Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
File: PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft (raw, json)
Hash identifier: iABO/gIUsJ4/tXImBFdqJnWdX6KJrT24rR7yp+prN1k=
Subject key identifier: 64:B7:86:D7:EC:49:B2:BB:73:61:F0:F8:AA:F7:55:29:14:59:8D:8F
Authority key identifier: 3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
Certificate issuer: /CN=3cca849b375015f433e9a240ecabf03cf152c781
Certificate serial: 0198D5F16526CC0CA9D4F5730BBB5B734EC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl (hash: f0b5ekPXpCQKqn81UGB8A2im1ltu9YiEnJwgdp2tKD8=)
2: tJh122419FX7oJQGYtZtkXOvqn0.roa (hash: 80WcSAxcwtJA+++UZrQ3DpOoXBp5rklUr6m+pRMbNZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:65:26:cc:0c:a9:d4:f5:73:0b:bb:5b:73:4e:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cca849b375015f433e9a240ecabf03cf152c781
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=64b786d7ec49b2bb7361f0f8aaf7552914598d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:5d:c3:2f:ce:6d:20:5e:99:9f:8a:c2:a3:45:
7d:2f:6e:05:6b:36:03:c3:8a:e3:a8:bc:c7:4b:89:
12:79:3f:7d:1b:b1:9b:a1:ef:62:8d:f4:3f:7b:e4:
b2:79:df:97:2a:fb:f9:bd:3c:bb:a4:b1:ce:da:56:
2b:3f:99:b4:e6:16:f5:b1:04:48:3a:fb:d3:db:5a:
ee:f3:1e:a8:08:67:0d:33:53:9e:05:e8:3a:60:9a:
97:93:52:ad:89:9d:41:c4:fc:76:d2:c4:1c:6a:9d:
53:bf:37:1d:b6:40:7b:90:da:ba:51:ec:0f:1e:49:
f6:d4:7b:45:df:dd:f4:8b:f0:3a:33:6a:e9:c4:7f:
9d:0c:90:5d:3a:fa:56:6c:d7:0b:c1:c7:8c:4a:79:
85:2a:0a:a5:61:dc:06:27:90:25:26:97:c4:44:ae:
a1:9b:e0:6e:f2:31:34:c1:aa:86:2a:01:58:8d:7a:
eb:c8:99:51:49:d7:d8:60:41:3e:5e:89:a2:a7:72:
8c:94:2d:19:73:c2:a3:89:a9:12:f2:e8:44:79:22:
f6:fb:c0:3d:23:d6:60:46:3a:29:a1:8b:41:f9:9b:
f5:cc:07:25:7e:93:66:77:06:5a:16:38:f8:e8:df:
c4:ed:e9:88:d0:e0:96:39:e8:8d:cc:b1:bf:09:97:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:86:D7:EC:49:B2:BB:73:61:F0:F8:AA:F7:55:29:14:59:8D:8F
X509v3 Authority Key Identifier:
keyid:3C:CA:84:9B:37:50:15:F4:33:E9:A2:40:EC:AB:F0:3C:F1:52:C7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMqEmzdQFfQz6aJA7KvwPPFSx4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/275636-fe3f-4528-bd7e-d6255f2527da/1/PMqEmzdQFfQz6aJA7KvwPPFSx4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:72:bd:fb:6b:26:1f:d8:6d:e2:6b:da:13:90:0e:98:34:92:
04:04:3b:02:28:51:63:b2:47:98:ce:96:ff:1e:9a:8c:48:c7:
5b:23:12:4a:bd:87:92:a5:73:ba:ec:ce:ac:78:08:dc:70:24:
fd:6c:31:c8:b8:cd:78:fb:ad:2a:51:39:ef:59:28:f1:c6:37:
9f:cf:1e:5c:f6:95:cb:70:db:a9:36:2a:c2:e4:ca:59:bb:41:
b6:57:f9:37:92:93:16:52:73:3d:9a:df:34:da:16:71:42:c7:
70:d7:78:17:c3:bb:3b:c2:e6:99:39:90:10:e3:d8:93:17:10:
3c:cd:5c:64:6e:dc:df:19:53:cd:77:ec:b8:3d:9a:4f:c3:30:
aa:7a:c4:57:27:bd:62:49:56:6d:47:2d:81:91:0d:d8:fd:b6:
81:7e:d5:af:1e:83:30:74:62:2b:cd:cd:ef:73:5c:33:ad:5d:
a5:7d:7a:70:44:90:1f:1d:6b:26:97:3a:44:7b:3a:42:74:b6:
46:f4:59:7d:7f:77:d0:17:cf:31:c8:1d:8d:6e:2a:c4:2f:99:
b2:65:ac:d4:2e:0d:d4:4c:3b:ef:12:31:1f:1c:1b:05:7c:50:
4e:79:2b:1a:51:99:c5:3c:84:71:05:84:ed:20:58:f8:44:c5:
a1:44:9a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:26 2025 by rpki-client