Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: Wlr0oq8UsDXvtCsfYoZktfQu3d97KEFohdVoLa9Now8=
Subject key identifier: 62:84:D9:B8:D2:D5:85:52:99:D9:09:91:29:FE:6D:76:0E:35:D2:A7
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 0198D4A8283E55C8090D4A6440C1C43384B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 07DC
Signing time: Sat 23 Aug 2025 02:00:46 +0000
Manifest this update: Sat 23 Aug 2025 02:00:46 +0000
Manifest next update: Sun 24 Aug 2025 02:00:46 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: eWZNz7OG5L1rW70RaW1Q/o9jDyJG8cyDCDaGVKvAAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:28:3e:55:c8:09:0d:4a:64:40:c1:c4:33:84:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Aug 23 02:00:46 2025 GMT
Not After : Aug 24 02:00:46 2025 GMT
Subject: CN=6284d9b8d2d5855299d9099129fe6d760e35d2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6b:9c:72:d9:ca:4d:0b:96:51:31:d6:04:4d:
00:09:3b:75:22:34:89:d7:8e:5d:a4:ff:33:04:40:
22:df:44:39:b7:c2:90:e3:d2:3e:86:1c:17:9e:ec:
de:3d:64:bd:ef:5c:90:ec:69:44:ca:55:01:70:06:
ca:c3:7e:12:96:da:b6:ed:ef:a0:ae:9b:db:0b:37:
50:89:96:37:bf:a1:50:88:32:77:4c:8e:a9:ec:98:
e4:31:74:42:96:84:e4:f9:9a:78:5c:ad:e4:96:a3:
d6:4f:79:6b:43:e7:bf:98:47:fd:14:93:33:4a:b5:
82:84:8a:10:e2:24:1d:95:55:db:c4:ed:a1:60:dd:
d0:3a:33:0a:8d:1a:a4:ed:02:8d:54:b0:6f:eb:92:
05:8f:60:56:e2:66:35:4f:79:24:40:39:b1:58:fd:
ba:f2:ea:a3:27:7b:3c:64:46:17:0e:aa:be:68:ee:
24:af:e3:2f:44:a7:c4:1e:c4:4f:f3:d8:b1:d5:f7:
07:ea:39:c1:24:d5:df:6b:5b:8e:8e:b9:9f:1c:eb:
4d:ce:27:ae:8f:58:22:8f:25:63:3d:01:63:97:6b:
8c:88:8a:3f:e9:d1:f3:93:f0:5e:ee:95:27:4d:24:
25:23:a0:ef:00:63:bf:df:f5:b6:f2:d5:8e:b7:54:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:84:D9:B8:D2:D5:85:52:99:D9:09:91:29:FE:6D:76:0E:35:D2:A7
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6c:eb:96:15:0d:fd:7e:18:7e:16:e1:61:31:31:80:3f:c8:
02:03:9c:52:11:04:2b:a4:21:80:01:be:9b:32:78:df:35:19:
52:7e:93:b0:6c:62:e7:82:18:fa:0c:2f:65:fc:42:1a:6b:ad:
49:cf:15:8e:b5:fa:ce:d2:97:34:54:c9:35:b2:6e:ec:78:e5:
91:98:7a:6f:95:2c:20:9f:3f:b4:01:c6:03:71:11:41:fb:ad:
48:2f:2c:be:3f:dc:dd:df:f2:ca:91:b3:74:6a:b0:0a:ea:df:
54:2c:88:3b:6d:53:a4:d1:c0:84:e0:90:c8:8d:6b:23:1f:a4:
d2:e0:54:d8:ee:63:8b:64:92:82:05:1b:d2:f8:77:14:7c:49:
ce:e4:b4:6e:27:84:4a:4e:ae:6b:4c:14:59:83:51:15:a6:17:
2f:81:e5:31:c1:c0:15:9e:91:58:2a:85:84:d4:fd:4d:ef:9d:
8f:d6:b4:82:2f:e2:1e:07:75:f0:d1:6b:89:dc:2b:94:32:a8:
f4:5e:88:f3:a2:8d:ab:ff:74:ea:3b:01:74:79:12:82:c7:ab:
d5:b3:cf:7c:c5:5a:ab:2c:93:8e:67:34:20:ac:b6:c0:42:59:
b5:90:0e:75:15:9f:50:19:73:51:1a:23:39:99:54:f4:96:3a:
9c:31:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:21 2025 by rpki-client