73:68:d9:7d:35:a9:4a:12:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Validity
Not Before: Aug 23 10:01:32 2025 GMT
Not After : Aug 24 10:01:32 2025 GMT
Subject: CN=1b7e5b9b6a3c0a6230681dcef9ccd4f68843bfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:03:4d:2b:ec:53:94:50:28:5b:33:71:c5:
fd:c6:fb:07:48:48:f5:1f:be:82:a7:fa:6e:e9:13:
33:38:1f:b1:77:a0:30:af:55:91:2e:49:95:20:2e:
14:b7:f1:f0:1f:4e:44:b5:fc:29:c9:86:4e:b3:be:
8a:b5:28:49:c3:83:36:66:7e:26:cd:1e:01:36:78:
65:3e:66:12:bf:2b:ec:6e:70:48:d0:78:68:60:72:
ac:f6:3f:ac:a6:11:3e:a0:12:ae:62:18:ef:69:b9:
85:4b:d7:c9:e6:4b:1e:7c:1c:29:4f:f6:8d:a2:be:
6a:28:d4:44:73:aa:99:71:36:8d:f0:47:d6:77:ac:
7a:44:95:c5:dd:0b:87:40:97:e2:1b:a2:59:3b:e5:
f2:63:ff:32:31:33:ef:79:c0:71:b3:ac:d2:1c:be:
86:2d:77:a4:ec:1f:57:5c:a0:93:42:41:a0:9a:ab:
a4:fd:44:f4:de:96:6a:5d:13:d8:f9:44:39:20:e1:
ac:89:a2:a2:1b:02:96:83:8d:32:51:90:37:58:16:
9b:28:e5:e8:bd:b8:81:49:14:c8:ed:74:1e:d3:fa:
7b:43:ed:54:f3:1b:27:ed:1a:21:74:e9:22:55:42:
26:62:5f:af:b0:50:93:6c:46:67:fc:7d:a0:fd:eb:
b1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7E:5B:9B:6A:3C:0A:62:30:68:1D:CE:F9:CC:D4:F6:88:43:BF:BF
X509v3 Authority Key Identifier:
keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:63:45:e7:5d:c0:48:93:29:f7:d4:c5:3c:8a:df:1b:59:fd:
95:23:e4:87:84:58:f0:f2:be:77:4c:61:e6:38:03:06:27:4e:
56:21:de:c5:aa:dd:0f:b9:1c:65:86:77:5a:f4:42:61:70:f5:
fb:54:fd:97:e1:7a:d4:16:39:68:c5:95:06:8a:ef:d5:cc:c5:
e5:47:45:24:05:5c:b3:19:74:ae:88:42:5d:83:1a:e8:c6:84:
2e:79:9a:43:39:e4:07:80:7d:aa:14:4c:d2:22:71:82:a1:92:
8c:50:d6:f5:57:e7:f9:6e:b1:39:85:eb:e0:39:94:36:8c:be:
08:58:1d:da:c1:97:35:8e:bc:35:3d:70:ef:d1:bd:01:6c:43:
fa:49:4f:7d:a8:72:86:a6:36:00:81:21:d5:57:3b:42:c3:48:
c6:11:bf:1c:ab:82:3d:a1:d7:eb:4e:10:08:6b:fd:13:23:ea:
19:0f:b0:a5:5d:e3:bf:73:d6:83:95:03:67:10:c5:a2:99:8f:
f7:13:39:66:d3:16:f2:82:0b:b8:df:c9:3e:52:37:d8:80:f3:
ee:01:fd:1e:42:c6:a2:99:f8:4d:26:3b:75:69:ad:56:2b:fb:
7a:d6:be:22:c2:9e:12:f9:1a:9b:e3:48:6d:96:25:cc:5e:e6:
6f:b6:4b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:20 2025 by rpki-client