Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
File: PetYF7vn5aHF-xMFUbhKtIgBb5I.mft (raw, json)
Hash identifier: DB+zQrV8QM1pKSxMDY1bymdAyh8nW2WaRO+KfdoNwiw=
Subject key identifier: 1E:C3:A3:40:05:3C:6C:63:3A:2F:52:80:D7:80:FE:CB:16:61:31:70
Authority key identifier: 3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
Certificate issuer: /CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Certificate serial: 0198D6607D290600F915BFC31A3C8FEBFBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
Manifest number: 02AB
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: KWPAsF0vFOD6kPsFU3LMV-L0lSI.roa (hash: VQvFUbsDDfVrBdoP9kicGC0pG5uJaNDDod3tQ4qnm70=)
2: PetYF7vn5aHF-xMFUbhKtIgBb5I.crl (hash: FrXjvaZhRm7cNJPW4SHyvIxWEQYkLr0P+jAJr40XCzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7d:29:06:00:f9:15:bf:c3:1a:3c:8f:eb:fb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb5817bbe7e5a1c5fb130551b84ab488016f92
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=1ec3a340053c6c633a2f5280d780fecb16613170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:96:b3:89:60:f6:de:c1:e1:48:25:25:74:53:
43:5a:c8:d9:06:90:93:2f:3f:40:27:c0:4f:66:4d:
cb:37:df:4a:fc:2c:dd:59:be:cf:2f:38:52:68:19:
ff:2c:9e:6d:67:62:fa:a7:2b:c7:ff:09:c2:2a:fa:
63:cb:82:a4:95:71:69:46:d0:27:80:9b:02:2b:74:
5e:be:b3:75:d7:b9:fe:36:d3:5a:b0:45:fe:33:a0:
fc:39:77:a5:01:f6:a2:8e:25:a9:b6:1d:a7:f8:4f:
53:3b:61:64:3a:4e:8c:66:84:d5:62:6c:d1:40:09:
66:9e:82:e9:21:b4:5e:2c:5a:e9:ff:ae:cf:29:b3:
2f:37:7b:75:93:ba:1b:02:05:25:e1:73:08:6d:2f:
ec:16:82:cc:7e:f9:83:c9:b4:53:6e:f9:c0:42:a3:
1c:15:d2:f4:6d:54:57:c2:25:ee:04:6d:e9:b4:12:
7b:15:27:83:cb:ad:56:99:76:94:44:f6:20:c6:6b:
0a:57:95:d2:a7:09:d9:74:63:76:33:c7:94:e7:c4:
12:4c:3e:7a:c3:53:33:3d:88:37:b4:96:f8:1d:69:
78:ed:72:fd:98:42:be:5e:50:a1:d0:1e:f5:db:73:
4b:7e:d9:9c:ae:b7:4b:56:2a:2c:a7:02:9b:80:f5:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C3:A3:40:05:3C:6C:63:3A:2F:52:80:D7:80:FE:CB:16:61:31:70
X509v3 Authority Key Identifier:
keyid:3D:EB:58:17:BB:E7:E5:A1:C5:FB:13:05:51:B8:4A:B4:88:01:6F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PetYF7vn5aHF-xMFUbhKtIgBb5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e49a1-73a9-4581-b88c-f10486e60a53/1/PetYF7vn5aHF-xMFUbhKtIgBb5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:88:9d:03:31:4a:d4:8a:8e:2b:4a:28:3e:ef:d1:f0:38:f4:
1e:e6:a9:6e:5a:1b:47:65:1b:39:97:25:86:d0:bf:c0:f0:3c:
5a:98:cd:a9:72:65:21:9c:a1:b0:b8:3d:98:00:8d:79:8c:67:
8c:1f:f7:cd:9a:b2:83:34:32:8d:c7:49:c3:18:9f:c3:99:71:
06:8d:b9:31:62:67:34:04:82:92:f7:48:7e:00:18:0a:38:aa:
85:2c:87:ee:b3:23:d3:50:2d:35:5a:ab:05:31:8d:3c:58:4e:
70:5e:e2:65:92:13:b0:74:2d:88:95:fd:58:49:6e:fb:71:96:
3b:70:1c:0c:f4:19:b1:11:b6:42:08:07:1c:4d:ae:28:dc:21:
7f:e2:93:6f:f8:1b:6e:8f:6e:de:86:eb:5d:aa:f4:19:50:ee:
d8:1e:52:27:82:c1:9c:74:a3:64:ad:bf:5a:eb:7e:50:39:bf:
cc:bb:5e:63:ce:56:1b:c7:9c:ef:50:e7:78:e3:5e:9a:af:98:
4f:2a:29:5b:e1:63:e5:ac:60:1f:20:88:d4:39:13:d0:74:79:
c2:c4:1d:ca:d9:5c:bb:62:9f:02:c1:4c:29:66:94:ec:d2:c8:
d8:06:90:97:28:8c:dc:25:7b:77:4a:27:e2:8d:7f:5d:87:2c:
01:93:f7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:36 2025 by rpki-client