Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json)
Hash identifier: mejY1aVPBF13qeuwJcClNsTv8Yt+LaUNNxbwzyxkkgU=
Subject key identifier: E8:75:7C:C7:1B:21:F0:A3:37:AC:14:5E:FB:F4:EE:B5:6A:BF:3D:04
Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Certificate serial: 01987E2EA65F16A50EEFB89EFD734404E760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 07:00:42 +0000
Manifest this update: Wed 06 Aug 2025 07:00:42 +0000
Manifest next update: Thu 07 Aug 2025 07:00:42 +0000
Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=)
2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: kFQBNbrxaPntgiCXGW9iW5pudAcCrCxIVM5FcXHj4y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:a6:5f:16:a5:0e:ef:b8:9e:fd:73:44:04:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a
Validity
Not Before: Aug 6 07:00:42 2025 GMT
Not After : Aug 7 07:00:42 2025 GMT
Subject: CN=e8757cc71b21f0a337ac145efbf4eeb56abf3d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:05:b9:c1:08:60:a0:52:45:c7:4c:cd:34:
68:9d:fc:e9:58:3c:06:78:b9:1d:dd:5a:b6:2e:2b:
c8:9a:a7:93:21:19:df:5e:e9:ce:fc:18:35:48:4b:
a0:5f:30:12:e9:9d:35:1c:2b:36:69:33:5e:69:37:
a0:93:f0:51:97:f5:24:66:e5:02:d3:2a:72:37:e2:
85:85:3a:8b:fe:03:7d:17:bc:9b:be:ae:7e:18:17:
11:3a:e3:1b:9d:92:1f:84:90:c6:2f:a9:61:9c:79:
1b:90:0c:99:b1:03:9a:31:9b:59:6f:19:4d:0b:84:
f7:65:da:46:3b:98:ed:e7:14:2a:c9:1c:f7:67:35:
0e:97:d1:1c:8b:17:8c:bf:0b:cc:40:f2:41:61:e1:
6a:24:17:97:ab:e6:e0:2d:27:5a:0a:6b:d9:06:08:
33:48:90:3a:cd:1c:f7:ad:98:21:3c:b9:05:22:5c:
99:b3:d5:85:27:a5:e4:19:3e:e9:70:28:b2:b6:df:
d1:5f:cd:38:30:3e:d5:17:cc:c3:78:3a:84:e5:61:
a7:2d:69:09:82:3c:6d:42:81:27:09:3f:ad:9f:4a:
37:a0:c8:50:07:ca:f0:b2:bb:70:ac:c9:08:42:37:
ba:31:7a:0b:43:ad:d7:38:b1:90:22:42:56:31:44:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:75:7C:C7:1B:21:F0:A3:37:AC:14:5E:FB:F4:EE:B5:6A:BF:3D:04
X509v3 Authority Key Identifier:
keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:58:69:69:52:49:3b:57:07:1d:8b:15:a0:40:b4:e4:30:86:
54:cb:21:d7:55:e4:82:e0:be:ba:60:98:cc:7e:11:6c:2a:5d:
f5:53:b5:bb:13:df:b4:ac:0a:d9:d6:e3:f0:49:18:c1:3d:e9:
68:cc:53:e9:8a:9e:ab:7d:47:82:3a:cf:04:77:21:28:92:cb:
4a:96:12:79:a8:9b:85:84:ea:e5:98:3a:bd:b0:10:1e:c1:e5:
33:03:74:e2:d5:38:9a:e1:ab:b4:5a:51:89:05:5b:12:f4:10:
cb:6a:06:3a:d7:73:6b:89:7e:c8:fc:fc:12:7a:4e:df:e6:e0:
ef:8f:15:fb:30:9d:a5:2f:66:80:61:f0:4a:10:0c:f9:59:4b:
8a:8b:0c:3a:b2:a1:cf:1a:94:36:98:ae:f9:6e:29:69:3e:ec:
e8:e7:3b:e8:b0:b1:70:31:98:e2:bf:a1:89:d2:40:d7:52:38:
c5:21:c9:21:93:06:45:44:9b:a7:ab:11:6c:c7:bc:19:60:ea:
d1:da:ad:c6:7a:c9:a4:df:ec:1f:0b:d4:20:8d:48:a5:37:0f:
df:b2:64:31:1a:50:6b:7e:0f:5c:a8:b0:ac:e3:19:57:78:d3:
7b:fe:0c:6d:8a:a8:56:af:71:da:21:c8:dd:2d:e1:6c:2d:30:
ea:ac:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:18 2025 by rpki-client