Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
File: pPTBZVXW8DttbI0KjMvhrx6uxDo.mft (raw, json)
Hash identifier: +3I1sr/vVuE1SYsRpr+dmJ52NUlnsv9vxVpI/ZvfuPI=
Subject key identifier: 2B:C9:C8:1E:0E:29:DD:24:1C:0F:BC:55:18:AF:5C:C8:F8:58:7C:BD
Authority key identifier: A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
Certificate issuer: /CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Certificate serial: 0198D51610A00931B161CA537C607D532F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
Manifest number: 2F
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: 23JWsnJj-jb8Wa8yxWmE89jRhEc.roa (hash: hyRLz7Lb6AY/XCQzJ69T02ZWEp1ZBMf9ccg5gtbuPtQ=)
2: pPTBZVXW8DttbI0KjMvhrx6uxDo.crl (hash: 6dcWU0e1GevOF+6rcAAffV2vRWbWk7RR6foV12YJHzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:10:a0:09:31:b1:61:ca:53:7c:60:7d:53:2f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f4c16555d6f03b6d6c8d0a8ccbe1af1eaec43a
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=2bc9c81e0e29dd241c0fbc5518af5cc8f8587cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:ab:f1:99:08:1e:e4:0d:b4:f4:32:9b:b7:
d5:62:55:ec:ca:ca:3b:35:13:e8:18:01:0f:89:df:
f8:53:88:c3:24:33:29:cb:b6:56:17:6f:37:de:ee:
4e:ef:3b:55:bf:5c:19:fd:07:1c:91:c4:22:a7:50:
27:f9:fd:e1:2b:a1:bc:7c:72:71:1f:84:09:8d:2b:
d2:26:63:f3:e7:e3:dc:ed:4c:7c:63:1b:7d:ca:16:
88:c5:73:fa:90:fe:3f:e6:4f:15:53:2e:71:03:a2:
ea:25:00:98:24:99:84:b6:73:a1:21:79:ed:77:f1:
e0:d8:be:c1:6c:b6:39:25:ac:91:1a:8b:32:c3:3a:
4d:e7:52:5c:13:be:9a:c4:90:7c:29:bb:1e:16:1d:
ed:1e:53:7d:e3:88:8d:7a:d5:86:75:dd:e4:cf:bb:
d6:2b:fc:61:63:ea:01:b8:8a:48:f9:3e:b1:45:9b:
18:36:40:c6:9a:be:31:fd:f4:a2:e0:8f:4f:c8:e3:
6d:08:26:af:61:99:2a:29:58:04:88:c7:70:ef:8c:
c1:56:7c:9a:12:a2:47:6a:e9:f8:ef:58:8f:09:9e:
b3:36:39:7c:a6:6c:fb:fc:c7:61:6b:71:c9:b8:fc:
64:fa:f0:63:44:e8:e1:e9:b2:ec:30:e3:df:84:d2:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C9:C8:1E:0E:29:DD:24:1C:0F:BC:55:18:AF:5C:C8:F8:58:7C:BD
X509v3 Authority Key Identifier:
keyid:A4:F4:C1:65:55:D6:F0:3B:6D:6C:8D:0A:8C:CB:E1:AF:1E:AE:C4:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPTBZVXW8DttbI0KjMvhrx6uxDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d94294-7999-4009-9dd6-2567f4a9b139/1/pPTBZVXW8DttbI0KjMvhrx6uxDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:73:8f:af:b3:41:48:c3:ef:e6:36:18:13:83:94:cf:4f:fd:
d7:c2:89:e5:94:bb:9f:9d:2a:54:c1:e3:3a:28:6c:1b:4d:1d:
d0:25:f1:a6:f5:6e:cc:fa:15:cf:34:72:a3:25:ba:a0:c8:18:
00:de:84:72:55:f4:14:ed:71:af:82:8e:7b:68:14:ce:2f:ca:
ee:62:8d:f2:53:4d:24:de:ba:90:f0:e4:ee:5e:ae:b2:20:57:
8a:72:35:57:ea:af:d5:3c:d5:b1:df:22:1b:8b:55:e6:e5:38:
00:87:3e:7b:5d:09:30:39:ac:14:6c:e4:aa:93:f9:74:ec:5a:
5f:a0:a5:83:4b:fa:43:6f:36:0c:24:ba:a0:d2:4b:a1:11:13:
df:87:22:01:87:c6:c9:02:4f:59:a3:db:b7:48:4d:0b:3a:f2:
15:c9:5b:58:c8:5b:d9:78:ff:06:20:74:0a:0f:d1:75:54:88:
a2:28:0c:72:f3:5c:5c:01:db:01:8f:e5:d1:f2:69:b8:e2:1f:
c3:ea:88:50:8d:13:5b:af:15:78:4c:06:37:d4:da:9b:87:62:
e8:51:bc:ee:e1:52:03:08:dd:bd:c4:04:28:f5:89:c8:3f:ff:
16:d7:ee:60:de:1f:fc:4a:2f:dc:b0:f4:46:d0:45:4f:6f:98:
7c:67:59:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:39 2025 by rpki-client