Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
File: PBHQXNKatxkq8DnPXz0AvpIVeTk.mft (raw, json)
Hash identifier: G4pS7CUOKbOviHv7ABpNenPYY/ZXer1yakQ8oLQBlEA=
Subject key identifier: 3A:05:CC:49:2B:3A:BE:9B:9A:FE:57:8A:74:42:83:95:DD:28:03:9E
Authority key identifier: 3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
Certificate issuer: /CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Certificate serial: 019872988EF5472B2690B7B20D64A56C20DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
Manifest number: 0865
Signing time: Mon 04 Aug 2025 01:00:57 +0000
Manifest this update: Mon 04 Aug 2025 01:00:57 +0000
Manifest next update: Tue 05 Aug 2025 01:00:57 +0000
Files and hashes: 1: PBHQXNKatxkq8DnPXz0AvpIVeTk.crl (hash: AhgqgDGARWozpBh4UV8vzBVMjMEFLEXim6s4dylwhiI=)
2: uXWEOT5kLicjM9eRqYG2MPSav7U.roa (hash: WztCPaYNfJzy3qntVN7a2OFcCyo/yo2zpUp1jJXzcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:8e:f5:47:2b:26:90:b7:b2:0d:64:a5:6c:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c11d05cd29ab7192af039cf5f3d00be92157939
Validity
Not Before: Aug 4 01:00:57 2025 GMT
Not After : Aug 5 01:00:57 2025 GMT
Subject: CN=3a05cc492b3abe9b9afe578a74428395dd28039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:3c:a4:00:ec:b5:1d:fe:4d:2d:64:68:16:
b5:8a:49:0a:fb:9e:fa:11:df:3e:6a:ca:54:5c:46:
30:db:0a:01:2a:cf:98:d4:05:20:ae:0e:6c:49:7b:
44:f1:e0:66:01:37:37:46:5b:51:ed:c2:f9:6f:78:
dd:d1:e8:ec:31:bc:e6:4b:91:38:a7:a6:ce:d4:e2:
ba:08:88:1b:9a:a1:f1:c1:8e:c1:e7:14:99:eb:c1:
66:ad:a8:1c:72:b5:5e:e9:b1:12:37:d9:1d:16:6b:
f5:47:38:75:95:e2:64:87:35:6a:dc:18:fb:b2:cc:
57:b1:27:06:01:aa:f7:00:4c:a4:61:72:ab:11:01:
10:b2:a3:42:7a:a9:78:99:7f:a2:07:da:79:75:f0:
61:1b:b8:e7:8f:2b:77:cb:be:ed:e1:5c:97:43:64:
7b:fa:46:d2:d1:3f:83:ab:c6:e7:8e:21:59:93:c7:
0a:13:5b:7b:ca:25:10:8f:d1:55:1a:9e:3a:f8:d9:
49:95:83:7f:16:2a:52:71:1e:9e:42:63:c2:96:64:
d8:01:e9:b7:76:01:b4:19:77:58:64:8e:00:78:4c:
77:37:b4:ac:ed:f3:db:44:96:95:c2:e1:68:cf:a6:
d8:21:1f:70:80:13:ec:66:79:1c:63:1f:6a:de:47:
22:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:05:CC:49:2B:3A:BE:9B:9A:FE:57:8A:74:42:83:95:DD:28:03:9E
X509v3 Authority Key Identifier:
keyid:3C:11:D0:5C:D2:9A:B7:19:2A:F0:39:CF:5F:3D:00:BE:92:15:79:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBHQXNKatxkq8DnPXz0AvpIVeTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cdb104-05db-4cdb-a42e-708dc097fffe/1/PBHQXNKatxkq8DnPXz0AvpIVeTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:57:4c:a2:d4:3b:3d:74:22:b7:c4:b4:13:b7:dc:2d:eb:bc:
66:47:58:d6:67:3c:ba:d3:bf:95:d6:63:e0:cf:a8:f0:e2:12:
dc:37:9c:4b:4d:8a:98:ce:ae:c3:d0:0b:1f:4d:94:95:44:69:
00:ea:b7:9a:47:91:0c:27:ad:80:e1:e0:5d:f7:ed:2c:d2:e4:
b9:22:e7:e9:c6:69:52:98:64:74:11:dd:61:55:10:e1:f0:c4:
e2:c3:06:86:37:0a:82:68:1c:bf:4b:54:2f:0a:1c:da:0a:23:
79:ac:be:d1:40:1c:96:50:95:a6:02:53:2b:d5:df:f3:0b:7a:
85:b6:69:57:f5:7d:44:5c:90:ac:ab:3f:9a:8f:0e:4a:64:fc:
e0:e5:80:88:da:cd:1c:6e:83:42:dd:06:e2:d2:c4:6c:fc:30:
9c:67:4b:f3:e6:19:1e:bc:55:8b:17:c9:cf:9f:26:37:0d:d7:
5a:cf:7f:53:6f:cf:0e:7a:51:02:63:95:c0:ed:1e:0e:55:cd:
22:ac:c8:f2:70:67:2f:a4:42:ad:50:39:71:f6:b8:c8:f0:68:
f7:26:d2:ac:6a:5d:73:a5:fd:45:09:67:11:05:ba:5b:72:dc:
9a:54:0c:41:5c:1f:38:d5:5a:dc:70:73:db:6d:97:78:cb:4d:
84:45:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:05 2025 by rpki-client