Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: bi83thBj/O8wtWGjtlPZdH7Dkrfs2sNlqts+w6STl2E=
Subject key identifier: 3A:B6:6C:9B:7F:F1:EE:F7:F2:20:A5:B9:6B:7A:EB:CC:EE:35:16:85
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 0198D5161ACD23C6B1122A63BE77FAEE775B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 050F
Signing time: Sat 23 Aug 2025 04:00:52 +0000
Manifest this update: Sat 23 Aug 2025 04:00:52 +0000
Manifest next update: Sun 24 Aug 2025 04:00:52 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: F32H9j9Qo3XgMiI3KRw1EzB5Hp4vJbn7wuaX++eoMv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1a:cd:23:c6:b1:12:2a:63:be:77:fa:ee:77:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Aug 23 04:00:52 2025 GMT
Not After : Aug 24 04:00:52 2025 GMT
Subject: CN=3ab66c9b7ff1eef7f220a5b96b7aebccee351685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:55:df:37:55:4d:d0:b6:77:33:e7:68:f2:
17:29:07:48:e8:a1:69:2f:fa:b1:9c:72:cb:fe:81:
87:bb:6b:22:55:46:84:c8:c4:df:9f:89:73:9d:42:
c7:5b:fa:c2:a2:14:b3:ec:b1:fe:62:6b:13:c1:07:
e3:08:d2:9f:59:b2:4e:a1:9f:32:ee:44:bc:43:e5:
5d:af:2e:fd:4f:4f:ed:7a:54:f9:a5:6d:e7:a2:74:
e8:43:b4:44:ea:d2:ad:24:a5:9a:61:7f:2d:22:ed:
ed:f2:9f:40:2b:da:6d:b3:63:d8:8a:4f:71:07:e5:
db:bd:44:1c:fd:f9:29:76:dc:4e:9e:65:b1:81:19:
3c:1f:0b:1c:06:8b:71:8a:56:51:e1:51:7f:5b:f3:
6e:57:99:75:84:79:c1:9c:f7:b9:e5:90:93:7b:29:
cd:d0:de:c5:36:15:54:21:72:a8:a5:87:5b:2e:9f:
8e:70:bc:14:07:dc:5a:a6:d9:f7:f6:53:0f:23:3a:
9e:cb:e9:d0:c8:17:42:82:a1:87:97:7d:96:c8:8f:
c8:08:e2:02:e7:c1:f1:8f:4f:b8:70:a9:c8:37:45:
b8:a5:2d:d5:5e:d1:b4:84:76:2c:8d:fb:80:79:b1:
82:4f:4d:01:81:ba:e0:3d:46:d9:95:4a:27:f9:2b:
8d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:6C:9B:7F:F1:EE:F7:F2:20:A5:B9:6B:7A:EB:CC:EE:35:16:85
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:d2:c2:b1:5e:c1:64:cf:28:a6:a4:3e:d4:7f:1d:eb:4a:
c8:91:2e:e1:76:3e:6f:3f:9f:6a:14:28:2b:58:63:fd:ba:28:
7d:20:7f:7b:4f:33:07:24:84:48:de:28:39:00:fd:a0:3b:20:
bf:03:33:61:02:68:fe:b8:77:e1:36:23:b6:97:b8:ba:78:6e:
d6:99:93:1f:5b:ba:9c:8c:e8:cf:da:f8:cf:d1:52:7d:0d:39:
a7:7f:03:e6:81:16:c4:6e:94:26:72:8c:d5:93:97:84:1c:db:
63:b5:52:02:f2:6d:b8:6b:0f:78:39:81:32:e6:dd:e5:88:9e:
86:25:2d:eb:64:ae:cc:04:ef:ce:9a:03:3a:73:2c:03:66:69:
c5:cb:28:f0:a5:16:b7:f8:ee:8f:a5:00:33:65:e2:e9:df:c3:
d1:8e:2b:03:c8:59:63:a7:16:c6:7a:5e:1b:40:4d:6c:8b:da:
9e:02:04:ca:b4:d2:60:ff:98:2b:c2:82:66:97:25:f2:db:e0:
09:11:9b:41:fb:b3:66:15:e7:88:e2:0c:b4:77:86:7e:75:e5:
79:f0:c3:13:77:eb:7e:28:f0:d1:ee:42:e5:9f:69:4a:b2:d6:
39:34:8e:f1:89:b3:b8:6d:6b:dc:30:13:8c:f9:15:a4:6e:81:
17:da:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:00 2025 by rpki-client