Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
File: pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json)
Hash identifier: HqACikfKOypq0GlAJ02IhSAQehlXObOHZcWwvNJEMQk=
Subject key identifier: 23:F2:BF:AC:FC:23:5F:06:1F:47:39:58:D7:7A:68:47:97:93:89:B0
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Certificate issuer: /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial: 01988167EB028121ABD0EB3E6036DF738AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
Manifest number: 0781
Signing time: Wed 06 Aug 2025 22:02:07 +0000
Manifest this update: Wed 06 Aug 2025 22:02:07 +0000
Manifest next update: Thu 07 Aug 2025 22:02:07 +0000
Files and hashes: 1: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: EkLGxjr3OJkvJjn/mjDn+J831DwkddvlxcGg9wYJfhs=)
2: wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa (hash: uBYBylJRjDgsdsAh3Gf2WJ38oblmNaRqlj9rvalMb+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:eb:02:81:21:ab:d0:eb:3e:60:36:df:73:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Validity
Not Before: Aug 6 22:02:07 2025 GMT
Not After : Aug 7 22:02:07 2025 GMT
Subject: CN=23f2bfacfc235f061f473958d77a6847979389b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:b7:7c:6f:53:52:9e:8c:b2:13:ec:88:f9:
08:26:1c:78:f4:51:1c:fc:4a:70:69:97:e5:75:9c:
f9:65:18:b2:8c:1e:16:26:d2:3f:d9:6d:c6:f5:f3:
1e:b5:3e:3c:a6:35:83:95:30:ba:72:fa:c5:90:ee:
5b:1f:c4:36:ac:0b:e3:20:7d:56:c9:76:74:07:d2:
a4:a4:61:43:f8:4c:45:32:ac:f3:b6:53:02:44:4d:
71:2f:9a:a1:1f:2a:ed:01:e8:3c:cb:f9:e6:56:f2:
d1:36:47:af:62:87:75:1c:a3:cc:04:db:25:55:ca:
db:9d:07:b6:74:b4:ed:a7:9e:a7:26:1c:a5:a8:fe:
27:d0:62:cf:4b:f9:5b:9c:33:bc:2e:cc:14:f4:65:
0c:74:ea:ed:16:b8:ec:cb:c4:28:50:bb:f9:65:aa:
00:aa:ba:b1:11:97:14:79:42:f6:d6:94:a3:94:3c:
8a:93:3d:83:9e:c1:56:b8:a8:bb:ba:2b:d8:5f:a3:
fa:ee:66:63:ce:9d:11:98:b9:bd:5d:69:9f:0f:ce:
36:3a:ec:15:2f:fc:b7:b3:74:7b:90:cd:09:67:46:
b2:bd:df:24:02:30:1d:9d:62:dc:72:9f:f9:4a:fc:
51:d6:37:bc:e9:6e:34:86:14:a5:bc:80:ae:8d:24:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:BF:AC:FC:23:5F:06:1F:47:39:58:D7:7A:68:47:97:93:89:B0
X509v3 Authority Key Identifier:
keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:33:f2:02:2e:2e:7c:c6:56:e8:f5:65:a6:9b:e8:33:57:8f:
db:60:09:11:cb:76:2c:4c:9f:a2:cf:41:de:30:0e:1b:69:5c:
c6:cd:e5:98:f0:37:fb:5d:37:57:3b:ed:8e:45:3a:05:a5:ea:
f9:e7:27:19:c0:9b:05:b9:3f:36:9b:9c:b8:f7:8a:3f:42:ac:
56:fd:76:92:fc:52:0d:3f:07:f4:9d:aa:7b:4b:9c:a3:8e:fd:
b2:92:1f:37:2a:9f:22:54:75:ce:ad:05:d5:64:46:76:9a:68:
88:a3:7a:49:e1:bf:db:36:b3:05:d7:11:4e:6a:48:5a:79:5e:
81:1e:55:08:e2:46:5f:1e:6f:22:43:43:8a:a7:90:d3:94:2a:
31:93:4e:10:e4:f6:5c:0f:9f:f1:d7:cf:6c:03:55:7b:a9:ea:
06:3d:3d:cc:90:9f:4f:2a:a1:88:f4:42:73:28:d2:6a:f6:94:
d3:5d:01:42:b7:6e:98:0a:db:1d:c7:22:45:16:bb:6a:73:e3:
e9:88:3d:d7:86:9d:08:cc:96:3a:65:58:1b:cb:af:ce:50:a2:
3e:03:92:b6:12:b4:73:9d:bd:41:bd:d8:ad:0a:19:dc:31:84:
a0:97:0c:fe:38:98:bc:da:7c:ab:9e:43:57:1b:31:ef:88:57:
6f:83:32:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:27:11 2025 by rpki-client