Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: NYcGTTiWgMRaV9ceOKPapOF1jzsxIQ5DljKwUOUlq7s=
Subject key identifier: FA:1C:94:43:40:38:9E:45:A9:70:F2:7D:32:01:55:68:F8:BA:0F:4B
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 0198D583C32C3A826B4E6462EAB22611BB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 0528
Signing time: Sat 23 Aug 2025 06:00:38 +0000
Manifest this update: Sat 23 Aug 2025 06:00:38 +0000
Manifest next update: Sun 24 Aug 2025 06:00:38 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: NehpsVIvdBLq5Rm8uQgCtc6UobZKDmHbpPAASfQ7R5g=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c3:2c:3a:82:6b:4e:64:62:ea:b2:26:11:bb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Aug 23 06:00:38 2025 GMT
Not After : Aug 24 06:00:38 2025 GMT
Subject: CN=fa1c944340389e45a970f27d32015568f8ba0f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:0e:23:04:52:f2:b6:1b:b9:06:62:7b:e0:
9c:be:2b:65:e3:b4:15:3a:f4:86:2d:6a:38:ce:00:
5b:84:48:5c:eb:28:71:e8:c6:5a:41:c4:06:e1:a8:
cb:fb:a4:d7:5e:8e:34:e4:b9:7a:63:af:17:96:da:
8f:a6:f3:bb:bb:c8:f9:f8:e7:fe:fd:12:85:dd:cd:
9f:3a:eb:29:61:a6:56:72:dc:f5:02:31:18:f3:22:
84:3b:e0:df:e8:71:c5:24:f3:c0:be:0d:72:21:db:
92:c1:11:28:8e:7d:90:26:eb:11:8e:6a:99:60:3d:
6c:88:39:6d:a3:c8:0b:ed:81:0b:d3:ea:25:ee:e7:
a1:a3:21:21:b4:82:17:8c:cb:5b:e5:8f:0f:cb:51:
7a:f4:61:f2:46:ef:5a:cc:dd:a9:44:b2:25:f5:c8:
0a:3b:51:c4:ab:52:21:61:64:71:62:59:23:b8:7c:
1a:b6:66:b7:e8:18:6c:af:18:c4:c1:a1:40:0a:e5:
cf:58:82:54:9c:77:5d:2b:49:0c:b9:db:bb:87:ef:
55:a7:f6:3a:5b:4c:7e:b1:78:10:61:70:9e:15:fb:
fe:c5:9c:99:a6:7b:8d:a4:2b:54:1e:41:63:49:41:
73:a8:03:fc:5e:a6:1c:4e:72:4d:2a:34:e9:5c:e6:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1C:94:43:40:38:9E:45:A9:70:F2:7D:32:01:55:68:F8:BA:0F:4B
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:d9:b8:19:e9:00:89:6b:64:ca:23:44:5c:89:83:bd:77:
d1:4e:97:de:57:ef:99:bb:c2:08:bf:ae:a3:95:27:91:f5:df:
52:42:98:b6:a7:38:ee:a2:7d:c3:59:1f:b7:39:ef:d5:c8:12:
2f:bb:07:30:53:f9:53:23:02:ef:78:72:24:e7:f8:22:c1:93:
f9:61:07:46:fb:66:ad:fd:8a:df:18:25:df:54:d4:c4:03:6e:
06:f0:23:23:e8:3a:70:e2:78:6c:57:e6:ee:08:d7:d0:f1:67:
35:9b:87:55:62:5a:28:89:f3:0a:5d:47:6b:cb:0f:54:9d:b2:
49:5d:10:98:d5:63:83:c4:15:09:53:aa:7d:27:71:e9:cc:03:
79:de:aa:19:af:0b:5a:70:10:98:e2:ee:30:68:b5:cd:fa:21:
01:9e:93:39:5a:22:34:25:59:90:e2:a0:22:f4:45:d3:8d:f9:
a1:84:95:d1:72:af:ae:a8:b2:65:71:0a:53:53:c1:16:aa:50:
15:50:97:0c:0e:54:e0:af:72:a4:ea:a2:39:71:08:38:3f:47:
b8:80:7a:19:02:fb:95:be:d9:a8:9f:f2:18:de:3a:ba:ab:14:
1b:4a:5a:63:e7:24:b9:9d:18:d7:89:6a:4e:9f:1b:af:65:f7:
e0:55:6d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:57 2025 by rpki-client