Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: 7DrhRhPzSIXgV4l6ylNAK4o8xmPnYQi/lMJ7AZtG/xo=
Subject key identifier: 47:20:F9:1E:07:30:80:3E:24:6C:BD:8E:D6:44:B5:1C:F7:25:C8:48
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 0198D7A8FF7ACBCE9B985C7EA1622B4AEF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:00:33 +0000
Manifest this update: Sat 23 Aug 2025 16:00:33 +0000
Manifest next update: Sun 24 Aug 2025 16:00:33 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: U0XPuNhKeWGJvPK56TsS5G6sgwjd5KAfb6/aWdVWNek=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:ff:7a:cb:ce:9b:98:5c:7e:a1:62:2b:4a:ef:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Aug 23 16:00:33 2025 GMT
Not After : Aug 24 16:00:33 2025 GMT
Subject: CN=4720f91e0730803e246cbd8ed644b51cf725c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:44:4f:d4:0e:a9:38:05:3f:26:a6:23:7b:
47:7a:61:88:19:90:b7:b8:5e:c9:2a:23:6a:26:10:
d0:43:2a:d7:f7:89:2f:56:4c:c2:16:82:1c:1d:fc:
fe:e3:84:59:15:72:4a:c9:dc:27:1f:c7:db:f1:c7:
39:86:a7:47:56:b5:13:37:1b:98:80:ca:ab:56:7c:
4e:c1:03:43:46:8b:ec:c6:ca:10:ae:99:aa:f0:01:
73:2a:22:a0:c8:a7:a1:a6:0c:8a:13:f3:d4:f3:c4:
78:04:b7:14:b1:60:f5:44:bb:b9:a9:53:ef:a4:55:
df:13:db:a3:e6:b5:87:89:16:0b:37:c9:52:3d:e2:
e5:d8:20:6d:49:67:d5:a5:be:f4:a0:e8:c8:21:4d:
d0:30:b7:bb:01:bc:20:e5:be:ff:0f:09:8e:06:b3:
93:93:4c:6e:bc:ed:01:7d:8b:6a:9f:76:36:c7:fb:
74:b5:e6:bb:f4:b0:14:e3:72:b6:1f:f1:b3:5e:c7:
cb:e7:0c:45:45:2e:04:62:0e:26:77:47:7e:22:bc:
1c:d0:2f:54:31:a0:a6:63:9d:96:3f:ed:21:d3:cb:
35:68:4d:f9:83:e2:6f:d8:17:7a:84:4a:e5:90:a9:
f8:73:be:f2:cd:64:8d:e4:1c:3d:b7:48:63:82:a2:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:20:F9:1E:07:30:80:3E:24:6C:BD:8E:D6:44:B5:1C:F7:25:C8:48
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d7:8d:52:83:c8:20:f0:38:58:db:13:a3:1d:17:df:76:74:
5d:67:dc:97:d7:01:1c:df:2e:c5:e9:75:af:75:1a:b8:52:32:
f3:6c:3a:8c:51:65:16:b8:b3:75:77:fe:4d:95:66:2b:e2:45:
af:47:58:e0:a6:70:0f:d7:f2:13:02:6f:43:e6:79:9f:6c:cd:
f7:06:89:0f:81:63:5e:ca:1b:8c:30:18:74:57:21:9e:64:b4:
ba:d0:07:24:5e:7a:14:9c:23:68:ca:21:59:dc:3b:c3:df:0f:
f3:48:95:08:0c:aa:c6:9e:20:ec:4e:4d:19:0b:62:46:dc:65:
33:a4:6c:12:36:31:21:b7:05:52:b8:fb:c3:84:71:c0:fa:42:
ab:d6:d4:39:4f:22:07:de:39:d6:3b:88:5a:a4:3c:41:33:e2:
20:02:92:de:a4:e9:90:a6:34:49:0b:ad:ec:d1:dd:b8:70:f6:
c7:96:62:b2:4f:1c:3a:14:e0:28:3e:4e:b3:ba:e3:bf:37:a7:
38:9b:7a:cb:87:14:b8:40:5e:f0:da:6e:b1:3f:ad:7e:f5:a1:
93:52:bd:94:4a:26:35:1c:9a:d9:08:c0:d8:78:4f:0b:74:41:
89:73:bc:a3:eb:86:3c:6b:20:15:93:2f:e2:58:77:63:e3:0c:
8b:17:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:20:32 2025 by rpki-client