Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
File: Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft (raw, json)
Hash identifier: 6KDQ89Wt3F1W/CwyT4COBygQJkKy6YfTCqUAlt+33cM=
Subject key identifier: 96:B9:C9:AC:A7:80:7F:44:09:8B:79:11:5E:88:95:6C:48:CD:4A:0E
Authority key identifier: 3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
Certificate issuer: /CN=3e782de1b5d5292edd136d5278258c67b05be22a
Certificate serial: 0198D4E0D3C883880681598C268FE51CD69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
Manifest number: 038D
Signing time: Sat 23 Aug 2025 03:02:40 +0000
Manifest this update: Sat 23 Aug 2025 03:02:40 +0000
Manifest next update: Sun 24 Aug 2025 03:02:40 +0000
Files and hashes: 1: HsLH977Wr8CRqPeFRIsKeWuqNBQ.roa (hash: DfN2Ce+eFgUYzjRB1SnZEzwBexeV9U5bLQB9J92xhK4=)
2: Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl (hash: 2Y090IWETTu5wk+nHasB5Ns02jg+mAqNb//iFS+a14M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d3:c8:83:88:06:81:59:8c:26:8f:e5:1c:d6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e782de1b5d5292edd136d5278258c67b05be22a
Validity
Not Before: Aug 23 03:02:40 2025 GMT
Not After : Aug 24 03:02:40 2025 GMT
Subject: CN=96b9c9aca7807f44098b79115e88956c48cd4a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e0:d1:4e:2f:93:9d:99:09:a0:a9:08:6b:13:
54:49:3a:30:25:13:dc:8f:b9:a4:37:5f:89:d6:8a:
f7:82:c9:17:5b:a5:4c:48:a8:45:5d:a2:e0:80:b2:
94:4d:fa:38:07:c2:71:4e:e3:90:96:f6:c6:e0:39:
c5:72:e1:14:40:cd:83:73:04:07:fe:5c:8e:a5:a6:
41:61:3c:eb:8e:0a:31:53:86:b4:cb:be:c9:69:28:
ba:f5:6e:0d:11:bd:fc:55:09:23:99:9e:02:7e:6a:
be:75:c3:dd:64:98:0a:df:ef:de:c6:53:da:66:20:
54:5f:71:27:fd:26:fb:c3:84:86:33:44:da:d5:b4:
e9:e8:f0:24:fd:86:a7:be:51:02:c8:5b:17:04:82:
a0:3b:e4:7f:86:7f:cc:ea:3b:e7:75:56:8a:6b:53:
70:c4:24:c4:25:5f:60:69:82:9a:24:f9:bb:da:c9:
2e:f5:0e:64:31:bb:39:49:3b:54:85:0c:44:73:95:
06:ae:15:a5:f5:82:f7:88:8c:c0:8f:93:b5:70:ea:
3a:d4:9a:88:09:78:59:82:17:df:6a:d7:85:8a:ea:
10:56:36:15:96:8c:e6:36:fd:24:d5:c9:fa:71:63:
83:54:5d:f4:1f:d5:5b:9e:4d:d3:ea:1f:5a:5b:6d:
ad:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:C9:AC:A7:80:7F:44:09:8B:79:11:5E:88:95:6C:48:CD:4A:0E
X509v3 Authority Key Identifier:
keyid:3E:78:2D:E1:B5:D5:29:2E:DD:13:6D:52:78:25:8C:67:B0:5B:E2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pngt4bXVKS7dE21SeCWMZ7Bb4io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d035fb-e860-461d-9728-149e2a3ade76/1/Pngt4bXVKS7dE21SeCWMZ7Bb4io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:06:a8:b0:6f:2b:a8:24:61:ba:11:69:c0:2c:80:2c:4b:7f:
0b:25:fd:39:20:49:ab:c3:96:26:9d:3b:33:e8:8b:49:32:56:
47:d4:45:01:ed:a4:b2:62:71:25:32:2a:cb:47:46:89:bd:97:
6b:93:cf:c3:b2:56:a8:d5:3e:a5:3a:bd:4c:f2:89:4a:85:81:
bb:cb:8d:2b:6b:39:6e:0f:a4:a2:e1:66:93:9b:f3:35:71:78:
77:01:0d:91:b3:39:28:f0:37:ac:82:aa:dc:ef:64:54:c0:09:
71:72:a9:df:b8:b3:d2:d4:80:d3:6a:85:78:a0:b7:47:cd:1d:
ea:b5:33:75:b9:a5:7a:89:5d:9e:ff:66:37:0d:36:85:8c:69:
60:63:ee:40:6a:72:3c:e0:a8:ff:7a:bd:48:94:5a:d9:77:43:
d1:44:5b:2f:3a:1b:ca:1f:25:f1:6f:79:50:e4:73:66:b8:b4:
01:f4:8e:14:3a:ee:e6:a0:85:c8:89:65:b4:b4:ea:a2:5e:d0:
13:e9:1c:c1:89:32:e5:95:bf:9f:1d:3d:64:39:b4:94:4a:bb:
db:31:30:17:41:4b:58:67:56:5b:04:bc:ac:2b:ab:0b:2c:a4:
ba:cf:52:1e:f3:08:8c:4c:69:39:d8:7e:d2:37:ec:01:93:4b:
d9:41:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:05 2025 by rpki-client