Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: 4NYBExVoDqoZHZCJ+R7d3qz5oXJGsiWPprrpGIbiBvQ=
Subject key identifier: 6B:86:F5:68:3A:23:E2:16:A7:66:DF:80:3F:DA:8F:13:54:E5:C2:0B
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0198D4DFCBC51DE7DE107D99D75F1EAB1964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 1101
Signing time: Sat 23 Aug 2025 03:01:33 +0000
Manifest this update: Sat 23 Aug 2025 03:01:33 +0000
Manifest next update: Sun 24 Aug 2025 03:01:33 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: RE2IuJ3CWi9WHMJRPa6eoiwsPorRI3E/MVQVqAU7MCQ=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:cb:c5:1d:e7:de:10:7d:99:d7:5f:1e:ab:19:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Aug 23 03:01:33 2025 GMT
Not After : Aug 24 03:01:33 2025 GMT
Subject: CN=6b86f5683a23e216a766df803fda8f1354e5c20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:a4:b0:e6:48:1c:93:00:69:7b:af:46:de:
62:63:32:bc:5c:9b:10:97:d3:84:68:2f:ea:58:6f:
07:4c:20:d5:7c:b3:95:73:1d:6a:1e:d7:f1:b4:a6:
39:0d:b2:f6:0d:92:0d:98:4e:bd:5a:61:29:79:23:
24:4b:50:80:d5:6a:e3:27:ac:fb:f8:56:5e:e0:8e:
af:81:96:66:91:56:f6:55:36:1e:0c:40:fa:bf:b0:
35:4c:8d:79:a7:0b:a9:29:4c:68:c1:fd:da:16:1c:
0e:0c:d0:c6:ff:6f:a6:b2:87:33:8a:3a:c1:cc:e5:
eb:19:60:df:3d:52:17:6d:63:d6:a7:44:77:73:3a:
04:0f:90:25:46:85:b0:73:da:c6:ba:c9:4f:ce:89:
11:fd:40:ad:6c:f1:3d:a2:f2:01:66:20:ec:fb:92:
35:f4:51:ce:4c:6d:7b:b8:73:b0:6c:6d:82:52:e4:
d8:06:e1:75:49:30:65:da:ed:66:4e:d2:c8:b0:57:
58:f7:d0:96:6e:1b:a8:47:bc:e8:16:88:ca:30:16:
02:d8:be:11:f7:1a:a6:c9:ea:2a:9c:7e:30:f2:91:
c3:6e:71:d6:df:28:2c:46:48:05:6b:e4:c4:6f:c6:
93:7c:56:60:66:93:ed:fd:d0:84:9c:ed:39:39:ba:
dc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:F5:68:3A:23:E2:16:A7:66:DF:80:3F:DA:8F:13:54:E5:C2:0B
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:3b:61:75:ce:e8:b8:f8:67:e5:73:28:3f:a4:c5:dc:73:
25:4d:f9:b7:ed:54:11:e2:a7:46:e3:bf:ea:4a:f6:b0:aa:d0:
88:8e:6d:07:6c:ff:df:a5:bb:2f:c2:7e:84:c5:f6:09:74:d1:
ad:c5:50:3a:51:a2:10:ed:6d:be:cb:2f:9b:ea:bf:1a:67:bc:
0d:2f:cb:38:27:5d:57:7e:2f:a7:8d:6c:90:3b:18:d6:a5:12:
6b:19:4b:09:f2:6f:8a:6a:22:8c:ea:4b:eb:7d:17:52:5f:fb:
73:05:03:fb:89:91:32:b9:cb:f9:f2:c6:b2:c8:73:42:7c:49:
33:5c:5b:9d:a2:dd:24:88:22:96:8c:ae:71:17:b8:af:99:a9:
ec:32:43:f4:f6:39:63:2d:45:0f:96:2e:62:19:7c:be:c0:60:
a4:6c:6d:26:c1:a1:a6:19:37:cc:85:39:9d:fc:6b:72:9e:c4:
8c:18:82:a8:f9:a8:ba:a0:e7:33:5f:41:b2:06:da:3f:4e:8a:
f5:d8:9f:bd:38:63:a9:07:12:e4:1a:50:08:e7:d0:47:69:0e:
b2:27:5d:e1:57:ad:57:c4:72:b5:74:bf:e1:c1:65:47:74:2f:
d7:1d:cd:c5:69:65:ec:ae:99:19:48:3a:0b:eb:35:ac:a1:c5:
df:37:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:09 2025 by rpki-client