Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
File: pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft (raw, json)
Hash identifier: XL9mmL+yQBgbHbmsi8Wyi9AFhAzHWfSMzOZdJdz4kzk=
Subject key identifier: C7:9E:24:B5:22:9F:86:F5:2A:35:7A:C1:A8:DE:30:2B:15:28:B9:9F
Authority key identifier: A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
Certificate issuer: /CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Certificate serial: 0198D65FAB3727E3378360BA9A1214DB53F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl (hash: 5H+pEn7beKOlM1XpXH9du2bTQobEWLB9wzQ/gajtiLA=)
2: pV9OuJfGvboWa4RSwyOam_iwesY.roa (hash: RTkqdqbXmblScuzpz+Ud/Jj/+DA6UotPUIkNIsu6BJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ab:37:27:e3:37:83:60:ba:9a:12:14:db:53:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c93ab364c87832e7776226eee6c131dbe153bb
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=c79e24b5229f86f52a357ac1a8de302b1528b99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:3b:b2:85:70:7d:52:e6:52:ed:da:a0:40:
1c:e3:21:66:1d:91:d2:fd:b8:37:7b:4c:9c:05:d9:
90:af:41:9f:d6:7d:32:0b:ef:2c:40:34:d8:7d:fd:
a7:62:35:7d:73:01:8c:ac:0e:1b:8b:9f:12:aa:dc:
6a:db:3f:85:81:49:00:af:61:ea:c1:2d:4a:ec:3d:
aa:7a:7c:56:42:d7:7b:5b:3e:13:7a:b6:99:42:3c:
4a:56:0f:e8:a5:fa:f3:e5:95:1c:59:12:38:f5:10:
08:52:42:96:06:c9:a5:14:1f:06:1d:89:7b:5f:78:
b6:56:5c:1c:71:87:0c:b6:05:f9:ae:56:95:a9:27:
79:fb:47:f3:cb:9b:20:00:d5:48:77:ea:15:ce:dd:
e3:b2:d8:a3:f8:7a:fb:32:e9:3e:15:b8:ae:f0:08:
c3:e2:a9:5f:58:3d:fd:aa:d1:f5:80:56:c9:ba:bd:
19:70:f6:ca:b4:ba:be:68:9f:e9:80:0d:5c:b0:d3:
91:e5:ad:40:02:26:36:f1:eb:7d:d0:fc:63:7e:d8:
5c:ca:4d:94:60:00:07:19:09:1f:57:3f:0f:22:6e:
8f:15:38:ba:42:4d:a6:7b:f6:75:68:e7:f0:5e:3b:
9a:ba:e6:3f:f7:df:46:ca:72:8a:57:3a:f1:a7:3a:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9E:24:B5:22:9F:86:F5:2A:35:7A:C1:A8:DE:30:2B:15:28:B9:9F
X509v3 Authority Key Identifier:
keyid:A4:C9:3A:B3:64:C8:78:32:E7:77:62:26:EE:E6:C1:31:DB:E1:53:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMk6s2TIeDLnd2Im7ubBMdvhU7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/49dfea-c789-4401-a251-e2533cdd25af/1/pMk6s2TIeDLnd2Im7ubBMdvhU7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:53:7d:d4:8b:81:73:fc:df:61:54:bb:34:12:6a:cd:64:
20:77:a4:9d:8a:cf:91:8a:26:9b:53:37:b2:b4:f3:f0:7c:1e:
13:76:23:a6:eb:ca:b6:41:79:dd:b5:d5:4c:85:d4:6b:7a:f2:
cf:af:9d:af:27:5d:ee:eb:51:83:7e:b4:c1:19:0c:a4:1d:48:
e9:3e:1e:e9:43:71:1e:a2:07:c9:75:6d:9c:13:ac:7a:9e:84:
e4:2e:10:90:15:1c:78:66:17:3e:f4:93:97:e0:b6:5d:ea:5c:
2c:9a:e6:58:00:8e:2b:59:9f:4f:7d:c6:a7:56:91:8e:72:a1:
13:76:ec:5c:50:8e:56:4b:e6:cf:94:41:f8:14:52:c5:bf:81:
d1:c3:86:85:a8:b5:3a:be:ea:3b:83:e0:f6:f9:29:0a:66:12:
62:bf:5f:c5:d9:67:01:73:aa:4d:d1:f3:51:49:80:ee:2f:44:
88:25:2d:8a:0f:c3:d6:ed:b4:9d:01:8a:59:75:46:44:35:17:
43:66:cb:43:bd:86:54:77:9a:69:3c:76:84:64:67:42:4f:df:
37:71:df:f3:93:b6:23:e6:c6:00:23:4f:b2:d8:05:c6:0c:ad:
9a:df:e6:2f:82:6a:61:41:c7:d7:18:9c:cd:ce:98:c4:eb:ac:
1e:25:5a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:58 2025 by rpki-client