Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: quBus0GJmEmvcWCodd54+JdP56Dp+7Nt697e+RPESJs=
Subject key identifier: 9D:55:97:DB:6A:CD:AE:B0:B1:43:C1:F0:DD:3E:A2:10:71:5D:37:CC
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 0198D5BBC08F54A423CDAB4D0F6605C4B6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: 4+v3h2YtVXYJsBigmMyOYkUPkzXNW5F6hFT3Vq1qvi4=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c0:8f:54:a4:23:cd:ab:4d:0f:66:05:c4:b6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=9d5597db6acdaeb0b143c1f0dd3ea210715d37cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:41:05:9c:b0:aa:d9:74:88:f9:e5:12:d7:d3:
ae:13:4d:8a:93:21:c9:93:e7:84:8d:c1:5e:31:87:
06:5f:ae:08:7a:52:3f:7f:45:cb:84:21:e8:84:4b:
2c:71:64:b2:63:9f:34:fa:eb:20:75:fe:39:22:b4:
d3:d5:b4:dc:e8:e6:0c:d1:d2:b1:8b:75:c8:1f:8d:
16:d7:f2:f5:ee:8d:92:39:f1:e6:e4:26:ca:0f:97:
4d:2b:23:c9:68:0d:55:7d:58:c2:37:de:ff:8c:3c:
76:63:81:33:88:9f:d8:04:f1:cf:47:07:d9:83:07:
a6:f4:32:87:65:6d:5d:56:ef:90:70:f1:d9:d7:5c:
50:c8:3c:60:62:fb:13:7b:d1:87:1d:c4:b7:d0:e8:
c9:06:79:c0:b3:33:a1:63:78:af:87:0e:a1:2b:ef:
38:33:23:3a:e0:e2:ef:4f:f7:54:0f:d4:f1:e1:9f:
f1:ba:3b:7d:d3:73:de:2a:1d:2d:5f:5e:44:f5:79:
60:1e:34:13:82:49:75:86:9f:f7:55:ee:a2:69:82:
c0:73:6a:6c:79:fb:ed:62:0f:f1:77:0e:43:d7:67:
b6:f3:e4:eb:e1:bc:a0:2b:74:28:29:95:18:c3:35:
fe:4a:93:f1:ca:32:1b:6f:70:1a:14:9b:e1:19:10:
17:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:55:97:DB:6A:CD:AE:B0:B1:43:C1:F0:DD:3E:A2:10:71:5D:37:CC
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:67:43:e9:52:29:97:07:5c:66:f5:22:ce:8b:ba:9d:cf:
0a:dd:5a:83:0a:48:13:0b:eb:ed:64:07:1b:00:7a:70:99:51:
b9:cc:75:16:f3:08:6e:06:8e:fb:40:19:e8:22:50:5a:29:a4:
a1:65:e9:88:24:26:da:d8:4d:83:74:1f:e0:4a:89:ff:fd:b6:
73:8c:0e:7c:79:b6:0b:33:e7:a0:e0:cd:c5:19:9f:64:fe:a0:
ab:1a:77:19:40:1e:98:44:30:4a:b4:52:af:bb:1e:85:e1:05:
1d:43:c1:2e:ab:95:4a:92:3e:68:63:77:1b:c8:91:8d:cf:c6:
86:17:52:3d:b1:f6:91:32:08:ac:fe:62:87:1d:94:b6:5c:eb:
36:7c:2b:d3:83:a7:61:5f:5f:55:20:04:df:5d:ce:7a:05:60:
60:4b:72:6c:07:26:15:68:c7:a9:84:2a:5e:c6:b4:28:96:cd:
39:42:c5:a0:15:70:cc:c6:43:5f:ac:9d:80:19:22:df:00:f3:
98:83:0e:a2:f4:71:f0:9f:2e:06:d2:96:90:73:92:5e:52:a6:
db:84:44:1d:56:27:51:cd:6e:ba:64:61:1d:6b:33:09:6a:78:
83:2e:36:a2:1f:ec:a6:e4:af:06:12:fb:aa:c1:42:19:53:04:
ee:dc:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:21 2025 by rpki-client