Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
File: pbIQYaPq10EOBFDbvyFw_gyTi7E.mft (raw, json)
Hash identifier: FnKENnYbNZJ0NnA4XTAzB8l+E2WXrEUdrq6vOGz7P9U=
Subject key identifier: 39:F4:0A:F3:D9:98:1F:79:15:D6:16:7F:EE:2C:C8:F0:B4:73:D8:99
Authority key identifier: A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
Certificate issuer: /CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Certificate serial: 0198D54EBEE8621256787C4F4E3D9105F6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: pbIQYaPq10EOBFDbvyFw_gyTi7E.crl (hash: 3H+siuzVPjctfMWn186M7X/gwlCjKupKUlhhgCXrZps=)
2: q9uMRJMivdNIUmR3cIXWE4hBpI0.roa (hash: k+Mam0ND2lwJk85PckjyzqHvxu7FYX4bMXDwNQs3Kx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:be:e8:62:12:56:78:7c:4f:4e:3d:91:05:f6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b21061a3ead7410e0450dbbf2170fe0c938bb1
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=39f40af3d9981f7915d6167fee2cc8f0b473d899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:86:b1:f5:4b:cc:21:b8:0c:d4:30:44:9c:19:
f9:03:e5:87:89:b9:3b:b1:ef:bb:4b:ca:97:da:ed:
d9:bb:bd:5b:45:c1:19:41:7b:b0:7e:50:8c:d9:0e:
13:90:ca:42:7d:79:81:23:74:41:14:0f:ab:9e:c1:
aa:e1:fb:ba:91:12:93:28:92:04:b5:d7:d3:47:b5:
f2:84:cd:d2:bf:07:72:cc:ca:7e:93:ae:d8:8d:b8:
b1:ae:0b:65:d7:4e:94:b2:11:74:1e:9f:13:ce:d1:
6b:c6:df:f2:bb:6b:e7:3a:d6:80:a7:61:7e:e6:2a:
07:f8:7e:a5:75:a2:48:bf:62:b0:aa:8c:b6:d0:48:
88:c9:57:7b:1d:08:37:7b:a7:70:da:6b:ed:d9:5b:
3d:7f:ae:21:3b:bd:96:49:1c:02:c7:32:a5:7b:59:
22:77:af:5b:a3:78:9f:81:e2:25:eb:a1:ad:0c:c0:
c2:d8:75:69:97:95:4a:0f:36:86:63:b7:38:5a:5f:
4c:12:0b:05:a4:a3:2a:5f:c5:af:52:5f:f3:44:70:
b8:2b:06:f5:ae:4e:ee:c8:55:c7:ac:f6:00:7a:d9:
77:bc:15:b6:e9:c7:80:60:1f:3b:12:37:35:69:9a:
20:80:ae:1e:0d:f2:90:0d:0d:d2:37:40:2d:57:ca:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:0A:F3:D9:98:1F:79:15:D6:16:7F:EE:2C:C8:F0:B4:73:D8:99
X509v3 Authority Key Identifier:
keyid:A5:B2:10:61:A3:EA:D7:41:0E:04:50:DB:BF:21:70:FE:0C:93:8B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbIQYaPq10EOBFDbvyFw_gyTi7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ffac4d-a272-4e6c-9431-a0883c0b095b/1/pbIQYaPq10EOBFDbvyFw_gyTi7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:35:11:36:7d:c8:cf:1b:d0:e9:19:58:12:db:4b:97:b6:43:
84:d1:a6:a6:86:95:75:7a:39:7a:71:21:4e:c9:5c:70:86:e1:
43:59:76:5b:0e:e2:59:87:b0:b0:d7:6d:a5:c0:30:0c:56:09:
c0:de:fc:fe:e3:ba:fb:f6:fd:2e:c1:44:f1:ff:6d:39:7a:4a:
ce:ad:6d:4d:8c:2c:a4:9a:b4:a7:a5:c9:7f:a1:cf:65:80:2d:
8f:98:62:1c:5d:7e:f8:6b:b2:34:d1:c6:c4:de:2a:de:e5:74:
92:88:b3:d2:a4:db:d1:e4:c1:fc:fe:c5:4d:97:6e:de:e4:f6:
79:5b:06:38:c9:af:67:6d:d6:90:aa:3d:91:c2:40:02:c0:54:
d3:82:0a:61:e6:3e:5c:91:f8:06:a5:79:b6:95:d7:9a:30:34:
28:c4:c5:ac:20:32:ee:a5:7c:71:41:2a:54:25:ef:b8:49:d4:
f4:83:c2:83:3c:7f:60:a4:59:63:58:99:d7:d5:eb:ea:ef:4d:
35:d7:dd:1f:83:66:c8:f8:c2:23:4b:d1:4d:ac:1b:bb:78:00:
48:cf:30:f6:0c:5b:d4:99:b6:26:a0:2c:fc:b1:c1:89:d2:a3:
92:bf:91:f3:31:2f:d5:0e:8c:78:f5:fd:75:c2:c9:30:dc:13:
34:46:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:18 2025 by rpki-client