Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File: PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier: /lMAlZo8fdOSiwRU+eECw8HGSmNCO6Lk3702XUFCJ5c=
Subject key identifier: 49:E0:AC:52:63:71:B6:9E:76:1E:2F:F2:3E:06:16:AC:A0:ED:4A:B1
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer: /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial: 01988B0F5804B09318E7050D45660266D5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 19:01:35 +0000
Manifest this update: Fri 08 Aug 2025 19:01:35 +0000
Manifest next update: Sat 09 Aug 2025 19:01:35 +0000
Files and hashes: 1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: dYCJSCjbAlhS/eiGLgjoS4IZ8hZ0hfp2C9UAdx0lqaE=)
2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:58:04:b0:93:18:e7:05:0d:45:66:02:66:d5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Validity
Not Before: Aug 8 19:01:35 2025 GMT
Not After : Aug 9 19:01:35 2025 GMT
Subject: CN=49e0ac526371b69e761e2ff23e0616aca0ed4ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:40:8f:9b:50:be:ae:fd:b3:a4:47:85:e8:
07:19:18:d2:1e:0f:cb:ba:0f:34:13:b5:e8:63:ca:
3e:ad:1f:d3:0f:75:23:ff:da:28:77:f1:45:96:f0:
df:af:88:57:4b:47:20:97:70:6a:b4:69:2b:e4:a8:
36:3d:7e:7a:19:cc:3e:87:b6:57:98:c3:18:69:56:
e1:e1:23:dc:2a:ec:4a:1d:59:7d:ba:c7:91:20:cb:
7c:6f:ea:c9:b2:8a:2d:11:fe:c3:37:74:d8:c4:69:
7e:0e:1b:32:91:37:1a:35:c9:74:bc:5b:33:3c:16:
34:56:24:07:b1:99:36:cd:ca:a3:ac:73:a4:a1:38:
70:62:3c:9c:39:53:b3:4d:00:37:65:95:fb:93:76:
25:eb:43:f1:53:00:f1:ed:b7:06:22:29:ae:92:0f:
59:0e:cc:5b:5e:51:d1:d1:24:0b:1d:6f:5f:fd:57:
81:d9:9d:45:4d:ea:4e:43:52:3e:09:a5:cb:5d:cf:
d6:84:b8:61:c3:ed:b3:c1:9a:59:22:8c:4c:45:29:
0e:67:cd:14:19:08:c8:8d:fb:38:9f:ac:e7:59:b9:
7c:6d:73:bd:33:9d:ed:51:52:58:ab:df:79:eb:39:
f6:84:9a:bd:67:39:4a:fa:bd:a6:00:d2:95:dc:ad:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E0:AC:52:63:71:B6:9E:76:1E:2F:F2:3E:06:16:AC:A0:ED:4A:B1
X509v3 Authority Key Identifier:
keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3a:d5:12:46:9b:49:f0:f8:66:57:12:9b:7e:6a:f3:67:49:
dd:5e:07:29:2b:c8:4c:96:1b:88:66:b6:8b:3d:32:81:35:ae:
69:50:b6:b5:ae:a9:9c:cd:f4:6a:04:4c:9f:90:f4:70:89:9f:
a6:f4:10:67:d7:59:02:c2:83:8e:09:1f:fc:92:7f:c9:5a:2e:
b9:72:9b:8b:16:31:f8:9e:8d:d7:4a:a4:8c:db:18:fe:6d:3b:
c5:aa:93:f4:31:14:cf:e2:bd:b0:54:7a:3a:30:a9:b8:af:84:
51:aa:ef:f2:aa:99:5b:8b:7d:83:6a:f0:c8:15:a1:10:04:af:
78:d2:e7:e7:d3:8d:d7:f4:ec:71:f7:d9:67:f6:3f:47:b8:cb:
57:93:fc:69:99:e2:60:2f:be:e6:dd:2b:ba:13:74:02:e9:be:
2e:a9:2b:e0:1a:3a:29:9b:9b:c1:69:7d:b7:f2:f1:df:9b:ae:
56:dc:09:6c:99:f5:f6:db:18:f0:f8:53:cc:18:dc:be:98:0d:
aa:d8:ff:08:36:bf:72:42:cc:4f:c4:37:65:82:a1:09:0e:36:
0a:f5:da:94:12:73:5e:66:ea:85:73:06:c5:9d:20:e8:32:c5:
23:5b:3f:e0:60:6d:8e:d5:f1:d5:80:93:b9:e9:2c:09:38:9e:
ce:af:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:48:03 2025 by rpki-client