Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
File: pvE9aAzkgFkb-LN93KD66zu-dE4.mft (raw, json)
Hash identifier: heBCRI4vRUrJYfOr8SGZpc7DypeSBqCbW9ZOwgaZ+Yc=
Subject key identifier: 24:B4:8A:F6:29:87:59:94:D9:9A:B4:31:04:69:D7:69:7E:F0:9C:4E
Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Certificate serial: 0198D6CD2A4415D6E05984ABA6F11893E85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 12:00:26 +0000
Manifest this update: Sat 23 Aug 2025 12:00:26 +0000
Manifest next update: Sun 24 Aug 2025 12:00:26 +0000
Files and hashes: 1: W8EH6cHJ1jqNd1-fbWQ4302NcPE.roa (hash: 0aNZYoUKp18HEp9H4MaKrqtXZZf4gT5hLWGwRtSFdxU=)
2: pvE9aAzkgFkb-LN93KD66zu-dE4.crl (hash: +AzR2RjSBDvV/OiTcv37MkNBNkDekVyTKHDYT+dEqsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:2a:44:15:d6:e0:59:84:ab:a6:f1:18:93:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e
Validity
Not Before: Aug 23 12:00:26 2025 GMT
Not After : Aug 24 12:00:26 2025 GMT
Subject: CN=24b48af629875994d99ab4310469d7697ef09c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:29:f5:b9:86:9a:f8:59:f4:a8:27:0f:4a:
8c:73:1f:76:32:c1:42:45:1a:13:9f:a8:5d:0e:56:
95:fa:91:3b:9c:13:1d:df:cb:6e:f1:66:57:ae:74:
83:ba:40:1e:ed:39:70:d0:7a:0b:50:75:f7:b9:f7:
47:b9:77:46:39:92:a7:a9:75:06:77:31:01:cd:2d:
d4:5e:3f:41:3b:be:24:a4:89:93:3d:26:5c:16:7f:
07:f8:ab:c6:f2:ce:a1:96:a4:3e:e2:8d:2b:f3:ff:
5f:80:23:31:f4:8b:ef:b4:b8:f2:1f:6e:31:43:3d:
7f:af:ab:ec:37:ea:b0:42:54:f8:04:cb:12:fd:e3:
9e:20:73:99:ed:59:a7:e1:cf:36:56:b9:c1:d6:e9:
9a:d6:63:69:8e:8c:96:2c:69:de:34:72:44:ad:5e:
70:bc:f8:49:ab:81:f3:ba:04:f5:d2:96:03:43:33:
1f:c9:1b:32:61:ba:e0:e9:cb:64:ca:0c:b1:11:cc:
64:77:74:27:e6:17:33:7e:7e:ee:4c:34:df:0b:07:
b4:c3:69:c5:5e:c8:ce:d8:bb:e0:48:75:fe:9b:cf:
84:10:62:34:09:ee:d6:99:07:be:61:c7:bb:a0:a7:
f5:e0:48:1f:c3:8e:6b:1d:1d:6f:59:04:13:b0:97:
e4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B4:8A:F6:29:87:59:94:D9:9A:B4:31:04:69:D7:69:7E:F0:9C:4E
X509v3 Authority Key Identifier:
keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c9:a9:24:e7:cc:0e:5b:b6:01:7c:c4:0c:38:f2:38:ab:16:
e3:3d:52:31:e0:e9:03:61:ac:24:7b:2f:3f:11:ae:22:9f:d1:
3a:67:7c:bc:57:8b:1e:40:b6:b0:0f:99:6c:01:9e:42:0c:3b:
8b:3b:da:ea:16:a9:4a:ab:37:a3:d4:b9:99:54:ee:35:26:73:
c1:cf:68:1e:05:a4:2e:fe:1e:1b:5c:b2:bf:80:ae:cc:da:57:
cf:e2:07:58:da:0b:dd:ba:11:c3:01:29:92:c0:18:44:86:b2:
c5:98:1c:fa:a5:a3:53:43:23:21:de:fc:f6:cc:7e:54:d7:de:
bc:51:58:54:f0:4a:e8:57:15:2f:12:f2:72:49:01:08:55:4b:
fe:8b:22:e6:57:14:80:a1:e8:37:59:f2:c0:cd:c9:11:08:9c:
3f:f7:d3:ca:86:28:8b:ba:94:d4:4f:67:8a:38:28:b9:00:27:
61:51:79:d0:48:d0:7d:b4:56:12:d0:b3:61:57:0e:76:0f:d4:
31:0e:a3:b8:fc:7d:20:93:51:41:7c:d7:13:a3:07:1a:6d:ca:
3b:84:a1:93:20:e5:b7:d8:7a:4d:94:6e:14:10:ba:fe:3c:e1:
97:01:30:a1:9d:12:14:b1:b1:c0:7c:6b:26:d4:70:52:d3:aa:
f8:61:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:22:53 2025 by rpki-client