Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
File: pffZAsirU0AJh6GIKrJ_fPoBt0A.mft (raw, json)
Hash identifier: MjkMkYY9RYdfvpnfI2a7Mj0d0POh7N23dpciQlGnCJY=
Subject key identifier: AA:E7:37:0B:B6:2F:A5:D2:0F:5D:E0:D7:9C:9F:CA:E4:FF:B8:B7:1E
Authority key identifier: A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
Certificate issuer: /CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Certificate serial: 0198D7060C11FAF76F1537405F5B3DD757AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
Manifest number: 02A3
Signing time: Sat 23 Aug 2025 13:02:34 +0000
Manifest this update: Sat 23 Aug 2025 13:02:34 +0000
Manifest next update: Sun 24 Aug 2025 13:02:34 +0000
Files and hashes: 1: pffZAsirU0AJh6GIKrJ_fPoBt0A.crl (hash: 479wv4ml8GFUkuEzqcN1CpzaUqy2pucXw636fe3HHtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:0c:11:fa:f7:6f:15:37:40:5f:5b:3d:d7:57:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f7d902c8ab53400987a1882ab27f7cfa01b740
Validity
Not Before: Aug 23 13:02:34 2025 GMT
Not After : Aug 24 13:02:34 2025 GMT
Subject: CN=aae7370bb62fa5d20f5de0d79c9fcae4ffb8b71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b7:c4:fb:76:49:27:21:2f:c9:4c:54:3e:e8:
f8:bb:a5:bf:42:4d:43:85:8e:6d:92:5b:5a:52:0b:
7f:6b:8d:15:ca:14:fd:63:39:a4:16:da:a9:5f:82:
d4:a6:0f:5b:28:ab:45:02:fb:fa:00:80:28:16:74:
8f:0b:c1:3e:b5:db:5a:ed:4e:34:41:d9:b0:c1:a8:
d6:b3:3f:51:83:eb:e0:35:0c:1e:3d:d9:8d:7c:02:
df:50:41:e0:cd:07:79:c3:45:00:d4:8e:71:b4:83:
c1:2c:d0:cc:6e:87:51:6c:30:aa:52:60:16:36:ab:
f3:cb:0b:e7:b6:86:87:12:94:6b:1b:40:8e:f3:fd:
6b:ab:f0:f4:be:de:fd:a7:a8:02:d9:e9:bf:e7:32:
1f:b7:ab:6e:bd:8b:39:74:e6:2b:9a:63:46:01:3a:
ae:22:7e:6b:ae:e7:1f:75:66:82:44:99:9f:2d:a2:
2b:26:2d:b6:82:e4:53:59:e9:39:de:29:cf:64:b7:
fd:75:0a:9c:7c:7f:fa:2d:cf:0a:98:0d:2d:bd:52:
71:f5:79:83:e2:b3:d3:57:a1:4b:31:4c:75:50:61:
55:e2:93:c0:b0:4b:51:18:5c:5e:ef:39:e3:4a:db:
28:7b:a7:cf:f0:f1:72:7b:6b:e5:cd:86:5f:8c:f8:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:37:0B:B6:2F:A5:D2:0F:5D:E0:D7:9C:9F:CA:E4:FF:B8:B7:1E
X509v3 Authority Key Identifier:
keyid:A5:F7:D9:02:C8:AB:53:40:09:87:A1:88:2A:B2:7F:7C:FA:01:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pffZAsirU0AJh6GIKrJ_fPoBt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/710b27-f68b-436f-bcef-2d65e06687de/1/pffZAsirU0AJh6GIKrJ_fPoBt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:45:e5:9f:56:a2:97:55:89:02:c2:2b:26:20:b6:35:5f:f4:
e9:11:3c:72:7d:5d:4d:c6:b0:8b:4c:96:a3:5b:56:1d:0b:33:
58:6b:70:1b:85:ff:7d:3f:d7:b7:2f:83:de:38:95:09:20:65:
1a:93:24:7f:2b:11:84:f4:ea:45:40:bc:b0:47:cb:f2:95:0a:
6c:33:b5:51:50:12:3e:fe:62:53:a5:6b:7c:9f:11:da:7a:e6:
2f:74:70:10:61:f3:2a:94:ef:89:26:de:d9:d3:e4:28:25:ea:
23:5f:98:c0:57:d5:e0:d6:b3:a8:69:fb:11:54:2f:94:77:4b:
a1:89:19:d5:c8:cb:05:bd:ce:f9:f4:cb:fb:e3:c8:f9:8f:ff:
80:ca:7d:b3:da:0f:86:06:49:27:c2:6b:13:a1:48:0f:87:6b:
1b:03:d8:cc:68:84:94:87:82:29:23:07:56:cf:ab:1b:66:3f:
da:80:fe:93:b9:1f:b1:d2:20:ba:8a:43:13:41:f5:d7:9e:a0:
07:64:25:13:df:b3:3a:b0:0e:f9:93:42:3b:f0:28:a6:1e:11:
00:0a:e2:90:19:68:c6:88:c2:c8:d4:2a:70:87:23:48:ae:f3:
ed:45:c1:35:d4:ca:73:dc:27:2d:24:eb:aa:8d:49:08:4c:c4:
0b:39:97:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:13:38 2025 by rpki-client