Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
File: PidqxRoTJAHbTNdB2GalRiKg0Vw.mft (raw, json)
Hash identifier: 537nNdbIzoTJTZvNabAEY8wVqGnz9PYY4SdXDALp7og=
Subject key identifier: 21:BA:D4:05:1A:5F:E7:ED:87:C1:2B:4C:8E:8C:55:25:EF:FB:0E:ED
Authority key identifier: 3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
Certificate issuer: /CN=3e276ac51a132401db4cd741d866a54622a0d15c
Certificate serial: 0198D705C9448B9B0FB4A54F54F1E5D46746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
Manifest number: 136D
Signing time: Sat 23 Aug 2025 13:02:17 +0000
Manifest this update: Sat 23 Aug 2025 13:02:17 +0000
Manifest next update: Sun 24 Aug 2025 13:02:17 +0000
Files and hashes: 1: PidqxRoTJAHbTNdB2GalRiKg0Vw.crl (hash: vb9aL7GmCCmlP2nuGOS4/TcycyDo70kwgcrrhHR2OGI=)
2: mmsyAnMHt_dbYyNaAmRzOf1ER00.roa (hash: Z0B0gLnq6WYbQAuekKr8EymO3fzsvhfiIyL1pWQiz74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c9:44:8b:9b:0f:b4:a5:4f:54:f1:e5:d4:67:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e276ac51a132401db4cd741d866a54622a0d15c
Validity
Not Before: Aug 23 13:02:17 2025 GMT
Not After : Aug 24 13:02:17 2025 GMT
Subject: CN=21bad4051a5fe7ed87c12b4c8e8c5525effb0eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:03:fd:3f:ff:12:f3:cc:f8:c6:34:0d:9a:ca:
aa:eb:2b:e8:a8:99:df:f8:ea:57:e1:5e:af:c3:89:
f3:36:73:05:a4:eb:4c:ca:80:45:4c:6f:f5:0e:6f:
1a:ed:f5:fb:6a:4c:80:a6:69:e6:ac:82:9a:13:90:
95:e0:e2:5c:16:e8:09:43:b4:3d:66:4a:fc:d0:26:
da:6e:ee:80:07:7d:62:7e:52:0e:bb:fd:a3:f1:8b:
9d:07:9b:5b:ed:5a:74:63:4c:bb:2a:e6:01:19:b5:
93:8b:cf:da:57:bc:33:a4:e8:dd:c0:a8:28:5e:e6:
ed:ed:31:f3:1b:c7:11:43:cf:9a:94:9a:39:f0:48:
f9:15:2b:06:b8:1c:18:f1:64:b1:b6:9d:24:4b:7e:
75:ac:1b:71:58:6d:87:cd:9f:70:5d:2d:53:58:ac:
0d:14:98:ea:db:5a:44:e7:48:4c:e4:be:39:28:b2:
9b:7c:d8:9a:b9:1d:54:23:82:67:e6:68:40:1a:6c:
2f:26:28:a6:e3:52:9e:1a:a3:4f:08:e9:09:75:8f:
75:a7:93:bc:1e:9e:05:f8:e9:02:53:e9:e2:68:ca:
4c:ea:98:c1:8a:94:e1:b7:4a:e1:1c:d6:0b:67:6b:
37:ad:7a:a6:cc:58:35:dc:64:ec:b5:24:af:aa:a6:
ec:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:BA:D4:05:1A:5F:E7:ED:87:C1:2B:4C:8E:8C:55:25:EF:FB:0E:ED
X509v3 Authority Key Identifier:
keyid:3E:27:6A:C5:1A:13:24:01:DB:4C:D7:41:D8:66:A5:46:22:A0:D1:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidqxRoTJAHbTNdB2GalRiKg0Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5cac1e-831d-4d9e-9a22-1eef11a8dddf/1/PidqxRoTJAHbTNdB2GalRiKg0Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f7:e2:28:f7:ae:14:47:8b:7b:70:64:46:f8:e4:c0:7a:1f:
7a:0b:31:72:40:3f:83:48:8c:ff:b0:08:ca:33:15:5d:e3:b3:
96:d6:3e:95:66:66:fd:c2:7f:fd:cb:45:6c:ed:62:57:97:55:
07:f8:d1:0a:9c:00:c1:cf:25:1f:21:a0:a6:3f:23:5f:d1:39:
f6:45:ff:19:6f:08:6f:c5:f4:20:34:72:f8:7c:b6:8f:35:30:
a9:e2:99:3f:16:77:57:84:ae:50:fe:8d:a8:3a:df:b4:62:c9:
18:cf:73:2c:a6:b6:93:ea:7a:dc:dd:e5:07:17:23:0d:b7:d0:
bf:13:53:69:a5:06:cf:b2:34:c3:b7:8a:3b:9c:e3:22:32:db:
46:48:d9:fc:d2:ef:dc:ec:43:3c:ae:69:c5:7c:0b:91:4c:84:
d3:cf:fb:99:3b:29:e0:be:0e:cc:a8:40:1f:bc:7e:c7:41:3b:
71:63:69:9a:2e:d1:17:e2:df:27:a4:a0:de:48:d2:23:d8:c6:
74:eb:a5:8f:c2:67:f9:05:4c:ca:c3:a2:82:ac:f7:98:50:68:
4f:b9:01:81:3a:23:12:1a:12:e4:25:42:ea:6a:44:6f:eb:b5:
50:0a:a8:32:80:b0:49:ba:a2:82:e6:11:97:ed:0a:79:16:47:
e0:e2:99:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:41:24 2025 by rpki-client