Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
File: pNAp8sMhrbWeyl_KV6Hrm99THWo.mft (raw, json)
Hash identifier: YJM7LcE6KR31ASw6zcCbXIQhW0kzNZ4ifqTBeF9EX+4=
Subject key identifier: 10:AE:CC:8D:45:65:37:BA:D7:43:D0:41:7A:B2:55:06:70:64:4A:B6
Authority key identifier: A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
Certificate issuer: /CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Certificate serial: 0198D70616A1641B30F8441207BAF300A998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 13:02:37 +0000
Manifest this update: Sat 23 Aug 2025 13:02:37 +0000
Manifest next update: Sun 24 Aug 2025 13:02:37 +0000
Files and hashes: 1: pNAp8sMhrbWeyl_KV6Hrm99THWo.crl (hash: VfoIJmanzQuQuAUowtSiwbrcd0m2aocWIeaATeLni20=)
2: yPrWz37IXjB7ODdHPO3TzqpY_oY.roa (hash: 34zVN/3obTpRgYhbmY7ABdm+4sQRJRCWRUdOZLf3tEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:16:a1:64:1b:30:f8:44:12:07:ba:f3:00:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4d029f2c321adb59eca5fca57a1eb9bdf531d6a
Validity
Not Before: Aug 23 13:02:37 2025 GMT
Not After : Aug 24 13:02:37 2025 GMT
Subject: CN=10aecc8d456537bad743d0417ab2550670644ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f8:8d:6b:d0:ae:48:3b:4a:ec:91:29:a2:a8:
78:29:cb:c3:36:46:6d:24:60:27:16:f7:02:81:6c:
3b:29:15:52:a1:c0:59:0a:fe:6a:d7:b8:a8:6a:12:
8f:2d:0a:91:96:7a:0b:a6:d2:2e:2b:0a:f9:33:de:
90:07:14:33:31:75:b6:14:e6:b9:06:df:11:c5:3e:
8c:81:a9:51:02:74:7e:3e:27:55:d2:87:4e:5a:22:
ae:2c:ab:cd:16:9b:d5:10:f5:78:b1:48:8c:ab:e4:
22:e4:2c:52:0f:34:ca:94:63:d4:ef:93:68:57:86:
2d:7b:3a:bc:93:3c:eb:51:f8:03:de:ac:75:e1:22:
57:0a:de:af:08:61:29:65:e0:f8:ad:f5:86:49:c0:
19:0f:e7:c9:d8:37:7b:fe:ea:6b:88:b4:8a:47:3b:
64:c6:95:7f:4c:99:00:f4:7c:47:67:46:0f:7c:d8:
68:05:d9:a1:67:e2:4e:d5:01:60:16:91:85:a2:74:
f7:58:b5:9b:f1:3d:3a:44:77:78:86:6b:3d:d5:5d:
77:51:ec:18:14:6a:91:56:73:78:f5:4d:2e:cc:7a:
ba:cc:c7:2d:9a:71:73:52:81:80:51:04:68:2d:99:
af:bf:78:e4:56:12:19:4a:87:66:f7:5b:fe:aa:f0:
ef:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AE:CC:8D:45:65:37:BA:D7:43:D0:41:7A:B2:55:06:70:64:4A:B6
X509v3 Authority Key Identifier:
keyid:A4:D0:29:F2:C3:21:AD:B5:9E:CA:5F:CA:57:A1:EB:9B:DF:53:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNAp8sMhrbWeyl_KV6Hrm99THWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/126756-9a94-4a91-bf47-8ad6ffb2617d/1/pNAp8sMhrbWeyl_KV6Hrm99THWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d7:ad:f3:d2:cd:44:38:81:01:2a:81:ea:13:84:34:19:2e:
e5:c1:34:d5:bb:4a:72:3a:56:0a:2a:e1:c3:41:ba:d1:76:bd:
b0:49:f6:b4:e0:60:4d:d4:72:f8:68:66:98:24:ed:9f:a2:85:
cb:7c:41:5a:1c:b6:99:27:70:80:9c:42:bf:b2:00:bb:4a:26:
d0:70:87:c9:aa:c8:93:27:66:be:d5:8f:03:27:39:90:b7:4b:
13:f9:32:cc:fd:09:be:5e:b1:67:c1:0f:1a:3a:75:a4:03:45:
6e:fb:42:48:e3:24:6a:35:d1:cc:bb:d1:60:0d:e0:5e:96:75:
ba:73:f7:68:96:64:de:90:19:9a:fe:f9:21:4a:60:0d:63:20:
a0:ac:72:fd:be:63:b3:70:89:ba:69:4a:fc:9a:80:d3:01:68:
e3:e3:d6:35:1f:da:63:7b:00:b6:e9:9d:70:a8:d2:1a:63:4a:
4c:8b:8b:0b:26:6f:0d:58:9b:60:06:fe:90:82:b5:59:bc:67:
48:33:50:dd:c6:9b:7a:a7:00:82:6b:ac:50:a5:55:15:33:96:
57:58:50:1b:06:0e:18:17:c6:a4:13:ae:09:27:e4:cc:df:ba:
dd:65:c5:21:01:44:9c:c3:95:bb:d2:d6:2d:4b:33:f7:4a:dd:
9e:04:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:21 2025 by rpki-client