Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
File: PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft (raw, json)
Hash identifier: pA743/5Ly5y93BfrqFX1jAncBsrn2n2gX+wzEbDYCyo=
Subject key identifier: C0:DB:84:06:00:81:7A:44:49:A8:FE:30:A5:5E:EB:72:D0:40:D6:71
Authority key identifier: 3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
Certificate issuer: /CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Certificate serial: 0198D84FF65F131315C3A4573953F92C0697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
Manifest number: DA
Signing time: Sat 23 Aug 2025 19:02:55 +0000
Manifest this update: Sat 23 Aug 2025 19:02:55 +0000
Manifest next update: Sun 24 Aug 2025 19:02:55 +0000
Files and hashes: 1: 1-AcyZzR_rYiM2ehdDTTg0kr4UTw.roa (hash: qHmoXJmRx4dkuxN3uy5t1kjSUTwhuDfIP867Nh4f5Ts=)
2: LbGHBzwRAfceRmxwP2ccsuOGwGU.roa (hash: ZwRIC8Resn0brXABJWxiiw1dDspM+fWK1hVb1pb6YYQ=)
3: PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl (hash: Ehm+FVMy+zPHwwjDNX+VgwgWlGPnKHYy4Fq/+fup5GM=)
4: VjUF6mkOxxkGBT69SzLniaN5UYw.roa (hash: JTMUgsA+g5cqMZGbs8rgNYEsQMEwv0Fop5cCQWjZZZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:f6:5f:13:13:15:c3:a4:57:39:53:f9:2c:06:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c22643ba6a0eaef57329bf5bdc90b31c386f8a7
Validity
Not Before: Aug 23 19:02:55 2025 GMT
Not After : Aug 24 19:02:55 2025 GMT
Subject: CN=c0db840600817a4449a8fe30a55eeb72d040d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:e0:a7:d2:a2:4d:87:2a:fa:39:57:01:f3:
2c:b9:a3:3a:bb:2f:48:f4:5f:0e:7c:f0:16:b6:7f:
29:b8:0b:d5:6d:21:f3:aa:0c:38:99:9e:42:32:29:
64:47:ef:a8:0a:23:61:0b:0d:03:93:76:b2:96:f3:
48:71:be:f2:88:4a:2b:d7:6c:11:ce:a7:70:9e:e8:
ed:25:a1:9a:18:71:8e:fc:b7:2c:6c:ed:9e:ef:44:
41:15:b2:a7:4c:a5:cd:e2:a0:e3:79:97:4a:7a:bf:
d8:2a:4d:6e:b8:17:f0:2c:c6:d7:98:a7:36:c7:12:
a4:98:b8:ee:eb:93:83:ed:f6:ba:8c:e8:50:37:17:
93:db:c0:b9:e3:af:cf:b9:33:c2:78:03:4e:89:93:
fd:72:52:a3:c2:09:58:74:09:2c:b0:90:eb:83:8f:
67:6e:c8:f7:37:a8:04:af:6f:f2:7d:52:b6:1f:9e:
10:eb:a7:b4:2e:a1:4c:55:fc:3e:cc:51:b9:54:c5:
fd:53:0f:49:a1:75:ad:f4:66:cb:cf:1c:2b:2f:bb:
1e:75:68:86:91:5e:dc:d0:be:bc:09:70:67:a1:ef:
7f:0d:95:68:88:65:20:ce:f3:fe:59:b9:68:57:f0:
0f:e4:35:44:8c:ec:bc:d9:7e:06:50:72:1b:29:fd:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:84:06:00:81:7A:44:49:A8:FE:30:A5:5E:EB:72:D0:40:D6:71
X509v3 Authority Key Identifier:
keyid:3C:22:64:3B:A6:A0:EA:EF:57:32:9B:F5:BD:C9:0B:31:C3:86:F8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCJkO6ag6u9XMpv1vckLMcOG-Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7aed99-a47d-4ec7-b4c5-fa1486ea798c/1/PCJkO6ag6u9XMpv1vckLMcOG-Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7a:ac:9c:eb:ba:d7:a6:69:6f:4d:6f:98:25:c0:d9:a6:ef:
16:7d:d6:53:3f:e9:38:ce:40:bb:41:e6:34:9f:80:12:e6:28:
1d:ed:02:42:fc:65:94:15:c6:26:e3:2e:a0:11:d6:43:ae:43:
e6:1e:2c:6c:47:91:ad:9b:75:5b:a3:fe:ab:e7:31:22:15:c8:
9f:54:a4:81:4a:8f:87:b5:98:f4:1a:4d:e2:14:74:c7:53:c0:
5c:5a:14:5d:b2:20:11:08:19:06:25:13:c1:aa:8f:e1:7a:f1:
0e:99:d4:0b:b7:48:5e:66:d0:02:fb:a6:40:b8:35:bf:bd:02:
6d:fa:1c:72:f4:01:f8:7c:6f:1b:d2:33:a1:c8:7e:34:28:08:
ac:5e:1e:b3:c1:39:00:17:45:05:7e:ba:07:96:84:15:41:6c:
05:76:47:e7:72:d1:8a:3b:08:04:dd:85:e3:04:c9:c4:ed:37:
58:f1:f6:cb:33:8b:25:23:be:81:f2:e3:91:0a:0f:43:f9:f3:
43:0d:05:87:e4:92:15:08:f0:b3:b8:4d:f7:ca:83:42:87:ff:
89:e0:b4:82:82:ab:dd:0a:79:e5:90:08:f7:39:a9:f3:8f:f5:
a5:c0:42:9d:b1:27:83:d4:57:d3:b2:d7:59:e3:e3:b8:a8:27:
e2:4a:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:48:03 2025 by rpki-client