Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: I65oEa7Xgzzhcj63vE6NL9Aqg4ABpPrlBvx4Gz0hOEA=
Subject key identifier: F9:71:9A:DC:A6:99:01:8E:3E:6C:53:2D:3F:6E:8F:2C:25:8D:6A:12
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 01989034D2E68E09949F95F57CEC2B9F5A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 19:00:37 +0000
Manifest this update: Sat 09 Aug 2025 19:00:37 +0000
Manifest next update: Sun 10 Aug 2025 19:00:37 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: 5r5rOUJnc3ns8GIkEStNJ9QJPunyknMH15zPlgjF5Ho=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:d2:e6:8e:09:94:9f:95:f5:7c:ec:2b:9f:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Aug 9 19:00:37 2025 GMT
Not After : Aug 10 19:00:37 2025 GMT
Subject: CN=f9719adca699018e3e6c532d3f6e8f2c258d6a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:ba:e6:2c:b4:ad:63:1e:46:ef:74:9a:5d:
50:64:9f:a1:c9:06:94:b9:4f:a3:84:82:37:d0:91:
8a:cb:45:37:53:85:3e:e2:86:bb:4c:c6:3f:69:dd:
2b:a2:25:66:50:03:69:86:94:9c:c8:88:3e:6b:4d:
53:5f:4a:ab:0a:a4:93:ae:09:86:79:92:90:be:d4:
4a:19:28:8d:db:2a:0c:b1:94:bf:d7:80:b0:cb:46:
d1:f8:c9:5e:f5:3e:95:e2:70:63:14:75:d6:8c:bd:
eb:dc:12:c5:87:08:a2:cf:86:b0:77:2a:e3:50:12:
61:a7:02:36:ea:a5:9b:75:9b:ad:2e:ab:92:4a:24:
29:69:e4:2e:20:c6:3a:41:8e:bb:07:c1:d0:b3:7e:
f8:b0:0f:d1:85:bf:87:73:4e:17:91:87:bb:77:42:
13:20:32:fa:d1:97:c8:40:a8:c9:db:e9:52:19:e5:
41:56:23:7f:63:52:bf:82:bc:e4:c8:48:38:ab:03:
7b:7c:54:40:91:24:74:92:0a:2e:91:f6:8d:68:39:
db:fa:ea:e7:40:f5:1b:fe:4a:f8:22:9b:aa:01:f3:
cb:9b:39:f5:e9:92:bd:f6:80:36:60:e5:85:9f:1c:
23:26:51:a6:54:fc:5a:53:f1:25:8b:63:b6:01:04:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:9A:DC:A6:99:01:8E:3E:6C:53:2D:3F:6E:8F:2C:25:8D:6A:12
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:66:b1:3e:02:5d:b2:64:78:2a:66:c1:34:ce:f9:b7:8a:cf:
89:bb:27:51:6e:c0:24:cc:d4:37:5b:55:a1:21:22:ff:f6:37:
15:dc:51:3e:ee:aa:18:63:f1:b7:e4:5a:19:0d:89:db:ca:88:
9a:99:93:00:1d:38:2d:35:52:f5:cb:b1:8b:53:4d:42:ac:3e:
bd:a1:47:1c:f3:ad:5f:0e:a3:97:3d:d7:e6:45:91:f8:ca:77:
eb:d2:fd:82:c0:62:bc:1d:70:e8:5e:85:e5:99:cb:ab:1a:c3:
1c:fa:c6:1d:1f:81:5e:ac:2c:c1:75:11:6e:50:cb:ae:9b:9e:
27:38:9a:2e:fa:f7:9d:52:d6:15:44:a1:66:d2:87:8c:a1:d4:
89:a5:b9:4f:10:9d:80:18:f1:d8:c1:24:36:7b:d2:5a:85:a1:
4e:16:6d:5a:21:66:69:55:7e:49:ca:22:c3:d5:16:4a:67:d8:
bb:c4:1c:fc:3a:74:c2:2b:52:f2:da:96:a0:89:17:62:5e:31:
2c:58:be:0d:cb:35:21:b8:02:a4:73:ad:b7:77:44:f0:80:21:
42:1b:68:81:d1:44:6d:16:c7:8a:28:95:0c:a1:25:17:14:6c:
ec:9f:e3:c7:31:60:89:b3:99:c8:ad:97:86:13:87:42:66:2f:
4d:b1:ec:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:52 2025 by rpki-client