Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: 27bYaCZJUlf9E8kO/VwHgGFro/rB4pceIYvHNN+0ebY=
Subject key identifier: D0:1A:A3:BB:18:AF:58:10:F6:10:F1:0C:3A:73:4E:B2:6E:81:84:6C
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 0198D5BBD626193B1179B1171783D9F8050C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0D63
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: a39vMZs7sIx1BsDC5Y8BVkkGjWUMKCtocdNMMTpTfhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d6:26:19:3b:11:79:b1:17:17:83:d9:f8:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=d01aa3bb18af5810f610f10c3a734eb26e81846c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:4a:14:9f:0b:4c:43:7e:ad:71:d6:3a:a7:
ee:b9:37:06:c9:fc:3e:fd:33:09:a6:ad:36:04:07:
1a:32:d8:7e:26:1f:f9:cc:bb:80:c6:03:5b:71:90:
f7:fd:fa:a7:22:18:c2:92:fd:b1:00:eb:f2:fd:d4:
5e:b5:8e:75:a9:20:a8:c2:d0:05:69:89:60:94:02:
c3:fe:a8:6c:bf:e6:b5:e3:28:d7:54:17:3f:49:fe:
ae:90:5f:c9:1c:b9:79:74:79:6e:38:81:c5:c9:4c:
f5:dc:09:69:a4:b5:fb:62:2e:fd:f0:43:1c:ce:e9:
42:a9:fe:3d:73:09:3f:e2:6d:9d:60:a6:9e:8f:cd:
59:44:c7:b3:97:c6:dd:ae:d2:44:12:f8:0e:4f:20:
42:19:73:95:79:ca:0c:06:02:5d:b3:2a:63:47:6d:
e5:a6:47:cb:68:35:6d:90:bd:09:1f:5b:bc:ab:7b:
0a:b5:07:dc:f0:31:3c:38:a8:ac:a3:a7:04:84:31:
cc:91:76:9f:ad:64:d2:66:e9:38:84:f6:32:01:f7:
58:63:95:3b:e9:9d:a4:4b:df:fe:00:d9:e1:55:22:
ca:f2:15:eb:cd:7a:7f:c7:9c:b5:cc:a9:47:34:92:
6b:e9:78:8e:99:d3:50:1d:d8:e5:bd:59:15:69:3d:
ef:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1A:A3:BB:18:AF:58:10:F6:10:F1:0C:3A:73:4E:B2:6E:81:84:6C
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1c:c3:ec:c3:16:eb:8a:ef:91:4c:0b:af:23:6d:06:93:d2:
07:f6:15:1d:d0:a0:9f:fc:b3:f0:02:bc:6d:6f:e7:c6:c6:72:
51:ab:c7:3e:35:23:9b:a5:92:02:5e:11:96:d9:3e:61:5a:fe:
c1:a3:89:6b:3b:4e:a5:6f:3c:05:11:19:d0:92:37:2a:60:ea:
90:b6:59:d6:a8:e0:cd:dd:10:43:26:dc:05:b3:cf:e7:e1:6e:
fc:26:5f:8a:cf:c5:c4:b2:be:17:59:46:2c:22:70:df:ce:0d:
d2:25:d7:a3:dd:20:a2:5a:86:db:cb:86:ee:f5:e3:37:55:1a:
f0:e9:96:e9:4c:a9:d9:82:74:d7:dc:b9:7d:c8:15:94:35:fc:
05:b7:e9:f4:b7:8e:89:a0:bd:1e:c0:14:b7:11:10:c0:83:e3:
cd:52:40:c8:16:a9:b4:07:20:40:45:2c:ad:8b:9e:b5:71:7e:
f0:0d:51:79:13:20:17:ed:41:f5:d0:ea:f8:58:33:6e:11:fd:
38:0b:1e:f3:ae:28:f2:1f:13:25:34:be:4d:8b:6e:30:dd:41:
ef:0f:f3:b9:76:f9:5f:1f:46:70:3a:48:cb:d7:bf:23:47:5d:
d5:57:00:09:6d:ac:32:20:4b:6c:a0:48:55:49:be:11:88:3a:
f2:85:42:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:59 2025 by rpki-client