Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: iAgy5yxVu2/V+Np9AAHSDcZX5pg4Toxt4jY78itaFG4=
Subject key identifier: E3:63:1B:F3:B2:23:79:B3:D0:C1:D1:39:72:B3:96:8E:18:7A:50:9B
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 0198D5BBC1D81688C8843C20575AB1D83D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: qzci6hQZVP/7Wy+11hwSFRTTxHoBn5Nbc1HXtS0TNIU=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c1:d8:16:88:c8:84:3c:20:57:5a:b1:d8:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=e3631bf3b22379b3d0c1d13972b3968e187a509b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:81:ec:59:db:41:d1:69:9e:fd:d3:76:51:
80:2a:df:65:6b:be:aa:70:fe:56:f7:35:af:33:00:
08:5b:0b:15:de:8d:11:48:22:6b:d1:30:92:df:9c:
c1:fb:c6:88:1e:0b:90:1b:b7:02:34:48:1b:b6:2c:
07:7a:78:63:1b:49:86:b0:23:c0:e0:e0:f8:72:28:
10:66:e0:03:8d:83:f1:0b:74:4e:b7:16:9c:70:2e:
e4:42:3b:02:76:e4:fe:36:33:0f:f7:0a:77:63:8b:
5d:0f:23:7f:d0:3f:a4:cf:79:0a:b4:7c:c0:92:f0:
4d:cd:21:0d:4a:29:de:55:2b:e3:09:bb:34:14:dc:
27:cd:81:a6:50:fc:ed:e9:06:98:f6:3a:05:5c:96:
14:b1:b2:10:07:36:5a:a5:c7:96:0a:57:1f:fa:1f:
a2:3f:da:52:6b:fa:36:33:9f:89:8d:5b:16:16:b9:
49:2c:8c:fd:12:b5:34:84:27:5e:c5:6a:18:35:a5:
c7:5c:d9:1d:bb:e3:e9:de:68:14:61:e6:8a:5f:c6:
8c:dd:25:a7:3d:00:48:de:36:ac:3b:2a:87:1a:fd:
ae:15:53:c4:d7:72:cb:f7:f8:e1:91:dc:7f:6e:9c:
1e:dd:1f:37:d3:8e:07:16:f7:16:9e:18:c5:47:0c:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:1B:F3:B2:23:79:B3:D0:C1:D1:39:72:B3:96:8E:18:7A:50:9B
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:78:7b:e0:c9:2b:bf:a3:cd:d6:a2:c0:5e:14:b1:2e:79:
04:ee:e2:f4:08:ee:f0:2d:6e:48:af:9f:89:74:9d:05:61:70:
c8:7f:de:34:3f:58:25:89:52:43:76:82:cd:dd:ff:cc:58:3f:
1b:47:f3:02:9a:e1:39:f1:da:02:84:93:dd:2b:73:e4:62:bc:
10:82:0e:48:01:63:c8:a4:b1:14:c2:f5:3c:a8:74:2f:cb:17:
8e:6f:5e:83:90:2d:a2:19:2f:0a:01:1b:26:c5:27:ea:f5:11:
ef:3d:17:df:a4:c7:59:36:47:82:42:d9:bd:01:f2:89:07:a6:
cd:9b:7d:81:32:01:59:c1:30:e6:7e:ee:ce:be:06:bd:91:87:
07:a9:e5:29:f7:1a:84:ad:cb:2f:c1:c8:77:25:66:2a:d6:4a:
9d:35:52:d1:df:41:6b:71:62:ab:75:9e:4d:5e:ac:80:a1:cc:
9c:61:2c:fc:c0:1a:88:71:f4:fb:8f:5b:17:a4:76:c0:2b:d9:
b1:a8:fb:3e:e7:45:08:ce:47:c1:6b:a4:c3:68:30:db:75:23:
69:84:51:08:d7:d4:d1:d0:3c:57:51:5b:96:b3:cf:9b:c0:a5:
a4:41:38:a2:02:c1:33:f9:e0:ac:01:06:d6:65:30:cf:c2:7a:
33:db:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:36 2025 by rpki-client