Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
File: pPAKrld-dFH4jqYEv2ozc0zQMAk.mft (raw, json)
Hash identifier: 0+2MdU09yfgNDSOWkZ28FIu76cHNJlhk98eoKTI76Dk=
Subject key identifier: 23:FD:C3:5E:E3:25:CB:79:7E:3C:8D:5F:89:FE:E1:5C:8A:A6:E9:32
Authority key identifier: A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
Certificate issuer: /CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Certificate serial: 0198D54DE0334F083A6621F43B2B678AB8F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
Manifest number: 0EA8
Signing time: Sat 23 Aug 2025 05:01:47 +0000
Manifest this update: Sat 23 Aug 2025 05:01:47 +0000
Manifest next update: Sun 24 Aug 2025 05:01:47 +0000
Files and hashes: 1: XRYyvh6J7DkVdKbz1yypWyD6-m0.roa (hash: 6+dNcwPteiKzyDYvKh6xy6mmMEyhqVqNL5Sm9+oU6rA=)
2: pPAKrld-dFH4jqYEv2ozc0zQMAk.crl (hash: JYsz9R22Md0XdXnrzNd57JdE0nak/IKC6Jt6fJKjz/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e0:33:4f:08:3a:66:21:f4:3b:2b:67:8a:b8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f00aae577e7451f88ea604bf6a33734cd03009
Validity
Not Before: Aug 23 05:01:47 2025 GMT
Not After : Aug 24 05:01:47 2025 GMT
Subject: CN=23fdc35ee325cb797e3c8d5f89fee15c8aa6e932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:95:30:84:14:2f:05:05:90:79:4a:4d:fb:
8e:5a:ac:c2:38:43:b8:86:ac:a5:36:59:77:0c:e7:
3c:33:cd:0a:3c:9c:b5:ec:b8:2a:e2:b8:5c:a5:d2:
7d:c7:f0:39:b0:60:b1:ab:e7:f4:c1:d9:8c:db:1b:
f3:e4:8f:fe:7e:ee:55:4a:45:77:10:a5:ae:c4:9e:
1c:cf:72:5c:4e:70:29:5a:7a:0e:27:e1:d9:4e:5e:
40:5b:c3:3b:a4:2f:09:e4:39:98:6f:60:af:4d:b0:
01:a8:51:23:73:c9:20:9d:66:4b:f6:59:81:44:47:
ad:08:cd:c0:d8:87:63:70:70:00:eb:9b:a3:14:23:
e0:76:86:dc:f2:8d:ad:18:8f:4d:6d:cb:58:69:9e:
0c:2d:e2:bc:b5:88:49:fd:bb:6a:40:fe:16:0f:80:
70:d5:95:47:c6:e0:10:63:11:1b:67:08:e6:89:63:
af:a3:56:b1:07:00:3b:4e:55:4d:fc:ff:96:a0:10:
ed:38:ae:53:ca:ee:32:5a:3d:59:d9:59:a8:b8:65:
41:39:93:b3:6f:cf:3b:8e:22:49:ad:c2:e8:50:46:
f6:cf:fa:62:44:e8:99:08:f9:49:8d:ff:c7:6b:f4:
75:2f:53:c9:68:d7:42:28:20:23:78:b8:70:87:e8:
41:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:C3:5E:E3:25:CB:79:7E:3C:8D:5F:89:FE:E1:5C:8A:A6:E9:32
X509v3 Authority Key Identifier:
keyid:A4:F0:0A:AE:57:7E:74:51:F8:8E:A6:04:BF:6A:33:73:4C:D0:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPAKrld-dFH4jqYEv2ozc0zQMAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/58a94a-9e28-47a5-9fd6-9c91b1c5158a/1/pPAKrld-dFH4jqYEv2ozc0zQMAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b0:ac:83:a3:00:bc:5d:ae:f8:d8:6c:75:de:5e:1c:41:a2:
e8:9b:b5:1c:55:f1:8a:c3:3a:5f:73:10:1f:7a:c4:82:8f:eb:
de:11:9b:44:8a:de:fc:3e:61:f1:a6:a0:66:3a:46:f7:c6:39:
19:7b:ad:fc:5d:a5:4b:c3:6d:e8:62:1a:bc:07:c2:88:4b:a0:
1c:7b:e4:d7:38:d9:14:0f:89:94:8b:cf:3a:3c:55:5d:d3:b0:
2b:43:c4:70:97:f8:91:4b:21:ee:73:e6:5a:eb:0e:ff:7b:af:
97:e2:fb:96:47:5d:41:2d:3c:82:d2:3d:51:6b:d0:08:e7:ca:
ec:b8:be:a7:4c:48:6d:47:b4:64:76:27:8e:74:f5:4a:2a:89:
af:5c:1c:85:80:f6:54:2c:aa:fb:bc:63:b8:9f:ba:65:45:67:
8a:8c:d2:8c:08:c3:3d:a4:45:c3:b5:2c:12:4d:03:d4:b8:f5:
fb:3e:df:c9:93:1f:a0:b4:b8:76:f9:b2:7d:85:5d:0e:ae:ba:
38:c7:1e:db:c5:ba:73:c4:85:23:d4:48:06:ac:55:35:83:19:
9e:29:01:bf:ae:7d:a4:8b:be:81:72:a8:70:70:17:c9:2e:3c:
7d:f0:54:6c:f7:49:6d:ce:6d:84:65:3c:55:d1:22:d5:9c:cc:
bb:87:29:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:39 2025 by rpki-client