Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
File: pkDHUev7SAfYRiLoBss9C53YEGk.mft (raw, json)
Hash identifier: fv5DT0+2TAZXRV8bGTy+pdYIEaF2xIY4H43SmWKmkZ4=
Subject key identifier: 18:0E:78:BD:C5:E1:EF:63:94:1A:C5:42:6A:31:64:B8:98:CC:18:5B
Authority key identifier: A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
Certificate issuer: /CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Certificate serial: 0198D4731CC50F7DF55A31CA0DD36BE7293C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: CqoX7DJIz6T-m3NHJ01LCtyGJFE.roa (hash: 32gG2ZUMfd1jjxqZY90ktdKNZmqWxjZXungJm+FeL3s=)
2: ZCRNSq91ZKzRcSK6x3pKdZV_4Rw.roa (hash: SLb/dN4BABY7//UWc03uIXxQcoqVDd7HnpJMkhWH2bA=)
3: pkDHUev7SAfYRiLoBss9C53YEGk.crl (hash: W81zIONX6h3t9GkHAtm+sJEBkjvgmGrqbigtyAOFOfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1c:c5:0f:7d:f5:5a:31:ca:0d:d3:6b:e7:29:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a640c751ebfb4807d84622e806cb3d0b9dd81069
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=180e78bdc5e1ef63941ac5426a3164b898cc185b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:f1:91:a0:07:db:c6:9f:01:55:35:73:94:
ce:1a:8d:b8:94:94:27:43:61:cd:8c:28:fc:ef:69:
74:4b:36:e9:d8:fc:92:fd:34:81:d0:fc:c2:24:21:
51:00:bc:41:77:19:72:1a:dd:22:87:0d:1b:5d:13:
aa:a9:7f:6e:98:db:7f:13:34:ea:a4:1e:d5:e8:25:
0b:c7:53:2c:69:86:21:d0:46:6e:8f:fa:0c:c8:06:
43:3a:4c:72:29:01:79:e4:5b:97:99:8c:3c:ed:36:
a4:dd:17:9a:f3:08:8e:8e:53:64:20:36:9d:d6:26:
17:d2:df:d8:9d:59:e7:8d:67:ca:05:99:c6:22:d9:
48:b5:dc:e3:df:65:99:8f:18:b1:46:05:22:ac:ee:
b4:90:eb:c5:9b:dd:a8:b7:e1:6d:19:7f:64:a7:7f:
7b:2a:38:8a:ef:e3:f3:eb:84:5b:98:49:13:0a:22:
ed:70:a8:92:55:89:a6:ea:87:9f:27:32:b9:46:69:
95:51:56:08:65:26:03:db:23:db:04:8c:db:0e:94:
2c:56:f1:73:b6:8f:d9:dc:bf:e3:22:a8:c9:d8:97:
1a:79:7d:2f:1f:20:20:c9:3c:81:24:ed:39:98:5e:
89:c6:43:05:fc:41:16:72:2f:9e:30:a4:a6:d2:b8:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:78:BD:C5:E1:EF:63:94:1A:C5:42:6A:31:64:B8:98:CC:18:5B
X509v3 Authority Key Identifier:
keyid:A6:40:C7:51:EB:FB:48:07:D8:46:22:E8:06:CB:3D:0B:9D:D8:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkDHUev7SAfYRiLoBss9C53YEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8a5a2e-4d33-4a2c-adf3-026b8cf691ba/1/pkDHUev7SAfYRiLoBss9C53YEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:69:04:d7:d7:98:25:b2:c1:5c:3a:6a:49:d2:cf:15:24:9d:
a9:bf:db:4b:1a:e2:6e:7a:8c:94:0f:0d:bb:bb:d9:83:ae:c5:
c0:49:82:52:f1:cd:95:97:31:83:03:b7:2d:7a:6f:b5:4e:48:
d7:f9:7c:49:63:ae:82:0f:06:0d:37:c0:59:e3:80:e8:37:72:
21:2a:0e:e7:9c:64:4d:62:2b:1f:57:e9:2b:9f:17:9b:53:9d:
ac:11:6c:3f:a9:18:3f:cd:c9:7b:5e:14:c4:d1:e2:3b:ef:02:
ed:5b:cb:5a:65:ea:19:bc:c3:6f:c1:a5:4b:d6:91:35:a0:37:
c1:33:1a:2b:c6:8f:b5:15:48:28:75:db:fb:3c:49:4e:44:66:
26:bc:1c:91:80:51:9e:4f:26:81:42:e2:c7:64:79:9d:bf:86:
52:c2:1d:3b:94:75:0b:d7:2d:45:57:a6:8a:01:d5:7c:a4:cc:
6a:72:99:f9:6f:8d:1f:47:6c:14:99:b3:32:a3:cc:e9:2d:b4:
26:58:c7:d2:5e:33:ef:a6:21:ef:2f:aa:bb:21:65:1c:3a:ad:
1b:e0:ea:60:1d:3a:54:a1:65:e2:e4:31:ed:7a:38:36:ba:8d:
96:10:6c:57:3a:74:4b:f7:5d:6b:e4:43:17:4d:76:f3:98:bb:
d5:14:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:23 2025 by rpki-client