Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: AsAEBTjW7MbnRGcIAq0PfQxvgglb30Q7CSpqHfRDI58=
Subject key identifier: 54:87:BF:29:7A:F0:DB:CD:38:C5:BA:AF:C0:DA:C4:24:41:3F:A3:BD
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 0198D54DEFC49980FC4AA3FF53BF2023A2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 0205
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: HaBV3XSanS2UhVUhcB+7MpV8nn89fnytxj6AMjrnQ30=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ef:c4:99:80:fc:4a:a3:ff:53:bf:20:23:a2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=5487bf297af0dbcd38c5baafc0dac424413fa3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:74:ff:4b:f9:cc:b6:b3:ef:1d:fc:bb:01:
ae:c7:bc:c9:b6:1c:5b:2c:12:52:06:6e:e3:86:54:
82:c3:c9:84:b3:e1:a8:d8:40:49:4f:cb:91:b0:4b:
5f:8d:d2:b7:5d:df:c4:e6:54:b4:52:ad:51:55:82:
6a:a3:07:91:4d:e9:79:80:97:ed:ed:be:09:08:2b:
fa:26:e1:0f:04:23:17:e0:4f:c4:c3:04:04:05:e7:
b0:5f:bf:44:07:d9:18:f7:24:14:fb:81:aa:99:0c:
a2:79:0a:a6:4b:ff:5c:f4:7e:20:f2:3a:4c:28:47:
58:60:70:ba:30:6f:d6:a1:23:a5:72:4f:88:42:46:
1a:41:06:e5:38:59:b5:9c:87:26:28:20:ff:6b:b5:
3e:70:e6:ff:6a:cf:67:ce:43:f4:e4:2f:20:60:25:
aa:43:36:60:6d:57:8c:a1:31:32:1e:97:86:5f:d5:
d7:4d:87:c6:d4:02:fe:02:8f:30:10:9b:dd:01:5b:
8d:09:08:b1:5a:7a:a2:1d:f7:7c:04:19:fd:e9:9d:
1f:32:8e:bb:ae:67:04:4b:a9:43:33:70:d5:6a:bd:
ca:9a:31:9c:6f:58:6e:95:59:96:a0:59:61:d3:2e:
84:43:c1:4e:15:00:91:17:3c:27:20:fc:fd:ee:32:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:BF:29:7A:F0:DB:CD:38:C5:BA:AF:C0:DA:C4:24:41:3F:A3:BD
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7f:fc:96:1c:b2:06:d2:f3:b4:17:f5:54:36:c5:76:fb:a0:
0d:a8:24:d9:5d:7b:49:89:b8:87:9a:c4:50:82:61:e3:c7:64:
46:ed:0f:88:28:5d:84:cd:a7:6a:e7:c9:bb:e5:7f:3a:08:d7:
9e:cb:61:2c:b6:c1:95:33:63:e8:ee:42:3b:70:6e:ca:52:4f:
2c:fd:bd:8b:6e:e3:c1:f3:0b:69:58:3e:4b:ef:23:4f:89:38:
a6:68:3d:59:58:0b:ff:db:ef:fa:9c:b9:bc:87:af:4a:9e:58:
1b:a2:36:ff:fe:71:2e:2e:69:03:3a:6b:b6:bf:c8:99:5b:a3:
6f:37:53:ed:e7:78:e6:0d:e2:b6:8e:b1:34:18:58:3f:d7:47:
ee:3f:a4:b1:b4:79:9c:eb:bc:19:65:f8:a6:11:59:c9:ab:ad:
9b:c6:ab:57:93:a4:41:8e:70:ce:27:06:05:ee:19:4f:13:4c:
bb:ec:77:0c:c9:db:cf:2d:24:6f:39:f1:17:df:f4:94:1a:8d:
87:d5:91:a3:0d:54:e6:58:ff:eb:78:54:ce:55:b9:44:b1:a6:
e8:7c:a0:48:a5:e4:e7:74:67:33:07:3e:91:45:4c:5e:3d:c7:
4d:03:2d:dc:b9:f4:24:84:77:0a:f2:82:60:67:2e:99:3b:48:
e1:dd:1a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:24 2025 by rpki-client