Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
File: pNyKTpFqo_eO94BHrCDQ0PipUPk.mft (raw, json)
Hash identifier: OZRpwu++e2506NUDhV3rUShaACZ8pw2yczMLaRJ5VSQ=
Subject key identifier: 81:C2:D9:4F:E3:DD:8D:59:B3:4F:63:AA:C6:75:3B:F0:F0:70:A1:11
Authority key identifier: A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
Certificate issuer: /CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Certificate serial: 0198D473F33488A3FD64B77AC71DFB6BE8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
Manifest number: 0CC4
Signing time: Sat 23 Aug 2025 01:03:45 +0000
Manifest this update: Sat 23 Aug 2025 01:03:45 +0000
Manifest next update: Sun 24 Aug 2025 01:03:45 +0000
Files and hashes: 1: UTvK6gSJU03H7EOW3gSzFazwB7M.roa (hash: fFNxwITyp66ny+cQJs93d3VRTa/z6HUTvmCKvoybY9I=)
2: pNyKTpFqo_eO94BHrCDQ0PipUPk.crl (hash: n/kDz2icVRQhfHcbPfGsa9GiSq4QWy04Gq0mFMH4GaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f3:34:88:a3:fd:64:b7:7a:c7:1d:fb:6b:e8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dc8a4e916aa3f78ef78047ac20d0d0f8a950f9
Validity
Not Before: Aug 23 01:03:45 2025 GMT
Not After : Aug 24 01:03:45 2025 GMT
Subject: CN=81c2d94fe3dd8d59b34f63aac6753bf0f070a111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:44:1f:ad:e2:bc:87:63:ff:ae:ff:fc:b6:
ca:90:65:fe:33:17:eb:8b:1a:ed:49:45:30:1f:5e:
c9:48:b0:73:97:f7:05:1d:35:e5:4f:58:d4:bb:00:
d9:78:fd:53:2a:04:be:f7:24:99:12:42:37:48:1f:
81:6f:5a:4f:ab:70:53:af:5c:26:ab:d6:4f:cc:b3:
d2:01:dc:1c:b1:ee:11:b7:c2:c8:71:ba:a7:3d:6a:
4a:a5:93:2c:c6:7a:2a:a3:10:40:54:4e:6e:08:57:
45:4e:2d:09:92:95:64:2a:80:18:d6:b4:42:ce:72:
1f:49:3a:93:de:5c:3e:dd:bd:4d:33:2e:70:b7:f0:
23:7b:69:c8:3d:8a:b9:ee:86:af:2a:5a:85:cf:22:
6c:a6:50:e9:a8:dd:5f:65:0a:5d:81:20:f0:2c:e8:
88:23:07:50:e7:88:3b:06:80:a1:4b:46:a6:87:7a:
d1:5a:e0:d3:27:2d:3c:74:9d:ed:22:14:93:38:8a:
41:fd:4e:cb:86:79:da:15:a8:20:be:e2:ef:8e:1f:
e0:46:33:1b:39:9a:65:14:50:58:bd:af:f5:84:16:
43:ed:51:ec:d9:9e:61:30:82:70:02:7a:42:34:dc:
6a:fd:f8:b1:4c:b1:6e:50:a2:69:d1:14:d5:fa:ce:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:D9:4F:E3:DD:8D:59:B3:4F:63:AA:C6:75:3B:F0:F0:70:A1:11
X509v3 Authority Key Identifier:
keyid:A4:DC:8A:4E:91:6A:A3:F7:8E:F7:80:47:AC:20:D0:D0:F8:A9:50:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pNyKTpFqo_eO94BHrCDQ0PipUPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae1b89-fd48-4b2d-a88e-966be4832815/1/pNyKTpFqo_eO94BHrCDQ0PipUPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:65:58:71:10:6b:e3:8f:2f:8d:86:9d:bb:66:1b:5d:1c:ea:
d4:62:ea:27:5e:9d:12:42:29:63:00:09:3d:78:86:f3:8f:2c:
c1:ba:5a:b3:ab:fa:fe:dd:0d:94:34:50:98:c2:d8:75:3a:b1:
ca:c8:82:78:af:a8:0a:dd:c4:cc:3f:45:e6:cf:fa:4e:52:fb:
d4:ce:78:8d:b5:86:20:fe:80:21:bb:61:8c:d7:b3:49:ae:7b:
9e:c3:0c:b7:90:25:7f:3a:b8:6c:1c:3a:ac:65:f7:1c:60:bb:
be:23:bc:5a:0c:6c:46:16:89:f8:79:3f:54:64:f4:d3:c8:75:
02:92:85:92:bd:8e:b9:4c:3e:52:da:90:11:0a:de:ee:5a:b0:
b5:da:17:4c:c2:4c:37:4b:18:ec:bd:c8:33:66:a3:91:b4:08:
5f:97:af:18:82:af:2b:9e:3a:5c:8e:e7:5f:a2:96:39:d7:6b:
60:cf:46:12:9d:be:14:df:75:29:1f:67:5e:c1:58:ec:fc:0f:
6a:6c:59:ed:4d:01:1e:15:3c:39:ed:a9:91:24:af:14:19:7c:
f0:d9:17:f7:af:a1:d2:d2:bb:cd:96:c1:46:81:e1:31:1e:0b:
46:76:83:cb:1b:64:d3:52:a8:a4:40:c0:63:dc:76:f4:36:15:
08:a4:31:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:58 2025 by rpki-client