Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File: PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier: 5ky9Mieyyh/WhmKReA29pZk25VMKhY3DpfM2D11aniQ=
Subject key identifier: AC:77:9B:DA:C0:DB:5E:02:DB:18:D9:5B:15:E0:25:02:AA:EE:B2:D3
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer: /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial: 01987C7837EEEF9DABA75F95AA358E3123C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number: 088D
Signing time: Tue 05 Aug 2025 23:01:50 +0000
Manifest this update: Tue 05 Aug 2025 23:01:50 +0000
Manifest next update: Wed 06 Aug 2025 23:01:50 +0000
Files and hashes: 1: DRXIRPlz989IQESya6WStEPwwfI.roa (hash: vzHP7wdlF/pn8v84Pbfgox37vxRmFYAJNGZAwD+DkvA=)
2: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: fmvmexGQq/Mk85evns+aMQZmlj3eMAgVGM2eVkdAf9w=)
3: QWM4nrBr-pa9JzWD2Zz8wHHbmCU.roa (hash: VKweVNYicugh0mCYY3yIR2LnHnKsWIZPY+G4TQfXJ6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:78:37:ee:ef:9d:ab:a7:5f:95:aa:35:8e:31:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
Validity
Not Before: Aug 5 23:01:50 2025 GMT
Not After : Aug 6 23:01:50 2025 GMT
Subject: CN=ac779bdac0db5e02db18d95b15e02502aaeeb2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:91:fa:96:15:91:c3:65:73:27:7f:fa:e4:c1:
b1:4d:75:f4:0e:bd:e3:8f:fe:58:21:6d:61:b2:03:
79:ec:08:25:ce:16:86:81:46:51:1a:da:c9:8d:89:
4e:37:08:5a:cd:88:2c:d7:4e:24:55:d9:67:74:ff:
16:0e:83:7d:83:97:6c:26:c2:d3:f4:4a:8b:84:b2:
ab:ff:66:65:47:59:0e:94:b9:3a:53:0b:98:7e:7c:
06:31:d6:2f:b5:b5:1a:4e:d3:9c:af:c1:19:7d:ec:
d6:07:c8:06:05:4e:fd:9d:e9:65:7a:2c:d1:be:7a:
cc:36:a3:d3:ee:df:01:4f:33:d5:55:df:8a:15:56:
61:df:54:94:6c:68:23:8c:1c:1c:87:0a:d7:ed:d7:
b1:b3:51:4e:6c:93:da:57:33:82:14:7a:e3:a1:73:
94:aa:d7:fa:29:cd:53:21:b9:2d:2e:ab:77:25:b1:
fb:fd:ad:81:bf:a8:41:da:0d:4d:9b:91:ff:a7:e6:
5e:79:d8:a9:4d:bd:99:c5:3d:05:2c:80:26:0e:09:
bb:74:85:59:56:65:c3:b3:8f:37:0f:53:cc:9c:ab:
da:ac:0d:14:06:5c:8d:74:b4:11:93:e3:d4:c0:9a:
b6:f7:8b:27:16:3c:db:2e:4b:cf:ef:21:85:2a:84:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:77:9B:DA:C0:DB:5E:02:DB:18:D9:5B:15:E0:25:02:AA:EE:B2:D3
X509v3 Authority Key Identifier:
keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7b:31:6d:7c:cc:1c:39:4f:c0:52:87:4a:40:68:f1:52:84:
6f:c7:62:1b:9c:c0:27:3b:96:58:35:85:df:64:6a:b2:03:48:
77:04:99:77:3c:37:ed:bc:f2:66:10:01:f8:ea:b5:59:46:26:
13:ed:66:8f:57:7b:ba:3c:09:5c:09:07:4b:d9:be:a5:b0:64:
ec:1f:c0:90:5e:5b:ba:45:c5:83:8f:be:7a:cf:0a:22:b3:57:
55:64:e4:c9:70:0b:6a:f0:6e:be:15:41:81:69:c3:4f:24:bf:
d3:1b:a4:31:93:0c:35:29:ad:d0:26:f2:17:96:77:75:dc:3d:
fa:45:14:e5:55:a5:d3:e3:09:ef:7e:10:3a:40:2e:03:e4:95:
e2:da:b8:7c:ac:62:05:ed:34:a2:f6:f6:41:1c:5c:1c:d0:e5:
0d:e8:f7:7b:79:10:67:b1:b3:4d:f2:23:03:4f:09:24:1b:71:
0e:2f:3e:75:14:aa:77:2a:3b:2f:ac:c6:c4:44:27:b1:c6:03:
e6:e8:ea:cd:37:b2:29:d7:36:90:a4:ea:73:db:e5:da:d3:3a:
87:82:09:94:b3:75:c7:3a:95:35:17:9a:9a:2d:2d:30:f6:d0:
5b:af:2e:15:31:70:97:28:96:63:2b:41:ec:a6:67:3c:b8:a7:
5f:8e:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:57:44 2025 by rpki-client