Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: loQVrbNlwA4MwJv3HxdRA80ziH7rZ3PyDJA89DtSVkw=
Subject key identifier: EE:58:64:58:21:21:20:BE:E4:B0:37:BC:0E:8D:17:21:78:88:9B:BA
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 0198D5F178E19DA396A0EF8BF78EB9A44D4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 064E
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
2: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: Z8Ls0of7R9QYlF0i4gq+s8oH26iNh8dj3duvQbGKFg8=)
3: rEm8DnSRjF-eOZ8W-19-W5YBOlI.roa (hash: oKxbV7NuBt8nP02xM3KhblNP7v+2Q4dV/sQu1W1Wh/I=)
4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:78:e1:9d:a3:96:a0:ef:8b:f7:8e:b9:a4:4d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=ee586458212120bee4b037bc0e8d172178889bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:74:99:0e:9c:16:8b:f0:7e:05:40:8c:f3:
62:7c:c5:19:59:ba:22:2a:1a:95:63:5d:01:ef:ab:
c7:2a:9c:d4:76:55:42:22:43:5a:37:1d:84:4d:56:
ba:60:61:98:ba:95:c9:a4:85:9f:80:ed:a0:9a:f8:
4c:93:c8:94:57:f1:06:3a:70:5f:22:e0:2c:42:31:
3e:8b:4d:a4:9f:f4:5e:85:4c:6a:8c:06:a0:67:d7:
a1:05:0c:c2:bc:ae:d2:94:81:a3:20:f1:cb:79:93:
dc:0a:05:d6:da:ad:0a:3e:7a:a7:07:29:00:dc:0c:
e9:d9:9e:e0:b1:ac:92:5d:fb:ac:1d:47:4a:ce:4e:
49:dc:86:08:b7:25:f3:02:02:9c:e3:c4:0c:4c:3a:
89:22:16:1b:0e:64:95:70:1d:73:7c:b1:f3:1d:55:
fc:6d:21:3e:bf:8f:bd:82:06:72:ba:d5:f6:ec:0b:
61:eb:c0:13:95:b0:06:06:bc:96:00:d4:d7:b8:fe:
99:8a:e9:61:c2:1f:dc:e6:6b:98:e2:c4:3c:c2:24:
9d:f6:2e:90:cb:70:d8:71:c9:7a:1e:3e:07:4b:32:
4f:c5:3f:fe:e9:95:dd:4b:c9:59:e5:9c:20:b1:2a:
e0:f0:b8:9a:d1:cc:93:84:07:bd:49:7c:ae:8b:42:
2d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:64:58:21:21:20:BE:E4:B0:37:BC:0E:8D:17:21:78:88:9B:BA
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c4:70:ee:6d:7f:0f:a7:69:87:44:7d:64:8e:aa:0d:0a:97:
a4:cd:3a:78:f1:88:3d:c5:30:c4:7b:7b:c5:bd:98:af:0f:71:
0d:c1:f3:07:ee:88:97:83:f3:d8:47:61:b4:bf:39:d4:8e:4e:
f3:aa:d3:6f:99:d1:f5:ab:28:5f:4f:a5:8a:1c:c8:1e:bb:d6:
b0:4c:9a:9f:13:a8:37:0c:cb:48:f0:ce:e1:34:81:4f:a4:c8:
9c:a0:3b:09:02:91:21:98:00:55:02:18:89:fd:4c:86:93:ef:
eb:bc:c6:1d:49:31:3b:15:53:f2:8b:5d:ec:19:d1:32:28:85:
58:d3:0d:08:15:03:3e:28:f9:ad:19:e8:40:c5:6d:8a:2e:8e:
bd:fa:f7:9a:b1:6d:42:46:08:1d:9b:a0:92:15:3d:4a:7d:b7:
7d:76:d3:d7:4e:1f:bd:e9:70:dd:22:20:92:38:8c:c0:cf:eb:
23:49:4e:17:f9:c9:83:cb:b0:31:af:c9:ad:d6:aa:29:c3:fd:
22:34:52:26:13:53:dc:d7:53:71:63:48:4e:a9:e1:e8:ae:b2:
70:21:ac:1a:c3:31:da:22:8f:e3:81:5d:4d:ee:69:10:72:b6:
7e:7a:b5:b4:10:1c:0f:7d:78:1a:38:68:c8:64:fb:b8:c2:42:
ac:05:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:46 2025 by rpki-client