Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
File: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft (raw, json)
Hash identifier: FA0qpt1rDkjWzJBZcjKEq5hOMOKmI3O7++bQMgBE9Jw=
Subject key identifier: FA:6D:56:87:09:D9:42:16:EF:84:AF:F6:E5:22:14:66:FA:27:CB:96
Authority key identifier: 3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
Certificate issuer: /CN=3c02094c2210d8b21715f98df8598b353208d10c
Certificate serial: 01989F3A894BF19B0184010920EB9CF21521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
Manifest number: 10C9
Signing time: Tue 12 Aug 2025 17:01:09 +0000
Manifest this update: Tue 12 Aug 2025 17:01:09 +0000
Manifest next update: Wed 13 Aug 2025 17:01:09 +0000
Files and hashes: 1: CufUT2fMUqvz9LGxO18OZgdQp_g.roa (hash: G2fcMqhZShi/pIW7MbvdKjfohzkmwJAvDqVZX+1pdMQ=)
2: PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl (hash: MbAQBoG5LNmyj28XgNDrjGVKy8d00QOv9OtV0BYUGv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:89:4b:f1:9b:01:84:01:09:20:eb:9c:f2:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c02094c2210d8b21715f98df8598b353208d10c
Validity
Not Before: Aug 12 17:01:09 2025 GMT
Not After : Aug 13 17:01:09 2025 GMT
Subject: CN=fa6d568709d94216ef84aff6e5221466fa27cb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:31:99:a8:ad:39:33:3d:af:ff:f6:98:ff:
05:81:46:6a:c3:5d:e7:cc:b6:2f:26:2f:12:0d:c3:
98:20:6f:3e:71:e1:24:73:7e:c2:2e:b6:c3:87:4e:
47:a7:6e:1d:68:e1:72:28:8a:3b:21:62:70:9b:30:
ba:8c:eb:b5:a8:58:c5:a5:7a:69:f9:59:f1:96:fa:
57:bf:27:a5:80:73:c7:46:b5:54:8f:9f:b7:ce:67:
f0:4f:cb:6f:fd:68:18:54:c2:63:67:9b:a4:3a:dd:
82:54:f4:36:42:3c:f5:a5:e4:c9:78:f9:37:d7:85:
33:a5:45:6c:f7:1a:a1:b8:52:eb:89:a5:34:37:81:
1c:1f:5c:0d:d5:94:dc:8d:48:af:c0:3c:09:d9:9e:
92:9e:6e:32:67:7e:cc:65:fe:11:0f:d2:12:de:1e:
06:27:ea:41:77:90:1f:37:66:0e:71:9c:f2:5f:fe:
a1:68:1e:03:a8:b7:1c:bb:be:9b:62:fd:34:1a:a2:
32:69:7c:cd:86:b0:d0:49:23:3f:02:3b:69:20:ea:
82:22:bf:53:31:c0:75:d6:fa:a2:2f:64:12:2d:c6:
c2:0b:e6:67:32:aa:b9:ce:b8:df:bc:6f:44:08:1c:
83:10:37:29:7b:22:45:26:a1:eb:0b:fb:7e:5d:61:
38:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:56:87:09:D9:42:16:EF:84:AF:F6:E5:22:14:66:FA:27:CB:96
X509v3 Authority Key Identifier:
keyid:3C:02:09:4C:22:10:D8:B2:17:15:F9:8D:F8:59:8B:35:32:08:D1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/983c2c-ddab-422b-bcd2-17374bffb71a/1/PAIJTCIQ2LIXFfmN-FmLNTII0Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:08:34:7c:75:3f:95:8b:6a:25:70:6e:81:53:a7:0b:08:
df:7a:bf:a8:ba:92:32:05:3e:f0:1a:ba:97:f8:e9:cf:99:07:
cb:a0:0a:3c:9b:31:ed:d8:54:91:bb:76:dd:3d:37:2e:ec:a9:
2f:7b:1f:b7:9d:61:37:13:bd:a2:d9:7f:ff:27:a6:6b:22:1d:
0b:a4:19:d0:23:f1:45:b3:68:f6:63:ab:2d:42:73:b6:d7:81:
23:e3:4f:dc:cf:28:e8:b3:a7:be:97:20:b5:cb:58:9d:24:6d:
22:52:6d:bb:ff:b4:3f:cf:99:67:72:5b:46:6f:66:a4:d6:e0:
4d:d9:45:69:4a:7c:c2:b8:e7:18:21:ef:c9:39:fc:b1:b9:4d:
74:14:7c:fa:e5:58:28:34:2c:cb:e8:b2:ea:e9:68:39:6c:bc:
bc:50:e8:37:cd:fc:bd:89:c2:9b:fa:c4:fc:61:1c:95:45:a3:
25:9e:3b:7a:85:b7:06:82:8f:76:f9:0c:97:21:34:5d:49:fd:
f3:41:c7:1e:7d:41:8b:2d:70:0e:bd:60:61:2f:15:c6:42:5c:
59:43:ee:5d:fe:66:9e:1c:7c:74:59:05:89:0d:85:fc:42:8f:
84:34:f1:05:32:6b:f4:06:6f:ec:d7:eb:44:93:68:1f:ae:52:
b3:7b:52:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:28 2025 by rpki-client