Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
File: pqjzQ2_YPor2EPIWgImW6QrKx10.mft (raw, json)
Hash identifier: hUQ1jEgzaDSnffn4T56Hr0xja4kPIfCOAgci89eG40k=
Subject key identifier: 0B:0E:7E:FE:2A:72:E0:34:D5:8D:0A:E4:91:F5:FA:EC:BB:86:05:80
Authority key identifier: A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
Certificate issuer: /CN=a6a8f3436fd83e8af610f216808996e90acac75d
Certificate serial: 019872CFFFA6B1671BA9BFA1F349C14DD617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
Manifest number: 01D2
Signing time: Mon 04 Aug 2025 02:01:30 +0000
Manifest this update: Mon 04 Aug 2025 02:01:30 +0000
Manifest next update: Tue 05 Aug 2025 02:01:30 +0000
Files and hashes: 1: ZUpNPohL23tCs0p7RIJ5CSnq_nE.roa (hash: IdApViwu1d+gOIrjS2rsEi8/hl56lvmzjtXUhg292sQ=)
2: pqjzQ2_YPor2EPIWgImW6QrKx10.crl (hash: xdrDSvgqy0tQ6q4dGH776W3QrQfUkKfLADGH9w64+/s=)
3: s_VH1RJUenuP8OvNJaH6yu7OYsg.roa (hash: vyeEoRPPlhaqhjAq4VATA3B5K5D/1bqk7r9/7EELRFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:ff:a6:b1:67:1b:a9:bf:a1:f3:49:c1:4d:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6a8f3436fd83e8af610f216808996e90acac75d
Validity
Not Before: Aug 4 02:01:30 2025 GMT
Not After : Aug 5 02:01:30 2025 GMT
Subject: CN=0b0e7efe2a72e034d58d0ae491f5faecbb860580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:35:6d:4e:77:d0:c9:2f:ea:9b:04:c3:0f:
af:97:4f:e6:10:3b:fd:c8:9c:e5:a5:76:bf:b0:de:
31:1e:0d:60:92:16:1b:00:be:0e:2e:73:3f:9a:dc:
bd:35:20:70:04:fa:e7:19:8e:1f:3a:f2:7d:58:81:
e4:83:17:3e:14:89:27:ff:53:bf:1f:93:9a:0d:eb:
a2:dd:35:0b:e0:9e:a7:7a:dd:ed:4a:de:53:68:0d:
95:bc:db:9d:c5:33:14:d6:e3:9e:8f:bd:d4:98:36:
61:52:81:5e:be:73:d9:49:b0:08:5a:54:1e:c7:4f:
0d:da:3a:43:11:7b:59:25:61:5e:e8:d9:2e:d9:42:
57:f4:78:f5:35:36:73:5f:a0:ee:fa:45:8d:d3:57:
da:ab:d6:92:0d:4e:92:94:06:78:0e:5f:f7:0c:96:
60:94:17:88:f8:95:06:12:2d:8a:59:8c:87:60:f0:
b4:6b:27:e7:02:e5:0e:ea:4f:6c:13:33:46:a2:73:
9a:65:6d:eb:7e:65:18:7f:7d:d0:73:96:a7:93:0a:
39:5a:45:ab:7d:83:7a:09:c0:f9:61:e9:9a:f9:b6:
5c:53:6b:10:ab:10:61:f9:0e:49:f9:46:4d:23:dd:
e1:2e:49:77:9c:96:3f:86:bc:61:05:b7:48:85:92:
dd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0E:7E:FE:2A:72:E0:34:D5:8D:0A:E4:91:F5:FA:EC:BB:86:05:80
X509v3 Authority Key Identifier:
keyid:A6:A8:F3:43:6F:D8:3E:8A:F6:10:F2:16:80:89:96:E9:0A:CA:C7:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqjzQ2_YPor2EPIWgImW6QrKx10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5b1657-abf0-4d36-a892-abe5c8e2bad6/1/pqjzQ2_YPor2EPIWgImW6QrKx10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:46:b2:bf:34:a4:b4:52:be:d8:57:f0:0b:a0:fd:55:68:c7:
96:97:af:7a:64:29:cd:d0:a8:04:6a:94:88:e9:61:27:7e:97:
13:ac:8f:b2:bd:a9:10:8b:73:4b:c2:ba:1e:8e:5d:e0:54:4e:
aa:63:e8:3a:30:e8:7c:41:b4:3e:dd:82:5c:39:4d:fe:98:ab:
2a:c2:30:bc:60:71:b5:18:99:ae:d5:2b:4b:18:90:2d:7a:54:
6d:d9:2e:c9:b8:d1:ba:7f:d4:ba:46:0a:5e:42:18:dd:a8:83:
3a:41:05:a0:36:bc:a5:26:ad:a6:b8:c5:37:52:f8:6f:f1:73:
a1:56:ad:02:ee:77:81:5d:d9:a9:d8:dc:dc:91:88:55:2a:66:
e3:b9:35:fb:60:42:38:4e:e4:91:bf:ca:93:15:dd:3f:90:86:
b6:60:80:5d:72:b8:81:dc:84:8d:02:23:4e:5c:f3:c7:e6:57:
52:77:ab:95:f7:95:99:a1:77:39:22:dd:c3:cd:a7:1a:72:3d:
d3:cd:c6:12:0d:99:f6:9c:9c:01:7c:17:1e:58:8c:d2:b0:70:
a4:f2:43:15:47:fd:d9:18:c0:ec:da:3d:74:98:eb:ad:6d:98:
91:6b:3b:c0:b3:89:c2:65:ec:60:fc:21:47:a0:b5:57:3a:5f:
6a:e2:1e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:54 2025 by rpki-client