
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File: Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier: Yrtq5yDaxMVxqM/TYtICFJDr1LNx131GRz1QqqFLB4A=
Subject key identifier: 96:4D:81:32:06:86:48:B8:A5:E5:6B:0A:EC:75:58:81:13:87:06:13
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer: /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial: 01988EEC743A5A8A256D7ACA541CD8774F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number: 124C
Signing time: Sat 09 Aug 2025 13:01:57 +0000
Manifest this update: Sat 09 Aug 2025 13:01:57 +0000
Manifest next update: Sun 10 Aug 2025 13:01:57 +0000
Files and hashes: 1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: 21cKbzLbVbiSb5fm62TxGV4LkpT1pi5V27ZRlnfyDKY=)
2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:74:3a:5a:8a:25:6d:7a:ca:54:1c:d8:77:4f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Validity
Not Before: Aug 9 13:01:57 2025 GMT
Not After : Aug 10 13:01:57 2025 GMT
Subject: CN=964d8132068648b8a5e56b0aec75588113870613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:08:6e:f1:fa:fd:60:95:52:26:b9:ea:5b:
d1:82:bd:a4:41:1a:ca:bb:09:26:16:df:8a:a3:e9:
7a:13:04:ca:a2:72:33:c3:f5:c4:ab:89:fc:b7:c0:
61:e4:77:b5:d3:ca:9e:60:f1:63:d4:5b:8b:15:aa:
1c:d7:c2:7c:e4:7f:98:64:30:4f:6b:77:5b:04:9c:
f0:37:aa:5a:48:24:df:2a:48:33:15:32:54:cf:42:
10:69:62:30:08:09:83:e3:9d:5a:d7:be:93:97:a2:
94:43:76:f2:9b:e7:12:94:b1:76:bf:f6:cf:14:7c:
03:b4:2b:24:9f:a1:af:97:48:3d:2d:ea:ea:4f:eb:
58:a1:2f:c0:f0:20:3f:1e:fc:40:d2:39:20:29:0d:
06:1c:35:2b:ad:28:13:2f:19:7c:2e:de:78:a8:aa:
d3:e4:53:7d:51:c4:17:9b:1b:bf:bd:2b:d3:1f:d1:
e0:f7:6a:70:e8:d8:4f:c9:22:4a:d0:0f:4b:c9:3e:
2f:a1:88:d0:5a:03:62:0f:58:5d:25:62:f1:63:eb:
74:5d:9a:ce:2e:98:aa:1b:7c:e2:4c:bd:b5:c5:3d:
62:b4:d3:f4:a8:15:b9:98:79:bd:30:4c:74:d7:0b:
2f:88:7c:4a:57:1f:b2:55:f0:a1:0e:00:aa:a0:6d:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4D:81:32:06:86:48:B8:A5:E5:6B:0A:EC:75:58:81:13:87:06:13
X509v3 Authority Key Identifier:
keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e4:42:fb:04:cf:db:ae:78:47:58:50:b7:d1:ca:f0:78:98:
1a:9c:89:b6:50:d4:5e:13:a4:44:de:d6:5e:3a:d7:a6:d2:a2:
0a:75:ce:b7:49:35:d0:df:00:e8:7a:31:bf:80:03:2e:b7:96:
46:71:34:56:b5:57:34:19:97:4d:b1:8d:b7:76:39:42:c5:56:
31:70:d7:d1:01:0d:0d:e3:4c:f8:78:33:e2:f6:2d:b1:bf:46:
5a:71:33:ed:77:3f:30:74:82:15:ef:58:49:aa:d6:d9:21:d8:
16:e8:43:21:7d:bc:0c:ca:c6:4b:dc:cc:47:83:b1:b4:06:91:
7a:20:ce:60:eb:ef:b3:df:60:49:c9:77:28:cd:7e:07:fb:c9:
86:48:1d:27:07:b2:62:13:4c:7b:6d:ce:06:15:d5:46:76:f3:
08:2d:ad:0b:cb:8c:03:6a:c7:72:df:64:2f:13:6b:22:49:58:
73:33:62:79:09:eb:43:ba:20:3b:b1:3b:ad:42:27:09:f9:d7:
69:6f:f6:63:fe:7b:a1:9d:7d:27:36:f5:eb:d6:36:6b:06:28:
d5:67:13:1f:69:83:a8:0b:21:12:21:e4:32:81:54:69:7b:1c:
68:92:03:fc:59:9d:3e:c8:68:2b:ba:9d:c7:03:9e:91:8a:db:
1d:85:f3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:37:04 2025 by rpki-client