
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
File: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft (raw, json)
Hash identifier: lWlaCqxmlyuTmbMtCzu0oRdoJoDR8hOami11+kOxsmE=
Subject key identifier: 51:88:2A:2D:A7:50:01:48:BC:12:B3:74:69:0F:EA:C2:70:0B:44:E8
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 0198D6608353E34B130E73936C850A29A71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
Manifest number: 0E43
Signing time: Sat 23 Aug 2025 10:01:45 +0000
Manifest this update: Sat 23 Aug 2025 10:01:45 +0000
Manifest next update: Sun 24 Aug 2025 10:01:45 +0000
Files and hashes: 1: PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl (hash: W7+sxIc8za36r2cDzTvRUyToFyXCcb/rCvi2cMf3/Mw=)
2: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (hash: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:83:53:e3:4b:13:0e:73:93:6c:85:0a:29:a7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Aug 23 10:01:45 2025 GMT
Not After : Aug 24 10:01:45 2025 GMT
Subject: CN=51882a2da7500148bc12b374690feac2700b44e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6e:45:5b:69:70:99:5b:77:2f:b4:42:93:da:
4d:3b:4a:ad:e9:50:17:1c:d7:f1:47:2d:fe:74:b9:
d2:a5:7c:ef:44:f7:19:b2:9a:ed:f3:1f:0b:d0:4d:
8b:49:60:da:5f:e8:05:27:7b:10:9f:6a:01:41:48:
20:bc:a0:cf:76:fa:f3:1d:7b:43:4b:1a:9f:bd:54:
86:d9:9e:8f:c3:9d:8f:2e:c5:ff:74:bb:ab:dd:22:
ff:f0:ac:3c:17:27:a7:d0:21:b5:54:8b:75:6e:92:
b0:6b:a5:d3:c3:38:9f:2a:c3:4c:af:6b:ed:e3:80:
96:12:22:28:87:8e:4a:1c:4e:61:41:03:84:89:1e:
94:06:73:1c:17:14:4a:c2:72:33:a4:86:b3:90:dc:
74:2c:c8:19:ee:df:59:77:28:76:e8:66:3a:3b:5b:
71:0b:9e:f6:71:db:a2:f6:1f:cf:ab:b9:c9:a0:97:
83:af:06:b3:0f:43:85:c0:cc:0d:01:ab:cf:b2:d2:
a0:36:48:54:71:6d:8f:b2:2a:c7:e7:40:ac:77:db:
fb:4d:2b:0b:f3:3c:dd:42:d0:45:af:30:06:3c:68:
e7:a3:e2:ad:92:d1:4d:ec:0c:1a:b4:17:ab:eb:62:
5d:6f:b8:76:67:68:47:29:ed:6c:ef:d6:f9:f2:9f:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:88:2A:2D:A7:50:01:48:BC:12:B3:74:69:0F:EA:C2:70:0B:44:E8
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:50:6c:09:77:c0:73:8e:09:19:8c:30:a4:9b:41:41:fe:76:
d8:d1:c9:72:de:00:7c:f2:51:94:54:dc:a7:a7:6d:77:f3:56:
e3:66:1c:76:e3:c6:86:a4:5c:1a:43:a8:da:5e:e7:68:21:0a:
07:db:c6:d7:ee:50:4e:b1:06:2f:c6:39:f4:f3:46:e5:28:f4:
8c:11:aa:0a:39:0f:5d:05:aa:8a:2f:fe:78:bc:a3:3a:ca:6b:
c9:05:9e:9f:68:c2:6d:52:ff:aa:c6:51:d5:31:31:e5:90:1a:
52:64:74:e4:4d:f8:9c:bc:17:3a:5b:15:6b:01:13:ab:ba:7b:
fe:02:2c:39:14:a1:ed:9a:97:4a:10:6e:3d:f5:0f:83:0f:57:
b1:12:f9:63:fa:68:83:b7:29:dc:38:c6:27:0c:b4:26:ba:41:
03:72:10:48:5f:82:0d:6d:e1:33:4f:41:c6:50:cf:19:61:c5:
f3:5e:da:b9:9b:9f:2b:d2:5b:cc:bb:24:81:ff:39:50:80:9c:
c5:9e:3f:da:b5:32:d2:9b:e1:61:43:70:6b:16:50:94:62:fd:
09:09:0f:73:ae:42:6e:dc:78:9b:43:61:ca:59:40:d8:23:bc:
fb:1e:ed:c6:24:c0:69:05:a0:99:63:78:d8:14:0d:1b:6a:ab:
ed:95:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:27 2025 by rpki-client