Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
File: pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft (raw, json)
Hash identifier: M09nBrgVVDrXDLAxMP7YfS5g1KM5NrHmgUe/7mEcV6M=
Subject key identifier: 88:F1:A7:C9:A1:A0:C0:56:21:43:B6:61:C6:B9:C6:37:3F:0A:5F:3E
Authority key identifier: A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
Certificate issuer: /CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Certificate serial: 019881D499D298A3A8E0DC4B5BFE5E0A4E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 00:00:50 +0000
Manifest this update: Thu 07 Aug 2025 00:00:50 +0000
Manifest next update: Fri 08 Aug 2025 00:00:50 +0000
Files and hashes: 1: 1-y3mku53CxfcZTDAjLzjGLNjKug.roa (hash: tkrqALFJZS9oKOrZg8mNnpPdOdg26RzEKwv9Z2r59k4=)
2: pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl (hash: gE5jXTvmnxBDbBNNz73/36k52bd1XyJresM2gkaBk2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:99:d2:98:a3:a8:e0:dc:4b:5b:fe:5e:0a:4e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a433e32ac0c6fa735a6c7be144cfa3fc297c0b98
Validity
Not Before: Aug 7 00:00:50 2025 GMT
Not After : Aug 8 00:00:50 2025 GMT
Subject: CN=88f1a7c9a1a0c0562143b661c6b9c6373f0a5f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:8e:57:df:88:45:cc:7a:b8:81:4c:c4:ad:
91:a2:07:7c:fd:b9:0e:8f:29:5c:25:fa:3f:3a:02:
c7:62:92:ac:94:4b:f5:44:69:32:7f:48:60:54:96:
44:c6:59:ba:45:51:3b:91:7e:99:0f:66:00:b6:ab:
3f:6a:97:d6:0e:7a:be:45:93:2e:34:5d:13:3c:84:
b4:45:e1:4d:fa:4d:4c:2f:ff:02:27:b4:11:f0:e3:
84:a1:54:ab:2f:08:58:9d:5a:5f:f5:57:d0:51:95:
7c:ca:9d:9f:53:eb:fb:5a:8a:2f:98:fe:a7:55:7d:
e5:48:d5:f3:66:95:cf:61:ba:97:01:ae:b4:82:e6:
64:bb:47:91:a6:05:87:00:f5:ce:24:af:92:33:e2:
a0:4e:a7:4f:15:1d:f4:55:36:31:04:9f:07:13:3d:
99:a5:68:49:d6:73:79:66:d5:7a:43:a5:b8:99:de:
84:a2:6a:b1:40:84:98:16:b6:a5:8c:5d:b9:9b:00:
64:a4:e4:9e:bb:f7:26:85:be:3c:ec:a4:b2:bb:aa:
d6:05:e2:ca:b6:2d:b4:41:5d:c2:0d:af:96:67:ec:
62:83:ad:c4:46:5b:81:94:5c:5e:a5:87:63:24:c1:
6e:57:ef:ea:eb:42:1d:65:98:1d:ee:98:c2:01:37:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F1:A7:C9:A1:A0:C0:56:21:43:B6:61:C6:B9:C6:37:3F:0A:5F:3E
X509v3 Authority Key Identifier:
keyid:A4:33:E3:2A:C0:C6:FA:73:5A:6C:7B:E1:44:CF:A3:FC:29:7C:0B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDPjKsDG-nNabHvhRM-j_Cl8C5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8659cf-f824-4f93-8604-b812bd594739/1/pDPjKsDG-nNabHvhRM-j_Cl8C5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:76:16:f9:69:41:2a:6f:c9:9c:69:60:97:71:5e:7f:55:03:
d9:c7:30:07:54:3e:0b:3c:be:3f:ce:a8:5a:bd:da:7f:7c:6c:
bd:9d:10:ee:0d:d1:f0:cd:31:02:48:ea:9d:0d:25:9a:58:44:
a8:6f:b2:b4:d5:85:f3:22:7b:f8:4f:ce:62:d5:b5:b9:6d:2e:
a0:a9:af:38:92:72:19:b5:94:90:07:d3:b9:a8:dd:49:db:d6:
ba:96:aa:8b:83:7b:ab:f0:54:e5:a3:89:93:fe:19:7d:df:df:
f6:2f:91:e7:ea:3a:72:c0:cc:76:65:74:a0:78:da:e1:73:e2:
a7:7a:61:71:f4:46:1e:cc:ad:13:f6:ef:88:88:02:ea:2c:47:
77:8b:c0:06:8c:71:7e:16:c2:7a:9d:61:ec:ad:56:eb:93:13:
e1:4b:9e:55:a4:d8:e0:8a:e3:11:84:82:bd:95:15:e1:fb:65:
62:c2:91:2d:ca:43:f8:af:0e:1b:c6:11:01:2c:c9:13:6e:54:
e7:31:b7:56:c9:1f:03:d7:2f:f8:48:76:8c:1d:0c:d9:b9:fb:
15:81:21:79:3a:87:83:9f:9e:32:86:22:7a:42:29:f6:10:ce:
78:43:70:c6:88:8e:2d:50:9b:28:4d:89:59:ca:cb:c7:51:c1:
a4:02:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:10:01 2025 by rpki-client