Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File: pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier: wJE/rM8cdhMo2TmdimiyWI4ul1xM2PT/ufQHfzzYVow=
Subject key identifier: 57:3D:30:05:B4:4C:D2:1F:94:2D:B8:2C:68:A7:82:8F:40:61:ED:2E
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer: /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial: 0198D54E1EAFF7C7094115B37883A23618DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: ISJe42GlpSMz1GvoG4XoJcmx0K6cpLSOr6fZAgY5MaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1e:af:f7:c7:09:41:15:b3:78:83:a2:36:18:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=573d3005b44cd21f942db82c68a7828f4061ed2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:5c:8b:4a:42:31:7c:a0:33:ca:a2:d8:8d:
45:02:fb:26:da:ea:d5:ae:9f:8d:08:11:85:73:08:
1e:90:2f:d2:37:d3:1a:ef:a8:6f:b9:93:8d:ff:c6:
40:70:13:79:48:f8:d3:7c:75:b2:48:ad:cc:d5:8c:
88:9f:a5:c8:01:a2:99:c1:5c:d4:55:b7:bf:96:e6:
4f:4d:69:72:e0:53:14:75:a1:ec:8e:17:42:7b:48:
92:60:8f:e9:a9:e2:e1:33:a5:31:fa:fb:14:b8:59:
06:0a:26:6d:25:d7:3b:bd:8d:83:f9:93:68:18:a5:
3b:e4:de:6f:09:e1:dd:00:bf:96:10:66:cb:a6:38:
97:37:3c:fe:e1:61:65:81:2d:63:67:23:8e:e3:4c:
52:57:83:a3:f6:38:8c:10:c9:f3:a1:bc:44:81:cb:
a2:87:d9:75:30:3a:9e:1d:6d:d7:22:36:3d:07:4b:
7f:45:62:fb:2a:02:e8:7c:5b:5c:99:cf:31:a3:d6:
b2:b6:15:45:a0:6d:6a:8a:f2:0e:34:fe:1f:9a:ca:
26:db:b0:0c:50:83:2b:91:2a:af:52:b7:25:ca:d0:
d8:0b:d5:1c:d2:bb:17:99:90:29:cc:ee:38:3b:6b:
2d:32:47:e9:72:0a:4d:17:79:6f:76:99:9c:c6:02:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3D:30:05:B4:4C:D2:1F:94:2D:B8:2C:68:A7:82:8F:40:61:ED:2E
X509v3 Authority Key Identifier:
keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5b:79:12:16:ea:c8:05:00:ac:9e:71:b7:36:84:07:59:18:
78:de:e6:6e:68:9b:f8:67:f7:e9:2e:dc:7f:a0:b1:39:c3:7f:
d0:fa:27:87:ac:d1:e7:3e:ba:8a:4b:b9:48:18:5c:6b:2d:15:
32:d9:1d:c2:3a:96:8b:c4:69:35:23:db:e3:43:47:1f:fb:d8:
6b:5d:39:87:00:2b:1b:9a:d2:65:54:c3:ab:d4:18:1a:02:cd:
3e:fd:19:b1:32:22:97:bd:96:8b:b9:f8:37:1e:97:ea:57:8d:
a7:43:29:77:96:9b:0d:91:30:cc:bd:21:5d:2a:e6:29:49:c0:
50:21:34:95:39:1e:6b:8c:64:27:23:0b:c5:01:45:69:8d:c1:
1c:ec:88:59:e8:27:1d:0c:36:3e:6a:ac:0e:81:7b:08:5e:1b:
2c:f6:b0:45:4c:42:4b:d6:b1:8a:1e:71:21:8d:1b:4b:3e:71:
5a:3d:3e:99:61:d3:db:d3:93:37:50:e9:38:86:f8:cf:b6:80:
85:0d:e5:f6:f2:86:f1:be:71:d5:5f:12:60:ba:cc:e7:0a:c9:
38:f6:d4:fa:29:72:79:63:eb:1e:a5:62:a6:41:8a:6a:ce:ac:
e7:46:3e:09:38:0e:a9:66:95:b0:3b:72:13:63:24:cc:75:65:
b6:d9:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:12 2025 by rpki-client