Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
File: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft (raw, json)
Hash identifier: gSS5v7k6rAEQ/UECYO0Q0LOX7piXEH43+v1vWV8gbh4=
Subject key identifier: 2D:BC:F3:EE:9D:F9:D0:49:BF:E4:59:27:B6:19:EB:1D:43:B7:45:D8
Authority key identifier: 3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
Certificate issuer: /CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Certificate serial: 0198D4A7D84E176A110E14E5B3521E324FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 02:00:26 +0000
Manifest this update: Sat 23 Aug 2025 02:00:26 +0000
Manifest next update: Sun 24 Aug 2025 02:00:26 +0000
Files and hashes: 1: PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl (hash: IpSknYSpmCr7D7xTl7SnVsJnI9+Q87JXzHJGL47WD7M=)
2: itPEMbOZFFR8e5L5AvpBnlFEedQ.roa (hash: pIQ9iWRr1eE7BBGNob9EZxPiOkZPJVC3FeL7vrrHIjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:d8:4e:17:6a:11:0e:14:e5:b3:52:1e:32:4f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc410e3f09bea6abc9dd8c6ff4185651b0ab867
Validity
Not Before: Aug 23 02:00:26 2025 GMT
Not After : Aug 24 02:00:26 2025 GMT
Subject: CN=2dbcf3ee9df9d049bfe45927b619eb1d43b745d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:4b:5d:30:dc:40:a8:b2:1e:e0:63:83:b7:
6d:f4:37:f4:19:c3:cb:e9:55:7f:0c:cd:4a:ea:00:
0a:4c:1e:69:69:d5:98:db:af:15:55:92:31:63:01:
fd:6d:b5:22:1c:30:3f:5b:d6:f2:50:69:b9:d9:33:
9b:bb:1f:23:21:9d:2a:6e:bf:44:95:da:9c:a4:3f:
4c:c0:b0:b3:c6:c3:be:bd:d7:94:9b:3a:fe:9f:76:
32:2e:f2:17:44:20:bb:59:4a:14:f4:23:d2:dc:43:
d1:6f:73:c8:de:49:6d:53:58:22:74:a0:bb:c6:8d:
9d:a5:f3:c1:64:0f:83:5d:ed:72:df:a0:99:ad:25:
cb:a5:01:16:01:00:7c:fe:9f:57:24:9d:53:69:b8:
c2:5d:87:38:52:e2:48:f5:e5:2b:c6:3c:ea:0c:19:
01:63:84:92:63:81:73:ea:8a:75:3e:a2:18:56:bf:
0d:1f:07:e2:93:4f:19:bb:3a:c3:ed:42:d3:0a:2e:
aa:2a:32:71:ca:f4:a1:91:93:df:12:7b:18:92:09:
9c:f1:f3:b1:08:f2:4f:93:64:f1:8d:60:10:5c:e3:
b9:99:2c:b4:1a:1e:10:13:05:95:cf:1b:68:9b:2d:
2d:ff:28:d5:19:fd:88:4f:88:f7:c5:59:c9:b3:0f:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BC:F3:EE:9D:F9:D0:49:BF:E4:59:27:B6:19:EB:1D:43:B7:45:D8
X509v3 Authority Key Identifier:
keyid:3D:C4:10:E3:F0:9B:EA:6A:BC:9D:D8:C6:FF:41:85:65:1B:0A:B8:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/042951-54d8-469c-bba1-a6546cd9da94/1/PcQQ4_Cb6mq8ndjG_0GFZRsKuGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:07:8f:aa:9e:23:7d:07:f1:e9:0a:1f:d1:c0:a9:71:cc:b2:
b8:b7:27:aa:21:7f:9e:48:09:2e:53:47:42:42:4d:6d:34:92:
40:f0:d6:15:4e:12:8d:2a:69:42:93:4a:d8:66:6a:b3:79:3a:
9c:1f:a4:1b:f1:3b:c2:c1:a6:eb:f5:f8:f0:93:58:bd:de:fc:
04:9b:ae:81:e5:93:96:ac:a5:bd:56:31:b1:81:19:dd:cf:96:
95:b4:73:8b:de:d4:7f:2a:1c:8c:61:07:26:30:67:e7:e9:95:
7a:bd:c6:5c:c4:9f:f6:eb:60:0e:1f:2b:0b:7c:a3:4a:f1:2d:
e9:24:7c:63:6f:f0:bc:9c:67:d1:1d:07:35:b0:a8:b1:b9:cd:
31:8c:96:6b:e2:1c:e3:cb:6d:62:80:69:78:8f:e6:c0:49:5c:
45:30:48:c4:b1:38:cc:0b:3c:d9:14:de:91:79:0d:49:8d:40:
e4:e9:e7:79:8c:e2:77:16:c0:4a:17:e2:14:c8:14:64:a4:08:
c6:92:bb:91:3d:d2:fe:ff:47:b0:99:4a:34:ff:66:28:f6:1b:
71:da:5a:97:51:cd:00:e3:df:29:4d:ea:2b:e7:74:fb:85:a7:
3d:2c:3a:53:8a:7e:05:d3:48:85:39:6b:e8:f2:c6:95:27:c2:
72:96:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:38 2025 by rpki-client