Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: ktUkGiifA9lF7KXb7M8dO9ufj5tTLGn69CiXYSMzY9Y=
Subject key identifier: F5:C3:EA:65:36:6B:62:15:D1:A9:D1:37:0E:D2:89:37:94:01:71:AB
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 0198D4739041CC537ACB791DB8DBC4EB4ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 01:03:19 +0000
Manifest this update: Sat 23 Aug 2025 01:03:19 +0000
Manifest next update: Sun 24 Aug 2025 01:03:19 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: LyuqhmsFjEEE9bFTTLSKUA41oo7LHI/HabtBY5LjElE=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:90:41:cc:53:7a:cb:79:1d:b8:db:c4:eb:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Aug 23 01:03:19 2025 GMT
Not After : Aug 24 01:03:19 2025 GMT
Subject: CN=f5c3ea65366b6215d1a9d1370ed28937940171ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:0a:fd:98:48:d1:24:d3:8d:2d:28:0d:3a:
f1:13:ac:30:33:bf:12:9e:1b:2a:a2:77:80:06:59:
fa:60:9a:b8:73:3a:3a:b5:44:42:5f:30:12:04:42:
03:7a:2f:cf:1c:69:57:c2:e3:1c:f1:2d:ec:7d:68:
5f:4b:4b:aa:20:10:0b:94:32:ac:6c:76:13:16:5b:
56:df:5f:61:c7:ad:d7:c5:d5:25:c1:21:ed:31:59:
d3:d2:f4:73:71:45:a1:74:8e:be:de:63:64:fa:6b:
ab:d7:d7:2c:c1:55:7d:92:2d:55:bd:bc:29:b4:f9:
e8:f8:bf:2e:91:b8:54:4a:52:bb:60:0b:ce:71:04:
99:86:fa:af:bc:43:28:aa:9c:ab:d5:62:0f:35:1d:
75:30:54:0e:e6:47:f5:fb:2e:52:7c:e1:35:d2:e4:
dd:69:49:d5:31:10:79:bc:74:1a:7f:09:e5:dd:ca:
59:0a:68:23:4e:ce:33:1a:f0:81:ba:93:d7:3c:27:
cc:0d:92:b2:25:82:be:3f:09:4c:e1:41:39:52:74:
bc:96:b9:43:94:ca:73:de:36:d8:99:35:b8:f7:b0:
b8:2a:c8:25:5a:ce:0e:40:45:57:8f:32:6f:90:70:
ad:59:d5:c4:2c:7d:a6:3d:2e:72:69:ac:f0:b4:32:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:EA:65:36:6B:62:15:D1:A9:D1:37:0E:D2:89:37:94:01:71:AB
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:64:62:36:e4:63:9c:db:0d:1d:cf:f2:14:7b:33:8e:6a:0b:
14:20:6e:bd:89:2d:b1:ec:84:a7:81:99:2e:ed:f3:f6:0f:3a:
8e:48:a7:7e:3c:70:4c:75:33:0e:a7:45:aa:43:cc:cc:4e:0a:
8e:8e:40:76:b8:7a:8a:02:f7:e4:3d:ff:b5:56:c8:89:ce:c1:
b5:e1:07:2e:8b:1d:e6:62:79:83:d3:e6:e5:ee:0c:97:f7:d9:
cc:fb:33:65:bd:eb:78:61:ff:22:36:b5:4e:fb:81:c5:5c:2d:
4c:6a:8f:e6:fc:54:99:90:37:a2:16:2c:d8:02:b8:1e:7a:83:
ec:67:3b:8b:0b:d0:9b:62:d8:64:d1:83:94:0c:da:ae:ae:10:
49:92:df:24:49:56:de:ff:96:db:06:1f:bb:6c:fb:4b:3f:77:
71:ab:82:9a:8f:59:be:7f:28:cd:3c:74:98:ae:67:76:fa:9b:
ec:67:f9:64:20:a9:b3:b3:76:bb:51:98:2e:22:33:93:f6:2c:
da:19:72:cb:fb:4d:e9:6b:9b:1f:57:96:b9:07:49:da:1c:1b:
9e:98:4d:33:7d:fd:48:59:38:e5:ac:38:75:f9:d2:58:a1:64:
00:f3:4f:45:d7:99:b6:79:28:d5:ed:11:1a:db:ed:1d:47:5d:
a7:a8:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:04:14 2025 by rpki-client