Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
File: PqGMkbK-KKB0uaOHSpC0RgE84b4.mft (raw, json)
Hash identifier: 4dchpe5FMKqEujUt/fyukIth29SOq3Q+1ocavhrq2e0=
Subject key identifier: 3B:56:A0:4C:60:C8:2F:92:16:E9:68:49:93:C4:16:31:BD:7D:76:CC
Authority key identifier: 3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
Certificate issuer: /CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Certificate serial: 0198D5F1C1D3017B35CB45A92B3622636578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
Manifest number: 03DF
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: PqGMkbK-KKB0uaOHSpC0RgE84b4.crl (hash: e/mUlSBlLlK0fHESa9FTAofYmZrxoRtW/ZOZpQgJ6yE=)
2: w78-PkWjkmBWzXnYfu0GZ4j6LVI.roa (hash: BzBqUt4k6YCYPQ6Nn7PdPu+ICTIm/5kh0/Z+KfmEAhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c1:d3:01:7b:35:cb:45:a9:2b:36:22:63:65:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea18c91b2be28a074b9a3874a90b446013ce1be
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=3b56a04c60c82f9216e9684993c41631bd7d76cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:34:11:da:3b:7a:7e:b3:98:9b:c4:0b:34:1f:
d7:78:9d:33:44:39:cb:a3:1c:14:f2:2c:71:9e:0a:
cb:b0:b6:3b:95:52:c0:a2:4d:b0:a6:c6:d8:76:aa:
90:73:58:94:71:87:66:bd:79:fc:d4:a2:5e:ea:47:
2d:01:bc:b6:98:09:84:ef:58:7a:9a:ad:e6:7d:b0:
be:53:ba:6e:f5:cb:5c:23:4c:74:b8:15:1b:d2:39:
55:54:fa:1e:59:d0:34:06:d4:59:4a:0f:66:1a:26:
93:18:0e:3b:b4:eb:5e:9d:00:ba:63:32:1a:1c:77:
f0:1f:ae:16:ed:1c:c5:e1:9f:8e:96:e9:9d:7f:31:
5b:bc:23:8b:74:f9:fd:29:3a:c2:b9:62:b0:97:62:
1d:06:24:2b:ea:c5:9f:0e:be:31:94:9b:06:2f:27:
b8:c4:2f:bd:c3:6a:11:95:47:ca:54:23:cf:64:79:
8f:e7:db:9f:5d:9d:d1:14:48:ca:62:a6:e4:2f:b4:
bb:df:9b:e2:16:8b:5a:5f:fa:ae:cc:fb:a6:94:63:
97:7e:a1:c0:cf:88:8a:10:8e:27:1b:99:4e:6d:aa:
b5:1c:f9:55:a2:a7:73:85:1d:47:99:b0:0c:ee:d7:
e9:3f:9c:aa:db:a4:99:e0:74:e1:2f:dc:38:7d:8f:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:56:A0:4C:60:C8:2F:92:16:E9:68:49:93:C4:16:31:BD:7D:76:CC
X509v3 Authority Key Identifier:
keyid:3E:A1:8C:91:B2:BE:28:A0:74:B9:A3:87:4A:90:B4:46:01:3C:E1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqGMkbK-KKB0uaOHSpC0RgE84b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/ca3649-c29f-4e90-8822-bc65ef6b27b6/1/PqGMkbK-KKB0uaOHSpC0RgE84b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:4f:ea:77:20:f0:d6:d0:d4:26:8c:a1:db:a3:22:5f:5b:93:
1c:a1:86:53:40:34:a7:7b:c3:eb:4a:ca:75:a9:30:70:c6:9a:
6c:8c:ed:44:f9:65:32:12:b6:61:26:42:37:d6:be:75:8e:b3:
a9:2a:56:00:cd:57:42:cf:c8:86:23:14:4d:ad:16:f0:0e:c3:
0f:81:26:29:e8:11:52:f3:f0:67:aa:95:60:68:9d:06:26:53:
ef:9a:1f:bb:a2:85:d0:69:13:05:e8:37:39:64:81:63:66:38:
b3:67:8e:63:ed:8e:c8:7c:5e:3a:7c:09:2d:b8:d0:b2:c2:9a:
75:7c:e6:db:2e:17:82:33:79:46:04:88:69:ba:0a:97:bf:38:
ec:72:9b:20:72:87:d4:6e:78:03:61:ac:de:2b:ae:90:e5:05:
a1:7a:85:53:b0:04:37:01:7d:d6:51:09:c0:1e:ae:40:b5:bc:
4b:7e:97:30:24:5f:05:d5:58:70:c1:c5:6d:d9:fa:75:75:d3:
40:cc:24:b9:10:b7:2a:d5:e8:94:44:24:aa:e9:2f:2b:ba:4b:
71:16:3f:c3:64:a1:77:16:95:f1:f7:18:f9:f9:1c:ac:42:33:
fd:38:d2:bb:33:a6:04:17:dc:a2:4a:2d:90:3e:5c:00:55:10:
07:3d:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:49 2025 by rpki-client