Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File: PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier: IBxwEcUUFYKAU6bLO/JBKO0SYC1MDgHFbjXE0a+1598=
Subject key identifier: 6A:42:0B:2F:63:B6:F4:E6:73:5F:F5:D7:61:7B:88:07:DC:C9:56:7C
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 0198D583D3C24BB45EC81EFB32F3264C3656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number: 08CC
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: 0vAT2YkvS8tvXyS5tOnw86XOQWse4e9Ep1yx+2meyfw=)
3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d3:c2:4b:b4:5e:c8:1e:fb:32:f3:26:4c:36:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=6a420b2f63b6f4e6735ff5d7617b8807dcc9567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e7:7e:25:90:20:0b:cf:c3:ba:43:6e:5e:65:
35:03:73:77:9d:a5:d8:47:88:be:d4:07:05:21:87:
b7:e8:f8:47:28:20:86:66:21:6f:fc:52:43:b9:ab:
10:f2:2f:df:6b:ed:07:81:c7:02:e4:54:c4:e7:b8:
6a:3f:17:5b:6d:2f:e9:97:b4:be:80:0e:f3:78:a3:
70:ae:1d:13:d0:06:28:cb:2b:7b:28:81:18:78:81:
33:72:d5:0c:01:04:50:73:20:7e:5f:71:3b:84:fc:
e3:d5:d6:0c:ee:a8:66:66:ab:8c:ce:91:18:11:a2:
62:11:3c:d1:4c:78:3d:cc:53:f4:01:d1:30:9c:69:
07:8c:ce:35:93:cd:c8:6b:fa:97:c6:e2:dc:29:3b:
84:f8:d9:fb:a2:15:cf:58:0e:9b:cd:32:6f:d4:23:
94:49:fd:af:d6:2a:b6:63:9e:b4:22:49:ce:17:ba:
67:46:f0:92:ea:5d:42:1d:72:1f:db:2f:fc:7c:29:
b8:24:5c:86:91:26:3e:47:b7:92:2f:c7:1f:d8:e1:
4f:aa:d8:eb:e0:74:2e:ef:7e:20:d9:e8:d6:ae:9d:
a6:3c:7c:0c:c7:97:c5:3b:66:e5:86:e2:d4:eb:34:
45:74:7d:ca:2f:08:5e:85:3c:dc:7d:37:13:20:47:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:42:0B:2F:63:B6:F4:E6:73:5F:F5:D7:61:7B:88:07:DC:C9:56:7C
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8c:d6:9d:f4:ac:55:46:7c:72:66:c8:dc:33:07:a1:c7:9b:
f0:a1:20:e0:18:df:7a:9f:90:e9:3c:73:87:fa:a0:24:4b:6b:
3d:55:f4:b1:af:71:13:e9:bf:ba:3d:46:8d:b0:37:18:0a:68:
bd:57:e1:2f:d5:97:cc:99:0f:1d:67:f0:9f:57:6c:7c:ba:07:
59:0b:5e:1b:f7:c3:ba:88:3e:0c:42:6f:7a:20:92:a8:61:c0:
c7:86:69:73:d7:b1:90:ea:c5:ae:8f:75:06:12:bc:7a:4c:7a:
ab:d1:6d:92:bd:5a:55:18:4f:85:74:7f:30:0c:10:ea:60:d6:
48:c1:95:68:fd:f7:b0:92:46:70:2f:d0:a7:0d:23:40:d0:e7:
0a:ab:30:9b:56:e9:ab:de:56:10:10:0e:6a:c8:19:23:33:16:
f8:22:5b:71:d8:c6:c0:07:30:85:41:46:3d:59:30:4b:50:7f:
5b:93:f8:ae:e2:33:f4:fc:2c:08:b4:98:7d:55:d2:c9:fd:fc:
e1:59:4e:d3:16:e8:19:b3:f9:e9:b9:dd:a3:09:2f:ed:e4:bb:
3f:3f:32:e4:ee:4b:09:d4:35:3e:a0:6a:6c:cc:cb:5c:19:9f:
d2:20:03:a4:05:5e:1a:48:33:0e:b4:42:ff:a7:62:31:d0:7f:
78:07:2b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:17 2025 by rpki-client