Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: JK6aHXg52OVFT+dA1FnqGd0bqolqVP1udf89qNqG2pg=
Subject key identifier: 98:74:46:00:72:92:B9:9C:7B:7B:E7:60:EF:B5:08:32:04:53:5C:FC
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 0198D4E07432099270179FCB60B1C6F56BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 0DC3
Signing time: Sat 23 Aug 2025 03:02:16 +0000
Manifest this update: Sat 23 Aug 2025 03:02:16 +0000
Manifest next update: Sun 24 Aug 2025 03:02:16 +0000
Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: jQDXwQ3bnTGAv2LvpNjXJ4FWLZOqigkb+gBsBlBA/+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:74:32:09:92:70:17:9f:cb:60:b1:c6:f5:6b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Aug 23 03:02:16 2025 GMT
Not After : Aug 24 03:02:16 2025 GMT
Subject: CN=987446007292b99c7b7be760efb5083204535cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:58:e5:fa:25:42:69:22:8b:4e:98:0f:77:90:
a9:24:b0:3a:db:86:4d:85:fe:f2:a4:37:6e:d8:72:
de:8a:f3:8e:e0:74:e5:47:ac:7c:5b:af:12:fb:d6:
ec:d9:d2:fa:d5:bd:3f:48:4f:2e:ae:f1:77:3f:e9:
8e:f7:23:b4:f0:f3:57:6b:6a:9c:74:af:f0:6f:91:
f7:e3:35:86:e0:35:f4:4c:50:92:84:45:da:8b:7c:
08:75:6e:b3:4f:d3:61:55:f3:63:b2:db:89:ee:57:
8d:3d:c1:28:2e:75:43:d2:70:1b:55:e5:97:ab:85:
26:89:cb:22:09:22:6d:c8:60:13:08:da:29:4b:67:
2d:9b:a6:19:c0:5f:34:43:b5:b2:c2:7a:69:6c:e5:
e7:ca:40:d5:31:a9:a2:55:5d:bc:1b:ca:ba:ee:59:
9e:0a:4b:86:93:01:35:bd:34:cb:a3:d0:7d:da:2d:
d9:b2:fa:4d:a4:fd:98:e8:a1:27:84:ff:c6:95:d8:
c1:51:c5:92:33:09:71:a4:39:18:9f:6b:bf:45:4b:
48:b5:80:12:e7:59:5b:eb:07:0c:8c:4d:75:c1:7d:
03:5d:c8:90:ee:36:d4:85:5c:45:f2:0e:54:5e:04:
9b:22:74:67:ea:b7:ce:2f:9a:1c:6d:40:0b:db:5b:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:74:46:00:72:92:B9:9C:7B:7B:E7:60:EF:B5:08:32:04:53:5C:FC
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:52:54:20:e0:5a:34:da:c3:b2:35:92:ea:67:46:f4:e0:e6:
d3:15:48:3c:4f:ba:bd:a6:e1:8d:cc:85:cf:f7:f1:3f:3a:74:
dd:24:c7:e4:25:cc:0f:d1:5b:31:99:20:2d:e2:a5:b3:f3:d6:
0c:4a:80:0b:5b:c0:dc:75:24:af:34:b7:21:89:52:9e:f1:f0:
ab:9f:01:3b:d9:ce:b1:05:db:77:26:91:fd:10:85:0c:56:63:
33:da:7b:cf:8c:5e:96:f4:d7:27:f4:19:14:83:9c:97:90:98:
69:86:3d:f2:01:bb:92:88:25:7e:6e:00:89:ac:68:df:8b:56:
11:ed:ce:b6:d3:f2:1d:2a:5f:b9:90:34:77:6a:95:59:46:1b:
df:f6:b0:8e:7d:8f:51:5a:66:56:34:6c:28:33:b0:c6:22:21:
e9:2c:90:60:27:d9:00:35:53:6f:dd:ba:f5:1c:1f:ff:1e:7e:
21:c9:17:f5:31:9f:ee:6f:56:2d:f7:cc:b5:44:29:95:b7:2d:
de:9f:94:31:17:68:a7:e3:28:26:b1:8c:e7:cd:86:90:8f:12:
e1:73:04:0a:38:43:72:70:2c:ac:f2:85:f1:cf:17:60:ba:6c:
fc:d3:89:16:83:c4:af:e9:40:50:3b:53:ce:bd:44:3f:ce:80:
34:9a:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:55 2025 by rpki-client