Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: +eKe/wEvQluyw0Y/mSSx1V2KK3Ok87mB5wzBA26f3Yw=
Subject key identifier: 4E:BC:E8:02:23:67:BC:D8:51:F6:71:82:29:33:47:9C:89:EF:18:AB
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019894B630FA896BC0BB3BCBFDDC3A4D94F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 16:00:24 +0000
Manifest this update: Sun 10 Aug 2025 16:00:24 +0000
Manifest next update: Mon 11 Aug 2025 16:00:24 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: 2ZmllAK0Ge1Z42ksqgDKbftYeJqQqsTtxP4H9n7fRpA=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 16:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:b6:30:fa:89:6b:c0:bb:3b:cb:fd:dc:3a:4d:94:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Aug 10 16:00:24 2025 GMT
Not After : Aug 11 16:00:24 2025 GMT
Subject: CN=4ebce8022367bcd851f671822933479c89ef18ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:1c:3d:00:18:3c:11:6e:3e:77:f8:74:73:
47:44:87:7e:2b:6d:ed:68:b1:1e:25:f8:ae:4d:20:
22:a3:b4:1e:ea:8e:ab:1b:43:f6:58:e5:18:72:22:
a1:22:e5:aa:a3:cc:81:7f:a9:39:bc:05:64:5f:b9:
70:66:1a:7d:ef:c9:70:8f:d9:54:94:fb:8d:ca:08:
b4:7c:34:e8:7d:81:1d:6c:b9:0a:19:f4:60:21:59:
c7:b4:b0:90:50:59:79:de:ae:9c:90:03:22:b2:c6:
58:aa:89:62:3d:fb:82:80:eb:15:08:df:1f:04:e1:
0c:df:d4:0e:1d:0e:b7:f0:95:28:d3:54:aa:ca:a4:
46:70:b1:2a:00:f4:6f:91:3a:0b:05:67:ef:82:88:
fd:af:9e:47:c3:a4:d4:bf:8f:4b:18:34:ad:71:23:
b1:a3:49:ad:61:b7:b1:78:a5:58:ec:ff:d6:08:b3:
65:98:4c:f8:51:d1:b6:74:ee:42:59:7d:33:ca:65:
c8:be:2b:75:98:6b:59:b8:b8:83:00:dc:9b:00:ea:
51:d0:4a:c1:62:93:be:44:8f:18:63:14:f5:f4:7a:
f4:77:00:27:e4:71:74:50:fa:33:f5:27:f7:36:f4:
3d:16:4a:c7:13:20:e2:b3:16:71:9d:f9:ff:50:df:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BC:E8:02:23:67:BC:D8:51:F6:71:82:29:33:47:9C:89:EF:18:AB
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cd:c4:63:cf:31:bb:94:d6:2c:a0:4f:8e:23:58:f5:1e:63:
ba:f5:64:27:bd:44:c6:1b:25:53:c6:1f:cf:37:9c:86:72:c8:
1c:11:e6:81:16:9b:e4:78:3e:d9:dc:27:64:38:b4:73:50:58:
93:a4:8b:45:f7:4e:ee:b0:e6:03:f0:6a:61:90:79:cd:0c:1e:
11:ba:5b:d4:b8:95:ac:db:4c:26:5a:7f:95:6f:d8:af:39:c9:
c9:c3:61:74:5f:15:10:a2:11:75:94:7f:17:e3:67:fc:89:cd:
8d:2d:ee:a1:0e:66:4d:99:1d:01:79:6a:f5:3f:63:88:95:f3:
5f:3a:bd:dc:93:1d:a8:2c:99:84:63:71:e3:fa:e4:b9:31:7a:
65:41:21:ad:01:eb:d1:80:1c:e6:24:8c:6d:9c:4b:ce:13:5d:
6c:43:6b:a6:ff:c6:b4:81:0c:73:be:d8:67:fd:ab:d6:08:c0:
33:b9:52:3c:4d:20:69:8d:8f:5d:fa:20:b9:3c:62:48:14:25:
d0:4f:67:0a:64:7f:d1:db:cb:70:00:c3:15:11:a3:e3:c7:96:
62:ef:9c:ec:d4:96:f4:fd:6f:80:e1:ce:e6:6f:d0:4a:00:18:
b2:3c:54:fe:75:0e:34:07:88:6f:73:7f:78:24:12:f5:c8:27:
9e:00:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 02:10:38 2025 by rpki-client