Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: zbPIEHl8iiETyNJzzkIL5XWGF/HdzUPzgNErGm3TjOk=
Subject key identifier: 30:D4:F8:02:4B:B2:54:6E:A5:04:29:EA:A8:E7:98:90:87:37:39:83
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 0198D4E025D9C6B42B359FAA6BF3291CA40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: VKKIikwasvaS4tyjrh6LDJNPtH1Br+Zu1mM3V7CgAf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:25:d9:c6:b4:2b:35:9f:aa:6b:f3:29:1c:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=30d4f8024bb2546ea50429eaa8e7989087373983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:bb:70:24:c8:b9:ee:98:5f:8d:c2:89:e5:
14:5b:37:e4:af:24:e3:90:db:6b:56:9b:fc:3d:b3:
7d:64:f6:6e:e5:3b:17:46:9f:f3:9c:3b:d9:4a:e6:
4f:87:8b:c0:a8:9b:80:df:9f:88:b1:7a:23:29:88:
dc:8c:5f:7e:64:f1:de:8f:97:66:aa:a0:b1:85:b1:
6e:1f:2b:ec:71:96:be:58:33:d5:c4:c7:fc:45:e6:
ed:a9:c8:a5:e7:06:61:bb:14:5b:f4:3b:89:0d:66:
e6:7a:4a:be:3e:0a:96:d0:89:f5:2d:ed:46:09:88:
dd:3a:0b:73:bd:77:3a:d4:f7:d1:35:9a:2c:2b:35:
c4:e3:0d:99:f9:75:47:46:8d:f7:c4:20:10:f9:48:
05:eb:66:57:75:25:0f:ad:39:73:8c:3b:d0:82:c5:
cb:c5:5a:52:00:2d:88:7a:3f:a5:d5:27:6c:d3:ba:
db:c0:af:93:6d:ef:7f:a2:0d:70:29:ed:8f:1a:72:
7a:cf:48:45:54:0f:68:f4:af:87:f7:9e:cf:f4:41:
66:2d:ce:97:b1:c2:83:fd:15:3b:c6:c9:3e:9d:4c:
f0:dc:a3:ea:78:71:6a:e7:8d:6f:42:6a:0f:3f:a1:
7a:93:af:39:5c:03:26:36:c2:77:76:5d:5a:77:b7:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D4:F8:02:4B:B2:54:6E:A5:04:29:EA:A8:E7:98:90:87:37:39:83
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:73:41:c8:98:29:8f:2c:c8:a9:ef:ae:8e:bc:51:2c:88:64:
56:6d:81:76:5b:79:b9:f5:7b:72:c0:a1:09:32:2f:f4:48:59:
f0:c9:4f:a7:54:20:fe:49:2d:06:a3:1d:da:6d:30:da:0e:cf:
09:78:db:b6:9b:35:01:6c:a5:bf:2b:3c:cc:76:05:fe:3d:4a:
63:b1:12:e0:32:5f:da:b0:d9:62:29:10:f9:49:57:0a:01:5e:
8e:0d:db:52:71:1c:1d:40:02:3e:78:2a:98:36:ed:c6:fd:07:
f1:ab:fd:89:7c:3f:8d:1f:8d:b0:ac:c5:e5:1a:cd:33:2e:a3:
ad:97:6b:7c:67:43:31:d4:28:04:94:b9:ff:e8:63:b8:65:87:
36:50:a7:06:54:17:fd:f1:25:b6:31:ec:ff:ff:4a:ea:95:dc:
2f:29:e1:9e:5d:da:7a:84:7a:b6:96:6b:0f:4b:68:1b:52:5f:
b7:b6:62:b7:98:8f:1c:43:ff:c7:53:30:ba:c7:9d:96:c9:cf:
e4:2a:ae:c1:8c:15:68:a6:fc:db:0d:1f:19:6e:25:e5:9d:eb:
3d:5e:73:99:94:0d:e8:02:d5:7b:48:57:ce:f0:ad:72:c7:fd:
f1:07:8b:43:71:d9:67:0d:ef:d1:ea:6f:7e:e9:b4:84:80:12:
19:11:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:06 2025 by rpki-client