Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File: PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier: wCPNSM7aKMUO/Nc9gDGtrU168iupEqK+p7+cEdQsKY0=
Subject key identifier: AF:A3:6B:6A:AD:10:B7:6B:A4:76:1A:F5:F3:19:45:D8:76:13:1D:AF
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 0198D583F0A11473A144B2A370BCD030A2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number: 1577
Signing time: Sat 23 Aug 2025 06:00:50 +0000
Manifest this update: Sat 23 Aug 2025 06:00:50 +0000
Manifest next update: Sun 24 Aug 2025 06:00:50 +0000
Files and hashes: 1: 09rZaDf9P6R4diZdTpqbdJFmS5g.roa (hash: nJaLySku8ZYvCwVFCoV24PH4wOMxHH06lLCXG71Fdv0=)
2: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
3: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
4: C4Wnra33s7vzTKpZqkw-dbYY55M.roa (hash: hVOornvwVn2Bg/Fh05dDWBnBXCHA01Bg7itlOVetmo0=)
5: OSXtgZFTRCqapZbj1Rss-9P6qbI.roa (hash: AUmjKUojOqL9JzPQrWExZ3cDw/gVJywbQJ3W19HFEWU=)
6: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: EZX7min5HDgatWGbduaENoKdqVJkabNCY/ql6FSjNNk=)
7: _9T_S-kr42TO8YpZQ1p1cNkCs8k.roa (hash: DCwl+cJRNegCixrl6T1943uL08w3GonOBX/1cFtnPHo=)
8: pV07vwevm-8BJLnT3hJuAHpGkJ4.roa (hash: uUXRNFSfG2j7vXcwLg3l6DuZ/886vt2liizx+IzMA7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f0:a1:14:73:a1:44:b2:a3:70:bc:d0:30:a2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Aug 23 06:00:50 2025 GMT
Not After : Aug 24 06:00:50 2025 GMT
Subject: CN=afa36b6aad10b76ba4761af5f31945d876131daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:b7:7e:b2:02:e6:04:f4:55:a3:9c:4b:80:
3d:97:8c:ac:b6:3c:d9:00:22:f1:d0:b3:6d:13:dc:
89:1d:12:01:74:8c:09:2f:8c:5c:12:4f:8c:26:c8:
e5:4a:74:f2:ce:c0:6f:1b:c9:70:28:d9:17:0b:9d:
10:ab:9d:f3:7c:f5:eb:13:0c:b9:f0:64:46:05:07:
e7:5c:11:15:80:cf:ae:5b:1f:9c:f6:a4:18:8d:7f:
ec:5c:df:b8:91:29:1f:3a:f1:a0:79:33:84:5b:bb:
8f:9e:66:f9:cb:73:de:88:d8:85:34:4d:fd:a3:19:
30:d1:84:05:60:96:8b:5a:6f:ac:36:19:54:79:5a:
40:41:b1:64:90:fc:2c:67:1b:53:90:f5:d5:ea:55:
6a:1e:d5:29:02:a5:a4:d9:0e:fd:5f:bd:66:e7:35:
dd:a7:07:ee:9d:bd:17:7f:66:16:2c:b1:77:13:e8:
b5:d7:ef:67:eb:7e:e9:a6:f9:f3:34:3a:9a:0f:00:
59:67:02:da:7c:f3:5e:3d:c4:09:3a:99:a0:3d:58:
3b:c6:ed:13:f3:f9:13:07:50:b4:b8:3a:9a:05:89:
46:8e:99:38:8f:12:80:59:87:a5:4b:2d:8b:bc:10:
65:36:fb:af:8a:27:eb:36:d3:91:b0:00:79:6a:c4:
f4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A3:6B:6A:AD:10:B7:6B:A4:76:1A:F5:F3:19:45:D8:76:13:1D:AF
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:d2:88:36:13:7a:d8:f5:5b:73:9c:bf:40:d9:f1:9d:3b:
d4:48:24:3d:e0:9c:dd:f9:04:bf:68:41:af:58:ab:55:56:1e:
c5:a9:d1:61:37:65:c6:4d:4c:5b:a2:ca:ad:88:4c:fd:78:8f:
71:5b:9a:bd:79:9f:74:30:fe:cc:60:74:77:2f:84:82:d1:ae:
c7:b8:ae:ef:7e:78:1a:ce:47:79:7f:e2:7e:ad:18:02:96:da:
41:ae:ff:17:80:1a:53:61:c6:77:d2:67:55:6d:a4:22:05:6a:
b2:64:4b:a6:aa:85:69:b7:23:a1:85:a4:bd:ef:9f:c1:17:24:
d0:cf:d0:9f:88:9a:e0:a0:89:12:00:ec:7f:f1:15:0b:46:b8:
52:79:33:09:02:18:01:cd:b5:bf:4f:6e:2b:5e:87:c2:4c:f3:
13:0b:14:58:d1:07:f4:aa:30:d2:e9:23:3e:cf:d7:ab:cc:ec:
36:40:d3:77:e4:cb:da:4d:a1:77:55:9a:3a:55:96:79:49:f5:
50:6b:2d:4d:1c:67:90:1f:f6:67:f4:46:d5:f5:f3:ca:7f:e6:
c8:90:2f:9e:5e:be:bc:5e:73:43:0d:e9:b2:11:4c:b3:b0:c5:
76:c7:4b:bc:ff:c8:8a:5c:57:b7:59:f0:b3:24:74:76:bf:39:
cd:83:90:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:23 2025 by rpki-client