Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: wH0s3QL01YT/Ac7H9dkHqBJDeO9R31qUctyIrBBZiy4=
Subject key identifier: 94:20:7F:9E:0B:57:FD:2F:FB:4C:95:A3:7F:4D:42:D7:2E:FD:53:32
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 0198D6981A7FD49E667C687F0651FCDCC0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0C5C
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: fI+NhMcOnAmiWuBATKLme7chW2iZjWCyLdGq43zbb1c=)
2: dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (hash: 5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1a:7f:d4:9e:66:7c:68:7f:06:51:fc:dc:c0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=94207f9e0b57fd2ffb4c95a37f4d42d72efd5332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:97:24:44:91:01:2c:9e:f7:4a:79:34:9c:
e2:3a:a3:12:05:08:4f:7f:d0:cf:6e:f6:24:92:e0:
40:fa:62:95:fe:5a:e3:3f:0f:b5:b3:f7:71:0d:a8:
b9:f5:7c:2c:6a:96:1b:2e:5d:fd:64:96:56:08:19:
1c:42:e4:c4:a0:5e:f7:2b:07:c7:69:c8:e1:9d:98:
61:9f:60:bc:59:9d:60:a2:cc:f5:54:f4:9a:87:96:
44:9f:64:03:fe:29:45:69:4c:9d:3c:39:e8:e2:24:
95:51:df:1f:bc:af:30:71:09:f1:0b:66:c8:04:a6:
7b:7c:51:57:20:3d:52:41:b3:51:24:a2:d9:4b:07:
3a:9d:b1:7f:1b:7d:43:dd:ea:4f:bc:a8:b4:bf:12:
e6:03:65:36:2c:74:6d:df:48:88:52:08:ed:6a:04:
2a:76:c0:c4:c1:92:14:75:6c:8f:5d:3c:14:64:6f:
48:4d:d9:3c:b3:00:44:21:10:43:01:bd:c3:3a:ae:
b4:78:1f:75:2f:6f:7b:09:c6:3f:29:2e:6b:0e:54:
ed:c4:a7:73:59:f7:c1:86:57:96:2c:de:75:2c:3c:
24:a0:2f:a1:09:28:80:0e:36:ca:d2:5f:e6:a0:d1:
b6:fc:20:2d:04:88:82:ad:c6:d2:45:91:f5:2d:4e:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:7F:9E:0B:57:FD:2F:FB:4C:95:A3:7F:4D:42:D7:2E:FD:53:32
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:49:bf:80:1f:a8:8e:c4:5a:ce:19:4c:9e:22:f0:31:d2:
6d:a6:67:aa:8a:7d:c2:dc:b0:4c:6b:90:26:95:56:47:46:fb:
7f:a3:6c:c3:f7:52:4c:4c:dd:f9:39:0c:a2:42:4f:03:60:ca:
1f:cb:bc:46:25:fe:0b:dc:d3:49:86:32:96:cb:da:1a:3b:9c:
66:93:27:18:ef:95:df:25:60:8a:fe:c3:4c:cf:54:4b:8b:63:
56:e8:f2:07:2f:58:ca:55:e5:7f:09:ed:e9:23:ba:b7:1d:eb:
23:7d:a1:cc:ee:f4:5e:7e:9c:ed:f7:a9:0b:0f:0c:8c:c1:ea:
5d:83:87:93:36:80:f3:bd:7e:43:7c:b2:af:cd:ff:ca:6f:93:
cb:74:b3:74:f8:1f:ae:8b:2f:06:ca:45:ab:c4:32:eb:06:6e:
2c:b7:87:79:83:09:43:e5:fc:06:30:1f:c6:39:77:fa:ea:0c:
43:dd:c0:2a:79:34:9e:c8:8d:5b:ee:f9:85:84:eb:6d:10:89:
2a:b9:1c:3a:cb:80:1b:7d:b8:1c:7b:3f:f0:ca:21:29:60:8d:
d7:c1:21:65:a1:aa:bd:4d:3c:d5:4c:65:71:14:6d:f4:9c:2d:
0f:4d:69:12:33:f1:cc:ea:30:fe:62:ae:b6:b4:13:28:ca:62:
bd:20:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:02 2025 by rpki-client