Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File: PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier: B3orTeYbsjhsO4kdVF0rTNizt8BrQ6sq6s6SoNfRU7g=
Subject key identifier: 8C:84:9E:EB:D6:9A:A6:9B:62:DD:7A:8A:89:2B:0F:33:AE:F2:C8:3F
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer: /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial: 01987AC01F4802C72E6A22D76A687FD1A0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number: 04F9
Signing time: Tue 05 Aug 2025 15:01:07 +0000
Manifest this update: Tue 05 Aug 2025 15:01:07 +0000
Manifest next update: Wed 06 Aug 2025 15:01:07 +0000
Files and hashes: 1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: c9G2un8tYtxIDMkKpoQaU1I892owNnS2I1g0I7zMu4w=)
2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:c0:1f:48:02:c7:2e:6a:22:d7:6a:68:7f:d1:a0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Validity
Not Before: Aug 5 15:01:07 2025 GMT
Not After : Aug 6 15:01:07 2025 GMT
Subject: CN=8c849eebd69aa69b62dd7a8a892b0f33aef2c83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:84:a6:07:57:03:c1:ae:ab:13:3e:4f:01:
1e:69:dd:58:18:67:6e:83:89:08:ab:ca:97:cd:74:
64:4f:3d:23:3c:80:33:38:6b:51:7b:dc:f9:0f:20:
fe:43:6e:06:55:66:11:50:b7:4f:f7:0a:70:85:07:
a9:65:88:60:10:85:4b:c6:e2:bc:d9:56:0f:eb:fa:
ca:67:33:ae:bc:27:b9:f7:13:8b:5c:b5:35:56:e4:
90:43:81:6d:62:a3:c1:cb:ce:56:58:37:e8:cc:96:
ac:72:8a:eb:2b:26:5b:ac:d3:46:fe:01:0a:67:16:
9a:6c:92:2a:d5:b8:4d:d8:4c:17:62:90:45:2c:32:
31:7d:f8:a4:52:33:43:b3:10:6b:08:e3:59:f7:c4:
d5:d8:5d:59:91:5c:86:29:aa:a0:e9:2b:2a:20:6f:
0d:88:6f:01:bc:6f:2e:b6:69:da:88:9b:7a:69:d9:
42:c8:19:8f:7c:2f:18:34:f7:4e:2e:83:ab:00:f5:
12:d3:ff:0a:72:ed:70:3e:62:9d:18:f1:85:29:b9:
91:e3:1f:d5:12:6c:f0:51:5e:b2:49:bc:1c:cf:1c:
a6:43:86:47:8d:63:e5:16:3e:b6:03:f4:54:3f:9b:
15:0e:92:4d:51:60:b6:5a:e0:14:ed:bd:54:d4:0a:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:84:9E:EB:D6:9A:A6:9B:62:DD:7A:8A:89:2B:0F:33:AE:F2:C8:3F
X509v3 Authority Key Identifier:
keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:42:fd:36:80:16:4c:8d:82:06:dc:d5:56:b1:ba:8b:01:f9:
22:65:97:25:b5:82:ea:d7:03:39:b5:ae:44:fd:49:f6:d1:9e:
33:70:72:57:e0:a4:90:91:6d:f5:7b:92:63:11:dc:58:f8:51:
25:90:bb:e9:62:48:7b:9d:0b:80:cb:c3:43:d9:30:5e:61:a8:
12:3d:b8:00:02:d1:49:0c:4d:07:57:ad:34:fb:91:d1:3e:58:
9c:25:e7:a8:9a:ee:55:55:89:e2:14:f4:82:bf:0d:5c:0a:bc:
8e:15:4a:b9:39:67:c8:56:f1:c4:23:93:b3:d1:fd:cb:cb:2c:
9d:a6:2d:84:62:b9:c5:e1:cc:5b:fc:e9:c5:c0:3c:b1:29:ca:
4b:8e:9b:9e:89:8c:8a:17:fc:d7:29:4d:60:53:2f:d7:73:6d:
b4:c1:a7:4f:ee:53:22:db:cd:2b:f2:1e:e1:dd:6f:d4:01:94:
09:d5:45:ae:ab:dc:e1:d5:5e:65:5b:73:83:e3:a4:ca:40:b5:
a2:87:e8:9c:01:34:33:2e:21:04:d7:fc:db:92:66:ef:c4:a7:
8a:3a:16:c3:a7:e0:df:28:a7:55:1e:b7:50:41:d4:ab:ed:86:
36:dd:ff:f9:20:15:84:63:6f:b5:89:a1:68:92:80:47:2d:3b:
8b:39:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:04:10 2025 by rpki-client