Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.mft (raw, json)
Hash identifier: l7+1j0FpWv/7Fvso3H4+tM2zvpeb2GdHyahk+ZDc+cY=
Subject key identifier: AE:3E:30:21:6C:47:32:F6:A6:CB:82:B6:FA:1C:76:84:78:F5:87:BC
Authority key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Certificate issuer: /CN=a674015d509b5d4f396ea363369e9d74ffad7593
Certificate serial: 01987450425B025C75F429B05FFDFA389913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
Manifest number: 14B0
Signing time: Mon 04 Aug 2025 09:01:13 +0000
Manifest this update: Mon 04 Aug 2025 09:01:13 +0000
Manifest next update: Tue 05 Aug 2025 09:01:13 +0000
Files and hashes: 1: pnQBXVCbXU85bqNjNp6ddP-tdZM.crl (hash: oS0JXR1Cm5HtJ8RDN55gpUHiwUuL7ervOVUPDH0+2mQ=)
2: ytlPgasGVjygeToAnL_7qGL6niY.roa (hash: 4pWkNfB/a5sc8sNCH66lYgOc8aQwiUY9Cf8vuGjBpFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:42:5b:02:5c:75:f4:29:b0:5f:fd:fa:38:99:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Validity
Not Before: Aug 4 09:01:13 2025 GMT
Not After : Aug 5 09:01:13 2025 GMT
Subject: CN=ae3e30216c4732f6a6cb82b6fa1c768478f587bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:7d:1a:05:9a:24:55:f3:20:d8:49:ba:78:
a6:70:37:76:7c:4a:b3:a7:0d:23:a1:78:50:78:dc:
9f:72:ee:68:e0:0f:5a:2f:cc:72:83:87:aa:f2:de:
db:79:45:e4:59:da:0a:e0:80:22:cc:a0:ad:5c:b2:
11:cb:04:c1:9e:5d:c7:ee:ff:5d:f4:0a:93:30:2f:
44:e2:a4:8f:47:f6:81:a5:92:c8:00:6a:1f:2a:7c:
7d:de:25:9a:ba:d5:f6:f6:cc:a4:3d:d9:5d:16:21:
2f:24:ba:53:6a:56:50:62:eb:f5:15:a0:05:3c:d6:
ba:1c:62:6b:8c:f0:5d:ba:40:69:86:0c:c5:81:ba:
27:f7:02:17:6d:d9:64:9c:c8:84:dd:86:8a:ed:05:
f0:0f:d6:cf:f4:7d:8f:ba:74:41:c9:f3:b8:72:44:
eb:a2:59:15:38:23:3d:1c:68:df:2c:ae:62:05:c0:
b0:43:92:de:ab:cf:69:f1:f2:9a:5e:1e:ea:49:64:
56:86:61:be:58:88:bb:14:ce:87:ea:89:65:44:e6:
ae:37:03:02:dd:34:79:0c:82:65:a5:93:1e:5e:a1:
76:73:cc:fe:60:33:34:fa:45:6e:9b:05:69:aa:6d:
2e:9a:16:2b:c3:2a:81:24:32:6a:51:09:8e:2a:3b:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3E:30:21:6C:47:32:F6:A6:CB:82:B6:FA:1C:76:84:78:F5:87:BC
X509v3 Authority Key Identifier:
keyid:A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:30:bb:6f:08:90:7e:93:dc:91:11:83:48:25:2f:5f:8e:c0:
b8:33:e5:bf:7b:3c:aa:1c:58:9b:8d:5a:fb:a4:7b:b5:fe:f7:
2b:0a:e8:1d:6d:4a:d0:7c:cf:d4:f3:0b:c4:67:da:2a:4b:10:
3a:ee:5a:19:8f:b0:69:90:1b:a3:19:52:b9:19:77:41:b3:3d:
3e:bd:24:a9:ea:98:1b:50:4c:8f:fa:5c:c1:33:b8:7c:9c:3f:
6d:52:2c:59:74:3b:2b:c4:1c:a1:4c:c9:a3:e0:60:a1:83:f2:
4e:52:d8:60:ce:75:23:8f:9c:88:aa:16:18:74:46:60:13:2e:
7d:b9:b6:ea:35:25:94:8b:25:5a:1a:cd:29:24:8b:af:d1:40:
87:ed:a8:c8:10:d1:3d:cd:b9:6a:81:bf:c8:25:dd:0b:60:61:
36:ab:fb:d5:6b:d8:f5:e8:d6:f0:b9:45:af:fb:f6:9b:f9:e3:
00:64:cb:58:78:0e:4c:eb:bf:e8:e8:4c:c4:c6:72:9a:87:96:
b2:cf:8f:05:53:82:48:dc:dc:7e:b3:f1:cc:06:35:c0:a8:78:
41:35:80:eb:2f:5d:0f:97:48:b7:f3:5f:3c:6c:a5:1c:9b:00:
88:dd:9f:66:50:32:8e:6e:96:c6:71:80:5c:ef:85:06:ef:0b:
a6:f8:f6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:23 2025 by rpki-client