Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
File: pDtTIrjqOKegRNywZxp126EEPX4.mft (raw, json)
Hash identifier: G6RFHPea627bet2mXT34tSq7A86P/QT1WFTNUZs2lh4=
Subject key identifier: 76:CE:52:1A:E3:F6:90:54:E1:C0:E0:EF:7D:85:DF:E0:48:5F:D8:25
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 019889223AC0A55874EB2DB46C57CFBA6120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
Manifest number: 1629
Signing time: Fri 08 Aug 2025 10:02:58 +0000
Manifest this update: Fri 08 Aug 2025 10:02:58 +0000
Manifest next update: Sat 09 Aug 2025 10:02:58 +0000
Files and hashes: 1: iMT6U9mtu2u4ZrZg6QFZA1PI4b4.roa (hash: gM1ZjnX5a45F3g+DHFf4ROLZzbrv4Z9zB/pBieJvcD0=)
2: pDtTIrjqOKegRNywZxp126EEPX4.crl (hash: OBWiGg+NKaT5pKHOr1zsQsQ15yketBTl/OYkVhMC7YE=)
3: uSjPkHVrQGEYzySpy8LO3vhOhQk.roa (hash: 7CsfbkRbBqND0q0gdzh2M/F8+y9Oj0uA6RZKZkPuiPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:22:3a:c0:a5:58:74:eb:2d:b4:6c:57:cf:ba:61:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Aug 8 10:02:58 2025 GMT
Not After : Aug 9 10:02:58 2025 GMT
Subject: CN=76ce521ae3f69054e1c0e0ef7d85dfe0485fd825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:35:f9:75:8a:3d:26:3d:e1:38:68:0b:e5:
00:83:c8:b1:6a:0b:e5:06:e0:5f:5b:4b:5c:9a:1f:
f9:6e:f1:e9:5a:b3:a4:fe:60:96:ee:da:7b:b6:9b:
f2:e0:cc:14:97:80:e6:2a:db:cf:46:51:9f:22:ea:
2d:be:9c:c6:f8:76:c8:09:1d:2d:56:f5:20:a9:3b:
49:76:9a:e1:50:ce:78:13:39:d4:1b:9c:b9:d2:17:
30:05:af:bc:c0:0a:91:b3:22:09:70:a9:64:bf:0a:
00:69:da:c6:a9:64:60:0e:08:b8:c1:94:61:e6:9e:
b2:e0:bc:43:4a:69:84:06:db:b3:2d:78:c2:f7:89:
6b:25:d7:fe:88:2a:02:cd:69:91:60:cb:a4:10:f2:
60:2e:6f:41:e1:4b:4d:f2:68:13:42:06:33:c2:38:
0b:5a:be:d1:c8:6e:12:a0:67:1b:6a:0d:3e:14:05:
d3:38:99:08:60:d9:10:81:3b:2c:79:f7:35:ec:44:
ff:72:d7:4d:b7:a4:79:ab:51:cc:66:d6:fe:e8:13:
2a:c7:d1:92:9c:0f:55:33:84:d9:38:60:b1:b8:10:
c0:29:39:f4:2d:ae:e4:aa:13:93:6b:f6:07:93:2c:
eb:53:a3:9a:6a:69:60:5f:5c:2c:38:e4:d9:f1:17:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CE:52:1A:E3:F6:90:54:E1:C0:E0:EF:7D:85:DF:E0:48:5F:D8:25
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8a:42:2c:c6:80:f5:24:6d:f9:1e:fa:8b:3d:54:88:fa:e9:
c0:8a:30:5c:99:a4:02:18:ad:eb:fb:b8:7b:bc:1e:bd:c5:38:
23:23:d2:9f:e5:c5:f7:49:83:51:cb:0d:58:fb:7f:4f:b4:96:
ac:a7:f4:ac:0b:7b:94:04:b9:4e:f8:c0:0f:c3:b1:fa:d7:1a:
46:5a:84:f6:8c:37:28:33:c8:6b:f8:56:a5:0a:a0:bc:46:20:
34:04:87:44:fa:a4:53:07:7d:11:a2:b4:7b:a1:1a:a3:be:f0:
7f:aa:f3:c1:5b:d1:71:12:3b:8c:38:c1:57:ad:f9:88:a1:d8:
22:19:33:b0:a6:02:2d:59:e5:d6:7f:bf:fa:69:b9:b4:9f:e2:
07:a3:75:09:ec:41:18:01:4b:97:73:6f:ba:ae:8f:19:92:f9:
5f:c6:73:26:8a:83:7a:10:95:39:d5:a4:83:22:58:2a:58:4e:
e4:4d:79:12:67:3f:31:e7:9b:d8:eb:27:1b:a4:5d:3e:dc:dc:
16:40:09:95:2e:58:1b:8a:51:3b:a3:50:0b:35:43:b4:c6:5d:
d0:93:fa:e9:9d:b2:bd:31:64:92:73:4d:f2:82:bc:e7:22:04:
1c:a1:5c:a6:2d:b1:8a:a8:17:13:f6:7f:a8:1e:fe:b4:b0:9c:
33:aa:5b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:23 2025 by rpki-client