Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
File: PksGq_B-6qwRslmgj-Fx1mvSgw0.mft (raw, json)
Hash identifier: /kCwQHhhUUH/Tv9tdJqumEnInIrFSdn8jQwLqIOOrCc=
Subject key identifier: 21:E7:DC:2C:68:6F:5D:46:4D:9E:24:A8:95:6A:AC:08:D6:F9:CF:18
Authority key identifier: 3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
Certificate issuer: /CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Certificate serial: 019873E376826CC0C6843427022587E0214E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
Manifest number: 05AC
Signing time: Mon 04 Aug 2025 07:02:23 +0000
Manifest this update: Mon 04 Aug 2025 07:02:23 +0000
Manifest next update: Tue 05 Aug 2025 07:02:23 +0000
Files and hashes: 1: 75tUj24Sz1np7niKzvR12f9WWo0.roa (hash: 37+oOch5GIb73IinVFHvfdIOejO/FeSmIhgqOGWbqGU=)
2: PksGq_B-6qwRslmgj-Fx1mvSgw0.crl (hash: kLWtENYYIuOKRvf44G6vUzDywXZYJUtEKI7DPTXIf0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:76:82:6c:c0:c6:84:34:27:02:25:87:e0:21:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e4b06abf07eeaac11b259a08fe171d66bd2830d
Validity
Not Before: Aug 4 07:02:23 2025 GMT
Not After : Aug 5 07:02:23 2025 GMT
Subject: CN=21e7dc2c686f5d464d9e24a8956aac08d6f9cf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:12:f5:8e:08:37:77:c9:ff:2a:71:ff:a9:
1a:14:1f:77:df:c0:70:8e:7d:ef:b1:d6:00:fa:fb:
d5:56:d7:c9:e4:02:5f:8f:87:06:eb:48:c7:67:50:
ae:f1:32:d0:a0:8f:17:6a:95:5b:4b:9c:ee:cb:09:
6c:95:43:e2:d6:db:11:36:1e:68:fc:a5:37:34:62:
e3:6f:ec:df:34:09:a4:27:31:6f:84:7b:3e:60:c0:
aa:ba:3d:13:5a:01:2a:6b:63:22:b4:86:0a:eb:22:
c6:8a:09:f7:c9:b3:d1:7f:58:e2:89:2a:42:e8:c8:
b4:1e:44:4a:4f:5c:f9:de:7a:08:49:7e:9f:f8:04:
f7:88:52:06:e9:0a:2c:17:65:2d:dc:1c:80:dd:0b:
f7:61:66:c2:aa:4b:ae:4e:7d:1c:36:d4:27:fb:af:
e5:b7:30:4e:ca:48:56:73:f8:6c:ea:8e:61:03:40:
ed:2c:8c:34:84:e6:be:80:3b:41:41:61:f4:22:b5:
84:2c:01:86:a2:17:a1:c4:27:c6:3e:83:04:15:5c:
08:ed:8b:6b:1a:4e:a0:22:54:c5:4e:d7:19:31:97:
6c:b2:d3:04:9d:81:d8:b0:c4:ae:31:8e:dd:b5:ea:
68:8b:62:13:15:8a:fb:ef:23:06:af:b3:e4:34:7f:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E7:DC:2C:68:6F:5D:46:4D:9E:24:A8:95:6A:AC:08:D6:F9:CF:18
X509v3 Authority Key Identifier:
keyid:3E:4B:06:AB:F0:7E:EA:AC:11:B2:59:A0:8F:E1:71:D6:6B:D2:83:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PksGq_B-6qwRslmgj-Fx1mvSgw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/483487-2fc5-40f6-94f7-530177c02dcc/1/PksGq_B-6qwRslmgj-Fx1mvSgw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ea:4e:5b:60:00:7d:23:8d:36:92:96:4c:d8:13:f3:e0:ad:
0d:ac:fc:f9:8e:d8:a3:29:56:39:d4:3c:ed:cf:b3:a8:a3:83:
2e:da:a7:96:78:a8:48:06:ee:0b:fa:7f:34:f2:0a:0b:ea:36:
9a:3e:89:00:6f:a6:32:3f:7d:78:0f:1e:4a:fc:9d:4e:9c:47:
ec:15:6e:af:9a:a1:44:fc:d7:87:68:ed:6e:3b:49:89:2f:0b:
6c:51:bb:ca:c2:3e:32:5e:7a:df:55:b2:5a:78:0b:00:fb:00:
4e:dc:21:56:d0:5b:40:61:6b:77:3c:c9:21:ab:08:92:f8:31:
08:71:c4:5e:a3:be:5b:d9:08:66:09:da:2a:7a:67:9b:e0:d8:
34:bd:93:b8:77:52:44:de:ae:f9:d0:95:97:65:df:14:05:36:
69:30:1e:91:c0:07:69:23:5d:0a:9c:7b:b0:1f:2e:ae:e0:db:
0f:f2:04:15:dd:8b:89:f3:df:74:cb:d8:22:d4:3b:24:d2:20:
bb:c2:81:6c:4c:22:16:4b:d1:93:68:0a:f4:3d:b6:86:cb:b2:
07:6a:ea:d8:d7:56:b3:73:22:b2:e7:c4:7e:49:07:1b:c9:32:
59:7c:4a:a6:d5:aa:fc:78:16:4d:49:d9:d6:49:93:5c:8d:6b:
32:c8:05:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:34 2025 by rpki-client