Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
File: paHquv4t5wOCJ6hZOnrFzDkvN04.mft (raw, json)
Hash identifier: GQ6BigNHnJyjB68CzabRo6HBxzuOHO9KpoQeFJa8TBs=
Subject key identifier: 9B:25:2F:34:9B:AA:61:E1:CC:41:74:44:E2:85:44:85:03:B5:C7:8C
Authority key identifier: A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
Certificate issuer: /CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Certificate serial: 01987298F2E108C7B96872DCAE5A7DB48B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
Manifest number: 12B8
Signing time: Mon 04 Aug 2025 01:01:22 +0000
Manifest this update: Mon 04 Aug 2025 01:01:22 +0000
Manifest next update: Tue 05 Aug 2025 01:01:22 +0000
Files and hashes: 1: paHquv4t5wOCJ6hZOnrFzDkvN04.crl (hash: QkFdli8FCib3NgrRtTM3xzbnHG+mDRhvjXH5P1nhFLM=)
2: wW2KE3gY8QjEsnXJFmwHDL7WH6g.roa (hash: rYujNDXyFY6K7NmLNp1LWeOiCz0Qh+l0K7mCOQxVp3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:f2:e1:08:c7:b9:68:72:dc:ae:5a:7d:b4:8b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a1eabafe2de7038227a8593a7ac5cc392f374e
Validity
Not Before: Aug 4 01:01:22 2025 GMT
Not After : Aug 5 01:01:22 2025 GMT
Subject: CN=9b252f349baa61e1cc417444e285448503b5c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:42:4c:ec:a9:3f:cf:5e:30:5e:54:80:fe:e5:
67:b1:5c:9e:5c:e5:5e:16:a2:d4:bc:a1:e3:79:c3:
9f:68:54:dd:f5:82:12:36:58:96:37:8c:2c:68:f7:
6f:91:50:ac:c1:b3:9d:37:62:cb:2e:aa:ab:11:9b:
9d:5e:73:4e:55:92:3a:5d:78:bb:26:20:21:d6:31:
ee:c5:c0:21:7c:a0:fc:6b:d0:d6:19:33:b9:99:31:
a4:bb:fe:af:c5:bc:c1:28:3b:07:d8:e3:25:b9:3b:
ab:fe:93:77:77:d3:fe:5b:be:75:d0:d3:c4:f8:97:
32:b1:a4:13:79:d1:f6:2c:80:2c:00:ba:ea:d8:c4:
4c:f3:da:9c:cd:ee:e9:2e:c8:6a:03:8d:76:7a:62:
b4:3a:fa:d9:c1:ea:28:47:ea:2a:44:37:4d:e0:65:
ad:42:41:17:0f:d3:28:a8:86:e5:2d:f0:ba:f3:7c:
a1:41:c2:ad:d1:91:dd:7e:99:e6:c1:7a:be:ff:f2:
26:96:67:04:2a:3f:45:52:a3:e3:2b:df:4c:e1:94:
2a:6c:f4:9f:4b:38:de:56:43:1f:7a:4f:ab:7e:f4:
be:e9:4e:05:4c:93:5a:19:c5:0c:91:47:96:41:e9:
0c:b2:aa:85:97:90:5a:57:dc:84:43:7e:01:49:64:
60:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:25:2F:34:9B:AA:61:E1:CC:41:74:44:E2:85:44:85:03:B5:C7:8C
X509v3 Authority Key Identifier:
keyid:A5:A1:EA:BA:FE:2D:E7:03:82:27:A8:59:3A:7A:C5:CC:39:2F:37:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paHquv4t5wOCJ6hZOnrFzDkvN04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4f4b4e-23cc-4c3a-90af-4ef39514aa43/1/paHquv4t5wOCJ6hZOnrFzDkvN04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e4:c9:77:d4:29:76:f9:2f:ef:0f:c0:fb:97:19:ff:4f:77:
3a:b2:5f:fd:6a:aa:26:98:82:74:4a:5b:3c:e2:70:71:d6:b6:
94:4c:97:6d:48:89:d3:d4:c8:46:52:cc:c2:af:3f:f3:10:bd:
a3:28:ed:70:dd:cb:40:94:9a:69:b4:3a:4e:c6:99:57:83:12:
d3:7f:82:ee:fb:6a:01:54:8e:cd:66:5d:5f:bf:5e:77:35:6f:
97:97:14:40:22:19:1c:91:9b:1f:7b:6c:b9:ed:8c:27:1a:98:
4f:c6:24:e6:96:a3:b4:b2:92:8a:6e:d5:45:52:88:8c:05:60:
54:b3:57:e6:34:fc:3b:12:cd:bf:fe:91:67:71:36:de:87:d1:
7d:27:cc:06:20:ff:3f:19:11:bc:f6:ea:68:08:95:ea:04:c6:
e0:6b:09:b0:60:13:9f:1b:d2:37:83:a7:d9:3b:67:46:ec:33:
64:ee:92:c0:44:1c:12:a8:fb:91:38:39:5a:b9:a2:60:67:b4:
5f:07:a0:ac:57:6a:01:fc:13:85:4c:52:6b:a8:6f:41:35:30:
4f:47:96:73:46:c1:21:22:72:9c:bb:10:ad:32:2f:ce:d0:9e:
2c:c0:c5:4e:d3:05:4d:a8:9a:81:61:43:96:83:7b:8b:91:1b:
7c:47:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:15 2025 by rpki-client