Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
File: PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft (raw, json)
Hash identifier: Tpu7GnMZk8wGLQ83kt4cc6z8yXrUdTXkI26TGiyW1gA=
Subject key identifier: 20:94:FD:69:18:C5:D1:A4:B9:9B:69:48:DC:A9:8E:E4:4F:07:E7:1F
Authority key identifier: 3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
Certificate issuer: /CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Certificate serial: 0198D65F8B464A16103D0CC23C53CAD3A6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:42 +0000
Manifest this update: Sat 23 Aug 2025 10:00:42 +0000
Manifest next update: Sun 24 Aug 2025 10:00:42 +0000
Files and hashes: 1: PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl (hash: HqlL6ZHIbuxH2T8DRygx4lH9BoCkwnCYsHdTSk+r6u4=)
2: baHbcRR9kf1ghjeGFAS82cVbM5E.roa (hash: ryV49aEsL3mdbzWN2VnZ4BiiOTM51N9BlYGHQV8L9fI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:8b:46:4a:16:10:3d:0c:c2:3c:53:ca:d3:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0ef4358adb040f333d9361a4261ea0e50d38ab
Validity
Not Before: Aug 23 10:00:42 2025 GMT
Not After : Aug 24 10:00:42 2025 GMT
Subject: CN=2094fd6918c5d1a4b99b6948dca98ee44f07e71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:bf:5d:91:21:41:7e:51:25:f6:fa:30:ee:
de:cf:d2:1c:58:16:ce:e7:d8:9d:3b:89:23:29:8b:
fa:41:e9:1b:12:e5:df:24:62:2d:f8:2d:9b:71:d6:
e2:45:0a:ee:36:c4:59:87:af:f9:91:eb:c6:5e:83:
ae:92:d9:95:52:a4:0d:a3:59:d3:a5:b0:34:34:07:
c3:41:da:69:4a:16:80:a2:3f:85:c7:5a:73:1b:8e:
03:b1:f2:3c:6b:52:79:d4:ab:ae:f9:6f:c2:a6:e5:
6e:2d:69:33:80:b2:46:55:d2:e1:8b:c0:44:0e:86:
fa:5b:d2:de:79:28:2c:40:00:f9:7a:01:ef:b6:a1:
9a:ad:b1:60:1b:ff:6b:0c:0b:f3:40:5b:c5:e3:9c:
4c:32:5b:40:b9:8a:10:be:0e:9f:fd:f2:58:9b:f5:
1c:dc:4d:4f:47:e7:94:35:41:ce:c0:6b:13:77:05:
98:9d:f6:1f:b5:81:aa:99:db:2b:83:0a:c5:53:e8:
07:1c:e3:19:33:73:3e:21:90:6a:6a:46:5d:ca:0a:
c7:2f:fb:b8:4c:18:86:27:9e:f6:26:03:bd:d4:0f:
2c:7d:9a:e2:9f:dd:dd:df:01:8b:e5:a0:73:b5:12:
58:8a:11:1d:5f:fd:67:6a:68:7f:75:8a:45:94:85:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:94:FD:69:18:C5:D1:A4:B9:9B:69:48:DC:A9:8E:E4:4F:07:E7:1F
X509v3 Authority Key Identifier:
keyid:3D:0E:F4:35:8A:DB:04:0F:33:3D:93:61:A4:26:1E:A0:E5:0D:38:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQ70NYrbBA8zPZNhpCYeoOUNOKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f946ef-9619-4bdd-9f47-d2bc96a98a18/1/PQ70NYrbBA8zPZNhpCYeoOUNOKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d0:de:47:03:34:f7:1b:91:c5:61:b9:90:99:e3:0d:d8:4d:
c4:84:e6:2f:97:11:5e:1c:69:35:62:56:f3:45:7f:59:54:ce:
a9:fb:b4:d6:f9:6e:c3:85:e4:a2:07:b0:79:71:a2:a7:36:ec:
f8:3f:1b:c5:b4:30:06:9a:64:3b:eb:fc:b8:b2:d4:c1:ef:f0:
b5:b5:76:de:73:a8:98:0b:9f:3d:06:8c:0f:1b:df:ed:8c:66:
45:5a:a2:76:01:50:50:be:10:85:f6:0c:de:06:e9:1b:51:a1:
59:2f:99:72:f7:f2:08:7a:7e:46:97:48:56:2f:4e:76:69:1d:
4f:80:d1:16:cb:28:ae:d3:f5:ea:e9:6d:ef:6f:da:58:a6:4e:
af:df:3c:17:dd:35:85:7c:d4:6c:cb:f3:b3:04:63:83:ec:6f:
5e:61:d3:88:91:33:b1:a0:44:72:db:77:d9:bf:4f:bd:48:ac:
2c:e6:36:17:67:e3:ae:f1:ff:0c:af:ed:f9:ac:bd:bd:4d:a6:
3b:99:2d:c5:4f:d0:4d:43:60:fc:e7:91:f2:0e:90:32:66:2c:
d0:d9:b7:ff:12:59:93:55:69:97:a9:ed:11:8a:b4:16:2e:fd:
a6:8c:63:88:c0:c2:9d:49:43:2d:39:60:23:99:2c:27:e7:8f:
c0:83:90:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:01:30 2025 by rpki-client