Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
File: PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft (raw, json)
Hash identifier: a6hzAZ0JZTFdP/C3Iks429Or6l9FlKdtt8aSIs86gZg=
Subject key identifier: 1A:D5:4B:6C:63:E8:56:D0:99:1A:06:0E:DB:E9:95:2A:9A:B0:BA:58
Authority key identifier: 3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
Certificate issuer: /CN=3c1415421685ace3682f161d310d92726cdfb097
Certificate serial: 0198D660859F3C96A8C3939FBDFFA9F43E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl (hash: iKMAInAx5DKMDPz5F8koyJpTSdBy0rxLYgRCtqYwftk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:85:9f:3c:96:a8:c3:93:9f:bd:ff:a9:f4:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1415421685ace3682f161d310d92726cdfb097
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=1ad54b6c63e856d0991a060edbe9952a9ab0ba58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:7e:a3:20:fc:f4:4a:65:1e:d0:02:1b:fb:
20:1d:5a:46:73:7b:91:1e:11:2d:06:e4:b6:f2:08:
26:b7:61:a4:0b:fe:30:0d:52:bc:5c:b4:e1:61:ae:
74:d1:96:1f:39:ca:b3:bf:ad:be:46:e8:85:b4:98:
f4:3e:87:ec:88:60:a0:3f:e6:a3:fe:05:74:26:6c:
c8:32:74:e5:c7:d8:5a:7e:df:b7:7a:d0:a7:63:80:
67:56:a3:5f:2b:c0:d9:63:77:3f:99:4d:52:85:40:
05:39:07:0a:57:d7:93:e4:08:9c:24:62:79:44:1f:
e1:43:87:72:06:e7:81:19:6b:1d:06:76:39:ed:0b:
4f:84:3d:21:ab:b4:bd:13:77:c2:65:05:ff:ff:40:
36:5a:52:f7:34:8a:ff:4a:23:12:32:8c:ec:26:d6:
89:be:88:f1:57:2d:3a:11:e9:2c:52:f5:8b:74:52:
f9:64:48:5c:5c:3f:0f:24:c2:22:b3:e1:68:43:77:
96:26:59:19:f0:6b:fe:37:e3:e8:4e:f5:b9:25:8e:
ab:78:8d:40:03:87:eb:ef:c6:8b:e6:64:4d:73:38:
0c:d9:28:ad:ce:01:3f:d2:62:93:22:cd:f2:6e:8a:
02:cb:7b:04:b5:11:76:40:09:11:ae:01:8f:bc:89:
c3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D5:4B:6C:63:E8:56:D0:99:1A:06:0E:DB:E9:95:2A:9A:B0:BA:58
X509v3 Authority Key Identifier:
keyid:3C:14:15:42:16:85:AC:E3:68:2F:16:1D:31:0D:92:72:6C:DF:B0:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBQVQhaFrONoLxYdMQ2ScmzfsJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b85cdd-ba4a-458e-a7a8-1e122838a111/1/PBQVQhaFrONoLxYdMQ2ScmzfsJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e4:be:28:da:7f:19:1e:88:ab:a8:ec:15:5e:a1:f3:45:03:
df:b7:38:5f:a6:22:21:7e:11:ba:df:f9:99:12:59:d8:16:22:
22:5d:3a:25:65:9e:67:12:6d:39:fd:e4:a7:ee:4d:10:92:62:
b4:14:be:7e:f5:c4:86:1b:14:ef:66:ea:ab:e4:e6:40:9b:8d:
8e:47:90:e9:0b:4a:fd:e9:4e:70:ed:43:88:d0:4a:dc:45:45:
24:ae:81:28:05:a2:0e:2c:9f:fd:4f:8f:c6:47:ee:8a:b2:a0:
66:51:8e:c5:19:24:a0:46:2b:55:4f:af:be:d0:b9:9f:eb:e2:
c6:7a:f6:b9:64:5e:11:f1:b3:cc:56:37:79:6b:aa:e9:10:e8:
a0:21:7b:51:ff:16:d3:27:b0:6a:a5:40:66:b4:a7:ad:48:70:
64:4b:5d:36:a4:a1:87:f0:eb:64:2e:49:87:d6:51:70:a6:29:
6a:c0:94:60:e2:6d:f8:ab:45:09:35:32:4d:ec:9b:96:22:0b:
59:b9:54:3a:43:c5:5f:cd:8e:08:f6:55:be:0e:50:3e:5f:65:
e8:69:7d:84:18:2b:44:3d:9f:cd:fa:ba:a9:0d:e1:74:2a:0a:
6a:e9:42:80:7e:db:36:c1:c0:7d:d8:eb:63:4f:68:b0:fe:5c:
87:ec:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:47 2025 by rpki-client