Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: trObOS9SWPMAR0WK0r9kIQWSeTkYsh4TJwABLqvPkW4=
Subject key identifier: 20:7B:D8:E9:6F:59:74:86:51:53:D5:6C:3E:BD:BE:55:AA:A3:FC:F0
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0198D4E03DA1FDDDC660DF38B749707CF976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: oO8y3ujoUeGqsysCfUqTZ7J9Mt/ohfkwhjemmbODseQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3d:a1:fd:dd:c6:60:df:38:b7:49:70:7c:f9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=207bd8e96f5974865153d56c3ebdbe55aaa3fcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:07:7d:89:11:64:24:3b:83:78:0a:14:bc:
b8:9c:32:24:92:52:54:45:08:1d:cb:54:37:48:ed:
5b:3e:95:94:3a:88:d8:9f:5e:33:ad:3c:65:cc:08:
50:2c:cd:96:a0:5b:b0:39:e2:13:8c:7b:f3:94:50:
93:8e:c2:72:04:89:27:87:8e:f9:41:42:f4:1b:93:
31:28:3c:ae:d1:54:00:2d:04:bf:95:ff:74:67:8b:
d7:25:21:79:2d:5a:19:54:06:f2:d8:8e:99:c1:68:
2d:44:bd:78:92:6c:46:93:c5:19:02:f6:71:30:d5:
70:5e:f6:fc:4b:68:6d:a9:7c:59:43:a0:42:29:e1:
8f:1f:d8:56:31:81:2d:3f:73:01:a3:37:ce:32:68:
0c:ca:de:81:4a:4b:5c:99:84:c9:b1:d7:c2:fa:c2:
70:b5:48:1d:d6:74:d0:3e:01:84:4f:9f:a5:1b:bb:
fd:2b:fd:15:f5:31:de:e0:17:14:d7:09:8c:df:90:
da:6d:cf:49:6e:6d:bb:2f:ff:17:ef:00:79:bd:17:
a9:9a:71:a2:54:42:55:87:30:83:5a:d1:e5:6a:1f:
27:2e:6a:ef:5e:0d:75:17:6f:cd:2e:2a:2f:4f:16:
4f:c7:a5:5a:13:0b:ee:3d:11:0e:63:ce:05:40:77:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:D8:E9:6F:59:74:86:51:53:D5:6C:3E:BD:BE:55:AA:A3:FC:F0
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5b:c1:d1:4d:39:1d:ab:48:04:cb:7a:32:9e:27:a5:5c:16:
6e:1a:d1:f1:67:f0:79:fa:33:1b:9b:79:44:21:29:f0:37:b9:
8e:ab:7f:d2:b2:d5:40:fd:b5:03:95:af:db:e7:df:5b:b8:fe:
7a:13:11:33:bf:c5:85:58:43:9b:c2:36:e1:f3:47:40:d2:94:
7c:36:ff:9f:fb:23:6a:65:f8:ba:f0:3d:82:21:f4:bc:4c:aa:
0e:06:9a:04:67:54:4f:e9:ab:66:64:15:46:6b:51:19:32:56:
b0:fd:2f:92:04:ae:b9:fa:c3:69:86:4d:74:30:d8:5a:ba:d0:
82:0a:8e:b1:26:85:cd:0e:70:ec:d6:4a:a6:50:e1:18:3d:7b:
c3:b3:8c:20:ad:06:0e:7a:5b:23:1d:55:06:a5:43:9c:17:1e:
65:75:fb:70:65:10:43:8b:52:cc:1b:e7:05:7e:34:08:79:08:
e1:1f:46:c0:99:a6:88:f2:1f:ac:8e:6e:bc:0a:28:5d:81:b8:
85:8a:c0:a8:db:e7:4f:52:e0:f6:5c:68:b5:69:21:f9:90:51:
37:9f:b7:ac:2d:e9:fc:e7:5c:ae:55:c9:5c:76:03:4d:2e:f3:
9f:23:3b:65:fa:38:82:ce:ae:71:77:48:5f:c6:8e:57:2b:7d:
62:3a:4f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:32 2025 by rpki-client