Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: 1DKFcIuwALe2lBlpYx2ADDURvvp/mHAwFTA0Vkgwcx0=
Subject key identifier: D2:CE:AD:79:D8:37:56:65:06:A9:45:64:C4:15:B1:76:80:48:81:91
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 0198D54DFDD857EFB861C1E5E869CCFEDD06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0CFF
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: Nybn9yWFjjhYhVfsUiedP1B2ezAF4QiO46v8yntswow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fd:d8:57:ef:b8:61:c1:e5:e8:69:cc:fe:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=d2cead79d837566506a94564c415b17680488191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:8f:33:86:ca:ef:32:47:46:b2:16:b1:ed:
a6:74:20:99:90:b1:2b:43:c4:b6:47:38:30:2f:f2:
84:76:14:c0:c0:d1:50:4d:ef:be:68:a7:07:c0:fb:
39:8d:f0:36:25:62:10:da:d1:26:9f:6f:0d:f5:58:
f5:3e:a4:e3:f8:21:f1:f1:c4:bb:b9:c1:f9:33:4b:
ee:2a:17:8e:91:7d:4b:fc:10:fb:73:8e:8a:fc:1a:
ca:12:00:ed:ae:cc:f0:2f:07:28:a3:2a:4e:67:3f:
22:74:b5:18:bd:32:26:78:71:ad:0b:cd:ff:4e:23:
40:0e:2c:12:28:58:ec:8c:a5:9d:86:4f:cf:fd:03:
67:92:55:ae:bb:1a:e2:42:b3:a3:0d:63:91:3b:1a:
1b:65:f3:75:79:05:f4:fb:b0:12:42:38:9b:33:d0:
95:d1:cb:fd:97:e2:ac:95:3b:f1:41:b9:d6:11:dc:
e8:d1:41:51:35:99:f4:30:2d:11:fe:67:c9:a8:46:
ca:42:a8:13:4c:5c:91:94:46:c0:dc:9b:57:48:e0:
7a:16:ad:4e:02:61:0b:82:83:5e:6d:97:79:c5:96:
89:a9:b1:f6:e8:45:d4:d0:aa:5f:7c:f1:02:c3:2e:
d7:fc:c7:a6:44:dd:e0:f6:60:00:90:0b:ad:73:0c:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CE:AD:79:D8:37:56:65:06:A9:45:64:C4:15:B1:76:80:48:81:91
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:58:e5:9e:cd:57:d8:6d:3c:e4:e7:f1:af:31:bf:38:78:de:
71:06:96:62:1b:2a:b8:d0:a5:be:0f:de:b8:7b:07:f9:ce:20:
a8:ad:2e:11:40:4d:f8:53:08:ea:8d:48:b7:f8:a8:29:bc:72:
66:ab:f2:69:44:43:a0:96:3d:3c:a5:5f:5a:f6:e8:ab:4b:f8:
6e:93:1a:f4:f5:5b:05:6d:00:a2:75:cb:9c:20:47:73:aa:ea:
7a:eb:e3:6c:43:79:83:e8:2e:e3:06:72:9a:ba:4e:46:db:49:
de:f6:d0:7e:3f:ee:39:9b:d8:bd:15:2e:8c:9f:5d:88:27:97:
b8:9a:89:8d:ff:54:96:03:8f:f8:cc:0e:36:57:a7:62:60:1e:
bd:ad:0b:08:3a:0f:3e:2c:dd:d5:7f:40:15:0d:71:34:d7:30:
35:e9:56:8a:ec:eb:1d:e6:8b:b5:e3:0c:ac:d4:25:c0:94:d4:
6a:a7:b5:45:fe:30:a9:18:c7:6b:2c:fa:e2:e0:d1:ae:01:0f:
46:9e:71:8f:e6:9e:7f:43:e6:0b:ec:be:0d:b8:84:42:a2:ce:
e7:c8:fd:be:d9:0b:12:91:14:43:1b:78:50:c7:d8:d3:0f:6c:
cd:c7:09:8f:59:b3:33:2a:62:22:ac:33:a8:f5:1f:2b:7e:2a:
65:fc:c4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:36 2025 by rpki-client