Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
File: PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft (raw, json)
Hash identifier: SnuihY69f5ES8zwyRtE+Q9u474IMRe8viQ2XxsyIPGM=
Subject key identifier: 89:4B:47:47:79:7E:43:64:59:E8:6F:3E:AD:CA:82:CA:93:8F:2B:EB
Authority key identifier: 3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
Certificate issuer: /CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Certificate serial: 019894EDE315FF4511043535BE53FA8D9F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
Manifest number: 0C3A
Signing time: Sun 10 Aug 2025 17:01:14 +0000
Manifest this update: Sun 10 Aug 2025 17:01:14 +0000
Manifest next update: Mon 11 Aug 2025 17:01:14 +0000
Files and hashes: 1: PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl (hash: Qvs6B/d+bmFvO6LaGagT5j1cRX81Xf6PYrG7fMNLaZ8=)
2: dJvnPDYPLo4Sslu_Zmnf2lx_js4.roa (hash: 5Msv4aPMo6ReE0YmQsW6vQo0j0v5HFcFjEhrex1AtOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:e3:15:ff:45:11:04:35:35:be:53:fa:8d:9f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eabe028f3be7ee072885d02bbd7b62a652425ef
Validity
Not Before: Aug 10 17:01:14 2025 GMT
Not After : Aug 11 17:01:14 2025 GMT
Subject: CN=894b4747797e436459e86f3eadca82ca938f2beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:8c:ba:d7:fc:0b:79:57:61:17:a4:c8:22:
5f:60:85:7c:94:0a:63:74:6d:a8:93:92:9a:45:eb:
69:73:3b:db:9a:38:b4:2d:1e:79:cf:fc:80:f4:64:
7a:2d:4b:9e:48:3d:d2:af:bb:86:26:ab:b6:3c:23:
89:e1:86:02:22:b7:ab:08:1e:4b:f8:4e:aa:50:e1:
da:ad:4e:ed:9f:d9:a4:c3:4d:57:d7:ac:d4:77:e8:
1d:60:51:eb:6e:08:18:74:30:c5:cd:6f:2a:a7:ed:
e3:c6:3b:b8:d4:aa:ac:b1:39:fb:14:96:bf:03:c7:
2a:ce:65:50:dc:14:13:3a:2d:45:f5:20:00:d2:87:
df:bc:f4:8e:97:1a:f0:a9:88:7a:02:d1:4f:93:b2:
70:15:32:b1:9c:5e:e2:23:fa:de:7e:34:67:c8:3e:
74:bd:04:ad:cf:b0:10:ae:b7:24:36:57:32:0f:3e:
75:0c:57:8c:cb:2b:3e:cf:e5:b2:89:7e:e8:49:fd:
2f:d9:07:85:c4:ed:ac:47:e7:31:95:22:c8:e0:1b:
1d:db:f8:ad:45:64:47:c0:dc:e6:50:4c:00:8f:21:
47:3c:45:fa:81:3b:3c:c0:68:ca:58:21:76:f2:a1:
59:ec:4d:58:07:d8:fa:e1:64:29:45:0e:e2:59:fc:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:47:47:79:7E:43:64:59:E8:6F:3E:AD:CA:82:CA:93:8F:2B:EB
X509v3 Authority Key Identifier:
keyid:3E:AB:E0:28:F3:BE:7E:E0:72:88:5D:02:BB:D7:B6:2A:65:24:25:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqvgKPO-fuByiF0Cu9e2KmUkJe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/2ad4fa-bd7b-407e-b25a-df7410b2d275/1/PqvgKPO-fuByiF0Cu9e2KmUkJe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:47:90:1f:2f:fb:dd:ba:53:d0:21:68:00:f1:ec:20:76:
54:3f:6d:7e:3c:18:3e:83:1e:66:a2:fc:7d:3b:18:49:98:35:
0f:3a:34:e0:f2:60:3d:cd:31:44:a1:09:47:a4:c0:24:a8:a6:
64:ed:c0:8e:7b:96:a8:08:43:71:f0:5f:f6:be:05:a3:c8:01:
3e:b1:9e:31:1a:83:fc:a9:37:67:7d:9f:51:16:4a:16:df:51:
d2:b5:e2:fe:df:e6:86:32:42:d1:88:3a:b7:89:d6:41:f2:58:
71:86:05:35:c3:d2:d9:62:8e:17:32:21:d3:1b:a8:f4:d6:34:
50:38:a0:cd:bb:5d:c9:9b:9e:9e:3c:d4:9b:4c:15:3f:bd:aa:
8c:d0:a1:0e:6e:13:9b:2b:1e:51:af:73:f9:b9:62:0b:62:cd:
1d:a0:b2:ee:d8:28:0f:44:65:79:eb:01:c0:82:81:62:ea:e5:
f5:7d:7c:b2:93:8c:89:b4:36:15:1d:f1:c1:3e:87:da:72:50:
f0:05:22:14:f8:18:03:45:39:5b:c4:4a:53:dc:58:5e:81:20:
1a:24:66:27:72:d0:f7:e0:4a:43:30:4b:00:93:ad:8e:5e:28:
d8:fc:36:b7:31:b5:be:bd:8f:e3:25:09:54:46:f6:ec:d3:da:
14:18:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:44:57 2025 by rpki-client