
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
File: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft (raw, json)
Hash identifier: CMAQZlq1N5dEUF+i6Nrac5U6wT/fibQMVA+clGNfamc=
Subject key identifier: 97:A6:07:BC:21:66:8C:45:AA:44:5F:8C:2A:A1:6E:5D:85:8B:8E:5D
Authority key identifier: A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
Certificate issuer: /CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Certificate serial: 0198D5F18705C86945FE6C2451A0E8ECB6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
Manifest number: 0C98
Signing time: Sat 23 Aug 2025 08:00:32 +0000
Manifest this update: Sat 23 Aug 2025 08:00:32 +0000
Manifest next update: Sun 24 Aug 2025 08:00:32 +0000
Files and hashes: 1: 1LXoG8lIrfkrrE3BvhbCNRs7Cyg.roa (hash: qehfEzu5pVPdqrtkKPnNAj43cdjEk3H8LlXqlcvxhLI=)
2: pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl (hash: KaSescbZPhQr3SXSUWYwTBB+oD9Z9nI2LhoGMj1/hz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:87:05:c8:69:45:fe:6c:24:51:a0:e8:ec:b6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40c1ad547b93ebf655c580438dfa5ae427c6511
Validity
Not Before: Aug 23 08:00:32 2025 GMT
Not After : Aug 24 08:00:32 2025 GMT
Subject: CN=97a607bc21668c45aa445f8c2aa16e5d858b8e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:64:dd:4a:39:2a:0f:19:5d:e4:62:b5:43:
64:ea:f2:30:96:4b:33:22:3e:94:19:29:b4:4e:2d:
85:3a:4c:16:59:83:44:e7:b4:9f:51:9e:38:98:9a:
62:be:13:ba:ca:2e:4a:68:fd:b5:d1:b8:e6:0f:f5:
bb:0f:28:11:ad:09:24:1c:2f:51:90:79:11:7a:30:
f7:2b:73:c2:7e:da:07:39:48:27:15:6f:a1:b8:61:
b7:be:97:43:67:f1:ee:73:91:42:78:b3:7b:ce:b7:
a5:7e:74:1e:a3:6f:7b:cc:8e:04:1d:ea:da:1a:50:
a2:c3:42:1b:05:92:16:75:38:c5:4b:0c:2b:8d:99:
bc:1a:aa:c1:b2:de:b1:2e:93:08:ab:a3:7b:af:cd:
9a:6a:fb:47:64:9c:85:06:83:41:83:b7:dc:5a:e1:
f4:89:46:4a:f7:2f:33:d4:a8:49:33:13:b9:b7:68:
ad:f1:22:c6:34:42:93:69:bf:e6:83:f4:65:7d:e1:
49:29:1a:1a:cb:10:51:7f:53:e1:96:d4:c1:8d:08:
a7:8f:62:b5:fe:07:9a:a0:c6:35:c0:6f:46:a7:54:
31:5d:ab:da:28:23:d2:f1:c8:b9:c9:0a:43:be:ac:
47:81:a6:33:4c:79:70:c6:f2:b8:2b:73:18:52:d7:
16:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A6:07:BC:21:66:8C:45:AA:44:5F:8C:2A:A1:6E:5D:85:8B:8E:5D
X509v3 Authority Key Identifier:
keyid:A4:0C:1A:D5:47:B9:3E:BF:65:5C:58:04:38:DF:A5:AE:42:7C:65:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/6a4e57-fbe3-4bc2-b8a5-dc8fcc6bdaaa/1/pAwa1Ue5Pr9lXFgEON-lrkJ8ZRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d8:6c:82:95:d9:a8:ce:cd:cc:e1:57:1e:18:c5:1f:72:2e:
00:dc:e2:b2:55:51:5f:11:ca:30:e4:35:35:a6:64:1c:0e:c8:
00:34:6a:42:bc:74:74:7f:01:ad:48:e6:d1:27:f1:0f:71:33:
b8:5f:ce:01:f5:1a:32:8c:e6:f2:bc:c0:f2:8c:86:77:c0:d4:
5e:ef:51:e9:d5:85:d7:22:bc:d6:51:cd:14:69:f5:0a:35:6e:
26:4a:c7:83:d3:67:b1:f6:81:81:e1:c0:bd:15:9e:3f:20:c0:
1d:0d:a7:0c:9e:15:7d:96:63:56:a2:39:ae:19:ad:8a:5c:5a:
6b:5c:d4:88:84:91:19:28:f3:3e:23:e6:9a:8d:21:12:28:2a:
c5:99:69:37:a7:cf:47:88:aa:9b:9f:61:e1:73:52:99:55:ed:
4f:d8:fc:5c:f7:54:51:69:c6:12:b3:f9:31:39:c8:0f:9f:95:
02:e8:5d:17:07:e1:cb:db:96:55:bc:a4:b2:26:2d:75:69:3c:
c3:e3:2a:69:a6:e6:53:ce:b5:d5:f1:56:b4:c3:df:ab:b8:8a:
88:5e:65:e4:ae:46:67:5c:cb:4a:49:4f:c0:dc:9b:c1:af:15:
17:ef:21:d4:85:3a:03:36:61:e0:2c:f3:ed:01:c0:b4:01:8e:
ad:f3:47:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:39:02 2025 by rpki-client