Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
File: pqxtBp2PtzL0_pK04TzX3E05OkI.mft (raw, json)
Hash identifier: 3BG7Xc4jB1g9alc8l/uZUi+o67/QVkMUSS4vm+8ymLI=
Subject key identifier: 4D:7B:FD:C5:B4:F7:10:58:AE:A2:92:CA:6B:BC:9A:1B:49:4F:D0:B2
Authority key identifier: A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
Certificate issuer: /CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Certificate serial: 01987C096D2E73AF46E030F2F242FBEDC254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
Manifest number: 0B8E
Signing time: Tue 05 Aug 2025 21:00:49 +0000
Manifest this update: Tue 05 Aug 2025 21:00:49 +0000
Manifest next update: Wed 06 Aug 2025 21:00:49 +0000
Files and hashes: 1: kORzGbUwfQz_reUfKxE-VKML1Ko.roa (hash: LJNSK27C7NQtNI1BCy3DsB/OzJxofkAzOY3Bw0ai+Lk=)
2: pqxtBp2PtzL0_pK04TzX3E05OkI.crl (hash: qA+dnO9Z9S7mkZJr2pDwZaZEnx9FjgT/v2de+1VCeSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:6d:2e:73:af:46:e0:30:f2:f2:42:fb:ed:c2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ac6d069d8fb732f4fe92b4e13cd7dc4d393a42
Validity
Not Before: Aug 5 21:00:49 2025 GMT
Not After : Aug 6 21:00:49 2025 GMT
Subject: CN=4d7bfdc5b4f71058aea292ca6bbc9a1b494fd0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:11:33:2a:b7:b6:3f:2a:c9:59:5b:35:6d:
7f:02:d5:69:6c:9b:c8:02:08:d5:2d:09:83:ff:19:
cd:0a:ed:60:f0:1e:7d:24:88:4d:ec:a7:07:fa:9d:
25:d2:ef:da:d1:53:51:8c:7d:d7:f5:f9:31:62:18:
84:6e:c4:1a:8f:44:81:2d:b0:51:96:30:a4:60:42:
32:2f:a1:a6:1f:57:1d:15:8c:07:e0:62:bf:08:39:
1c:c4:a1:49:51:4c:fd:2c:b4:c0:e2:19:78:f7:a3:
c7:2d:88:d1:36:d9:b3:2f:8d:bd:65:0a:4c:9a:fb:
a0:67:63:09:5c:79:b4:49:4e:fe:21:d0:75:61:eb:
3c:b0:71:cb:cd:cc:98:1e:97:bf:75:95:6f:e3:69:
f1:4e:7e:f5:c8:5e:99:cc:9b:84:df:0f:bc:36:88:
fc:22:cb:31:bf:af:bf:c8:b6:4a:91:6b:32:76:0a:
d5:b0:90:8d:25:cd:f5:df:89:75:31:ce:e4:7c:6c:
90:e7:7a:4c:67:27:c8:2a:ae:61:2b:77:ad:fc:02:
17:7c:ca:d2:f2:2c:0a:44:c3:3f:8a:c5:90:89:ee:
09:9a:03:c4:df:b7:e1:b0:09:5f:9b:59:c5:c8:b8:
8c:b1:a4:ca:a8:e3:4b:19:5a:50:19:82:6f:47:d7:
84:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7B:FD:C5:B4:F7:10:58:AE:A2:92:CA:6B:BC:9A:1B:49:4F:D0:B2
X509v3 Authority Key Identifier:
keyid:A6:AC:6D:06:9D:8F:B7:32:F4:FE:92:B4:E1:3C:D7:DC:4D:39:3A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqxtBp2PtzL0_pK04TzX3E05OkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c09f02-7510-42ea-b281-bfa03a668577/1/pqxtBp2PtzL0_pK04TzX3E05OkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6d:55:49:53:f5:77:f7:8a:ae:c5:4c:98:2a:ae:a2:1d:af:
9f:35:91:5b:a8:b3:47:78:d0:e8:80:d6:26:9d:d8:2a:3c:8c:
e9:e1:21:f7:4e:27:6c:3b:0f:df:8d:2c:35:eb:b5:77:99:0d:
70:53:a8:39:f7:60:84:dd:5f:c0:1e:9d:82:4d:e0:0f:01:a9:
df:3c:e8:ba:43:3d:83:9f:43:99:2f:ab:16:fa:77:be:10:f3:
68:5f:68:4b:fc:bc:25:20:28:b3:52:00:2d:66:70:2f:e3:33:
d0:8c:45:77:06:dc:11:90:39:97:f4:de:ae:55:e7:38:3c:0a:
3f:af:d5:25:b1:45:b8:12:be:0f:68:1d:6a:fe:c5:80:a6:05:
e7:af:5e:d0:a8:fd:79:8c:39:c1:ea:ad:f7:0c:b4:c5:35:75:
70:4f:ef:61:3b:fb:79:97:3d:9f:40:68:4b:13:c7:4c:bb:2c:
2d:f8:1f:d7:c8:d4:fa:10:81:bd:71:29:04:3c:4d:fc:f4:cd:
4c:4c:c0:eb:54:80:5c:2b:45:29:fb:d4:8e:31:a7:60:11:b5:
16:23:83:96:0b:d8:82:1d:9e:d0:60:89:55:ae:1a:bb:19:67:
d4:ec:ba:e5:55:d6:da:93:ec:9a:37:20:8b:73:0e:66:d4:a3:
06:fb:1a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:22 2025 by rpki-client