Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
File: pfanGhgNz4sjDEFPCfe3G66peBw.mft (raw, json)
Hash identifier: cQn/Zif0ab5rcsYUZU8nWJNgz5EW5/kbYw+mDpRCKs8=
Subject key identifier: 02:DC:DD:A4:8C:EB:DD:D7:2A:61:15:5B:4B:72:E8:13:68:1C:ED:12
Authority key identifier: A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
Certificate issuer: /CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Certificate serial: 0198D5BBFA66813341CD2AEF12637F9CFD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
Manifest number: 0315
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: 4ztGIasVEwEbakF0ec-7K0e5IU4.roa (hash: IY2hXYNDBxgugsXRkJWFvDBibE33L3+eqXYnL7k07xY=)
2: pfanGhgNz4sjDEFPCfe3G66peBw.crl (hash: x1HA5TrPl+XKKjRNO1ZZ+pSLmNhaWpot1FwKfOUg35U=)
3: yQmkLUR6MH6h1RvFVHhe4DDu7QY.roa (hash: 7D7oyqrxVnp9P9+upqmUz5U0xALaurO7hGz+98jrtEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fa:66:81:33:41:cd:2a:ef:12:63:7f:9c:fd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5f6a71a180dcf8b230c414f09f7b71baea9781c
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=02dcdda48cebddd72a61155b4b72e813681ced12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:d2:ff:c3:e0:f6:1c:8c:9d:a8:3f:48:0c:
dc:92:03:bf:cb:4c:59:4b:3a:4f:84:6f:85:ec:d1:
07:8d:d5:c8:6e:2a:41:c2:a2:c0:1e:7e:de:59:4e:
f2:6c:85:eb:fb:86:42:75:2a:50:82:4d:4c:ba:b0:
29:6f:fb:b3:61:b0:ca:00:64:db:ec:79:06:a5:01:
ea:e8:da:c2:a1:1d:6c:02:22:c6:1b:31:fc:3f:76:
9b:29:0c:e4:2c:f0:78:b1:38:1c:1e:30:19:b6:ef:
02:a6:24:f4:2a:c2:99:9a:18:99:60:07:8e:30:48:
ba:4f:ff:dd:25:68:90:d0:47:e9:d4:94:5c:68:cf:
2c:cc:91:b8:0f:fa:d7:ae:9e:5b:f1:07:d9:a0:af:
69:8e:5e:48:f4:f7:a5:c6:89:27:8b:48:20:85:52:
98:eb:62:76:b0:2c:1b:4c:7b:3b:cf:7d:7a:25:d2:
68:af:90:83:f7:d4:3e:24:e4:a6:09:6d:6a:0d:8b:
18:4b:e8:21:4e:5f:cd:cd:50:9e:0c:f3:87:25:15:
33:70:a4:e9:d6:65:65:0d:d5:04:19:82:be:3e:2b:
11:f7:e6:5a:19:ca:cf:f2:77:64:be:c5:3e:48:5b:
6d:39:a6:e5:65:65:28:e6:41:a9:76:2b:42:2e:08:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DC:DD:A4:8C:EB:DD:D7:2A:61:15:5B:4B:72:E8:13:68:1C:ED:12
X509v3 Authority Key Identifier:
keyid:A5:F6:A7:1A:18:0D:CF:8B:23:0C:41:4F:09:F7:B7:1B:AE:A9:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pfanGhgNz4sjDEFPCfe3G66peBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b3f912-36d1-4366-ac3c-6660238b03ce/1/pfanGhgNz4sjDEFPCfe3G66peBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8a:99:d0:58:07:ee:f6:65:08:29:af:28:41:bc:44:df:d9:
36:de:55:3a:12:56:fa:38:82:01:6c:9e:be:0e:ec:88:e7:32:
94:da:80:4d:bf:34:d0:f4:12:35:8f:4d:fe:ac:b8:9b:dd:1b:
a7:65:86:1e:64:72:b6:e8:e9:c1:cf:53:e6:30:59:de:1a:65:
de:d3:60:c6:db:38:0a:de:a3:0c:83:a5:78:1d:52:38:d8:18:
0b:ef:a0:1e:03:f5:6d:eb:75:24:7b:69:07:d5:50:07:fa:bf:
e0:0f:76:2b:01:c1:48:e5:42:67:45:51:d6:d5:4b:93:eb:2e:
c4:b1:77:36:43:21:e2:75:77:8c:90:a0:d7:cb:7f:f0:85:f2:
47:f3:4b:41:46:b7:b5:c0:ca:76:ce:de:46:b1:4c:92:93:f3:
af:5c:95:04:5f:02:7e:58:0f:5e:af:bd:39:f0:78:89:c9:8b:
0d:6f:29:84:6e:75:8c:ec:9b:56:20:53:6a:25:e3:bc:66:4c:
b7:ed:9b:df:4f:8c:92:b1:4d:7e:05:d7:19:c6:7c:c6:49:31:
2f:68:77:7b:99:f0:2b:4c:ac:88:5e:ed:0e:40:fd:fe:a4:89:
63:11:29:42:e5:99:30:68:77:a7:1b:bb:78:43:11:64:2d:b5:
b6:40:e5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:08 2025 by rpki-client