Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: WRMYkT+QWWv/OONu/w6ARz2nSnxozhnOjaWYdUeU7A4=
Subject key identifier: 29:75:33:B8:D1:41:C0:9C:6C:06:CD:7D:66:79:12:FB:2B:21:DD:84
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 0197B6D7A94251B7C5D53AAA64E99DA424F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 0748
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: WLXwrqzpRkglKKkEUQAvmqv6R3E4cYr5faGlGfS6Jek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a9:42:51:b7:c5:d5:3a:aa:64:e9:9d:a4:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=297533b8d141c09c6c06cd7d667912fb2b21dd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:5b:da:b0:02:27:b5:8e:63:69:ae:ce:19:
2e:6e:d7:b9:fe:f5:81:3d:99:5e:7f:9e:a2:7b:48:
ff:e1:86:78:d5:5d:13:57:e5:32:8c:b0:29:34:39:
ec:d3:fd:b3:d9:96:cf:34:e1:51:ea:74:d5:c4:a3:
0a:81:86:9a:03:11:ac:a9:cf:fd:b1:37:2a:4d:ea:
ca:93:90:55:48:b3:a7:5c:de:20:61:05:e9:9e:54:
40:d9:e1:b1:d1:d4:dd:a5:e5:0b:2a:eb:72:19:8a:
5e:ec:66:ce:b6:db:f6:09:b5:cc:0c:a4:44:c8:50:
a4:d9:d4:85:6e:5e:d9:00:b7:99:17:ed:30:8d:9a:
eb:5f:8d:7c:63:3b:04:63:3c:1b:8b:8a:e3:9a:bb:
7e:12:d3:a4:30:02:dd:8d:79:2e:59:85:44:f4:f3:
97:5f:c4:21:9c:05:c2:4a:72:71:8e:70:16:84:d0:
fe:cb:31:dc:99:33:62:94:c8:16:1f:c1:83:57:3d:
05:5d:82:49:96:f4:e7:d3:4d:6a:79:2e:ff:ac:a2:
fc:90:f2:23:5f:7e:a1:b6:19:e8:bb:ba:ca:c3:60:
75:0c:f0:9a:c3:a9:78:8f:36:5f:f8:80:b4:5b:33:
b5:1a:5e:4b:76:71:16:7f:f4:b5:6e:81:54:37:fe:
62:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:75:33:B8:D1:41:C0:9C:6C:06:CD:7D:66:79:12:FB:2B:21:DD:84
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e3:cb:9c:85:c3:4a:b3:0f:72:43:ec:de:18:b1:2c:1c:b3:
01:cd:04:2f:68:3f:67:f9:d8:d9:af:c8:00:9c:18:15:f0:f0:
3c:53:39:90:d8:49:f8:bc:a6:90:e2:be:31:6f:27:04:af:e0:
86:a5:a1:03:82:e1:f5:cf:08:3a:c2:07:f4:5a:47:5a:9f:af:
eb:fc:4b:d5:16:88:04:88:99:00:ff:d1:44:9f:c6:9d:07:e6:
21:29:3c:71:f5:cc:a0:98:6d:6b:48:af:27:d3:67:c6:1b:f4:
61:bd:a8:55:55:05:83:17:c1:3c:8b:9c:61:47:60:69:82:a9:
f8:56:5c:a0:86:b5:00:62:f4:3a:23:15:20:97:0c:7d:fd:97:
93:f2:b5:3f:49:a2:00:be:85:84:02:c3:68:dd:0b:6b:cb:f7:
89:e0:d1:df:38:17:2f:a4:38:00:bd:50:b6:1d:ef:ed:6a:eb:
a3:b8:fd:10:28:88:51:57:1f:c5:36:5b:1b:68:b5:97:35:f3:
ca:e5:8e:c1:9c:4c:4e:39:a0:36:64:a7:73:2f:15:04:82:3e:
1e:b6:eb:fc:45:4f:97:7a:70:1d:24:0a:dc:4f:48:b4:c3:31:
1c:ab:d0:e6:08:66:d6:45:d1:d4:92:5c:05:72:15:c7:83:15:
9a:17:dd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:36 2025 by rpki-client