Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: G8kDaGkzkI9BSeeyfb735VMVXS/ir6C8H5BqRDef/yQ=
Subject key identifier: A6:F4:37:A7:30:CB:11:EE:84:C7:4D:DE:DE:83:EF:66:19:77:2B:1A
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 019873E2DCE4A3F6206FED5834CC3F12FD55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1621
Signing time: Mon 04 Aug 2025 07:01:44 +0000
Manifest this update: Mon 04 Aug 2025 07:01:44 +0000
Manifest next update: Tue 05 Aug 2025 07:01:44 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: nJ+E4qhcoO3wRjWE4co/10O4HMEmev+oFOYjotwfYW8=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:dc:e4:a3:f6:20:6f:ed:58:34:cc:3f:12:fd:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Aug 4 07:01:44 2025 GMT
Not After : Aug 5 07:01:44 2025 GMT
Subject: CN=a6f437a730cb11ee84c74ddede83ef6619772b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:f4:7f:00:1e:f5:c3:08:e2:40:7f:3e:51:
2f:f0:00:7d:73:b2:70:6e:0c:12:64:f3:0c:98:e6:
ac:b4:57:e3:17:90:c1:d5:f2:7b:7f:38:af:88:e5:
e5:31:af:06:f9:78:16:76:5b:ba:5f:9e:20:74:0d:
c0:e4:16:1c:55:4e:c0:f9:b5:07:74:e7:f4:2c:b0:
61:64:ad:ab:a9:92:da:e6:99:7e:08:28:bb:5b:9d:
c6:a8:f0:59:99:82:1a:84:2d:d4:4a:b6:59:cc:ff:
5d:b7:49:88:c5:ef:79:c3:f5:60:61:2a:62:08:4f:
df:53:41:9d:4d:ce:1b:d0:89:57:ae:85:e6:e9:fd:
ce:94:08:e8:7b:2a:1f:d8:aa:fe:32:d4:46:84:43:
b9:da:33:3a:02:0b:fc:1b:53:88:1a:46:98:f2:10:
18:0c:0b:f6:f6:f9:00:6b:ec:16:a6:89:d0:76:45:
6f:a9:3f:08:fd:bc:82:d1:5f:7c:c0:f0:0c:da:68:
99:78:41:2a:35:9c:85:84:8a:16:1c:93:97:86:74:
15:c1:8d:7c:9a:8d:85:c9:c1:3d:ba:0b:33:5a:04:
cc:70:6b:08:55:88:b0:e3:b1:d2:37:e2:07:65:ef:
e2:0b:06:7b:51:d0:a2:80:6a:0e:58:fb:80:62:44:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:37:A7:30:CB:11:EE:84:C7:4D:DE:DE:83:EF:66:19:77:2B:1A
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4c:0a:a7:0f:e5:4f:22:71:22:39:a0:29:56:c1:b3:9a:50:
1c:3c:6a:6d:d4:82:2d:b5:c7:cb:f4:29:35:59:a8:ad:59:f3:
5c:b2:81:b4:49:90:52:83:76:b9:28:d3:7e:fa:cf:a1:59:3f:
f7:eb:02:f3:a0:65:7b:86:04:18:44:eb:65:ad:a0:d5:6c:8b:
9e:d0:9e:60:18:ca:01:f3:e3:6d:b1:ef:d3:00:a3:ba:04:ee:
8c:96:90:03:10:a8:06:b9:5d:93:1e:a5:b6:10:6b:b4:34:3b:
a2:8a:43:50:19:c7:6d:d6:64:cb:ff:47:44:de:80:6b:1d:28:
38:60:ea:62:51:e1:a5:33:97:04:f5:fa:e9:cb:1a:cf:d5:d1:
ea:a4:7f:50:ef:83:11:49:40:30:bc:93:26:34:9b:d8:b4:19:
41:b3:3d:95:aa:6d:14:4a:45:ad:1b:8f:7f:ee:5d:ea:af:40:
0a:f0:bd:67:f8:72:64:01:de:58:23:a2:21:75:68:c8:4f:89:
f2:78:e8:45:14:e3:f1:b0:ea:1a:79:c8:2d:83:c7:ee:25:3d:
82:c9:5b:8f:01:a8:88:0d:41:b9:c6:cf:58:35:cb:bd:05:91:
32:82:da:88:c4:c2:04:cb:d6:58:da:18:25:5d:12:4b:26:f5:
ed:5d:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:13 2025 by rpki-client