Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: D4W6GddmNUiqaISC8dinCvl9/c4A/LkHUO3en0w33wg=
Subject key identifier: 7E:3C:AF:B9:BC:A5:D6:DB:68:D9:20:1C:CE:60:7A:74:F6:2B:E8:8C
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 0198D583A019F1496406D834D98880E378B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0426
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: qUH1j8/YBIz2lovF77liLXETCCsmuP+DSyiCLqI1D3M=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:a0:19:f1:49:64:06:d8:34:d9:88:80:e3:78:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=7e3cafb9bca5d6db68d9201cce607a74f62be88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:ce:01:cf:ee:4f:e6:f2:cc:e1:a1:ca:26:
71:20:e4:63:95:ec:88:32:bb:ae:e8:5f:86:8c:73:
98:39:07:48:f2:1d:50:9d:9e:a9:ee:74:00:81:fe:
3a:e2:53:5a:00:8f:36:6b:b9:d7:00:da:04:53:31:
1e:cf:e6:5a:3d:aa:4e:39:ae:9c:08:8a:31:1f:db:
5d:d8:0d:df:0c:1c:2f:e1:21:35:2b:33:89:4b:cd:
76:a7:8b:96:35:fa:be:92:02:19:6d:d0:89:52:5b:
dc:f8:3e:5e:2f:8c:f9:45:b6:a1:db:06:55:1b:6e:
68:c8:2f:09:9b:36:32:9a:f0:b7:1f:20:16:a8:b8:
d7:52:61:bf:68:67:99:2e:56:74:db:35:04:49:34:
4f:5a:2c:6e:aa:36:6e:7c:b9:7f:d7:70:40:b9:64:
b8:16:38:14:03:48:6c:d9:a6:11:98:d2:e0:0d:3b:
ea:ab:b1:60:44:0c:1e:dd:7b:30:3b:00:64:ea:f9:
79:a2:ec:79:b9:8e:b7:23:34:15:a5:14:3e:0e:e6:
20:88:a8:c6:5b:b8:e6:38:1e:11:c2:48:12:7e:cf:
90:b0:63:54:79:63:0b:69:b3:da:cc:79:91:26:a5:
eb:b4:e7:6b:93:3e:64:2f:87:b9:e7:d5:59:d8:2b:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:AF:B9:BC:A5:D6:DB:68:D9:20:1C:CE:60:7A:74:F6:2B:E8:8C
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:77:2b:22:a5:13:57:46:3d:c3:0e:d9:25:0d:61:29:09:
9e:d6:fd:e7:91:1c:75:e4:1b:79:c8:93:99:05:13:a8:2a:44:
58:c3:6e:60:c6:1e:08:43:d1:40:a2:32:42:08:bd:b2:b2:c1:
07:b2:62:e0:ff:f8:2d:86:fc:07:d4:56:db:f3:8e:c8:e6:97:
ef:e0:fc:9f:8c:ca:f0:b8:5c:88:00:d1:52:0b:84:4c:bf:7c:
7a:9a:2d:4b:ca:22:23:32:f4:68:45:0c:6a:fe:7b:ed:db:e6:
73:91:52:ce:ad:c5:82:57:08:87:56:5e:66:97:ca:20:7a:33:
d9:c5:67:90:31:c2:d3:26:a1:1a:e5:f4:f6:43:6e:91:90:95:
77:c8:6b:42:3a:ac:46:93:70:51:99:e5:ee:98:00:22:25:13:
b5:2e:d9:81:71:7e:bf:71:73:c9:dc:ca:da:3c:a9:ef:a2:66:
74:2c:d3:69:25:79:97:33:4a:b9:c7:8d:76:d7:67:3f:95:d4:
19:47:53:72:58:9d:b9:fb:ff:a8:2f:84:f7:3b:37:2d:9d:2d:
df:49:7c:c5:02:63:4a:93:29:1d:36:ae:35:fb:80:d2:75:47:
26:0d:07:ec:77:85:71:73:8d:29:f6:33:31:af:c0:19:49:d5:
8a:4e:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:17 2025 by rpki-client