Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File: PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier: KMbO/XAH+mDuGECVEH5jXM34n/E3/2A4z+Eix1OaQWQ=
Subject key identifier: A4:42:A6:58:69:76:86:61:F2:36:FD:AF:AE:BC:A0:73:B6:82:D0:EC
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 0198D5F1915901DDDE704B601A0BEDA81500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number: 0B01
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: 3bt8Km81z8fgEHaLeSOeYgfebxU.roa (hash: pKoz7jrxy/U6s9br1hGRmLBPhCh8rgMf271vqsN5GJk=)
2: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=)
3: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=)
4: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
5: P0-q-BdDXYrwKYDCUC5gegtCTZE.roa (hash: oO/hx6p/KCHt0e0eW15T8NOjsXnklfDaMDxz69ADiuE=)
6: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: dPgdS4+GpfOiUOk1Qdqu+PrexmcQiCZkN79BvG3z0t0=)
7: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:91:59:01:dd:de:70:4b:60:1a:0b:ed:a8:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=a442a65869768661f236fdafaebca073b682d0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bf:5a:70:8b:11:91:95:55:60:d9:d9:58:c0:
3f:3b:8e:4e:c4:11:97:ac:6b:8f:53:0f:36:a0:b6:
7d:9f:ee:25:63:4a:2e:9a:04:fa:1d:ac:0e:d0:5f:
92:b3:c7:e7:1b:b6:09:d4:be:e4:53:02:a6:49:00:
b1:41:04:8a:fc:15:35:0e:d9:8a:ae:38:62:82:fe:
24:a1:37:69:c2:2f:e4:0d:d9:76:6a:ec:c7:5f:0b:
29:c4:94:ef:7c:96:5a:22:e5:43:d6:89:d5:00:ef:
c1:bf:67:cb:e0:a9:9c:83:e4:fe:7a:a3:1c:bf:56:
45:1c:03:de:63:f7:75:2e:ad:b1:f5:b5:5d:c8:71:
c8:2f:31:72:56:22:43:d7:b1:3c:34:e4:79:8c:3e:
9b:a7:b5:14:90:88:29:06:ff:c0:d4:19:af:62:75:
18:cd:da:ba:19:dd:83:6e:22:18:4b:30:41:84:a0:
e5:50:08:78:5d:19:e8:e9:06:95:bb:31:1e:a4:b2:
88:b3:b1:8d:a5:32:50:0c:1f:6c:11:2e:ea:fb:f6:
f1:ec:15:26:7e:c9:d1:bc:4d:0f:73:bf:ad:de:c2:
42:35:96:ab:ab:8b:72:b2:58:a3:51:67:d2:20:27:
cb:5c:74:fd:d9:50:62:55:63:b0:64:f7:cf:77:1e:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:A6:58:69:76:86:61:F2:36:FD:AF:AE:BC:A0:73:B6:82:D0:EC
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:22:4e:90:a9:74:a9:a4:01:17:ba:ea:18:15:46:2b:20:35:
f7:ac:71:29:d0:c2:21:31:87:58:12:2b:15:e8:3c:0e:71:3e:
14:c7:29:af:42:85:fa:59:48:f6:7b:b3:b6:7a:35:0d:5a:9b:
48:7c:98:75:d8:45:f5:9c:ea:01:3b:ad:e4:d3:88:d2:c9:35:
7b:d2:4b:f3:d6:a0:f0:ab:31:97:b6:30:9e:1a:97:d9:44:6d:
a4:3a:58:2c:e0:8e:7e:0f:37:03:af:ca:c4:5c:f2:9d:54:ae:
32:2a:9b:07:3d:55:61:55:44:9a:02:d0:05:b7:3b:87:28:f5:
e7:80:b0:4c:d3:23:10:28:2f:06:ee:b2:f4:c6:c8:12:bd:09:
40:e2:fa:2a:77:92:3c:2a:81:e0:eb:3d:7c:91:ad:1e:7e:7a:
98:2a:ea:f9:bf:52:dc:ab:61:30:32:d4:a7:cd:b7:f4:a8:8b:
a6:fc:37:71:a8:40:41:21:2b:a4:1f:1a:27:98:16:99:e6:26:
e0:d3:a1:96:85:f1:06:e0:2b:74:7c:4b:b7:99:fc:ee:4b:7c:
bc:ce:66:32:89:e9:47:cb:da:04:e6:f3:0e:d3:dd:6b:9b:67:
c1:19:19:e7:15:38:62:58:93:b2:50:cb:48:cb:91:d3:b3:4d:
76:31:81:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:56 2025 by rpki-client