Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
File: pQl6FWrvL4L_E7PBav9vfhbbAsg.mft (raw, json)
Hash identifier: +mGL+Hcy/QNXiwj1OExhkaN0RTXkm2tuCm3zRTgpjKQ=
Subject key identifier: 16:AF:D4:EC:01:C5:43:D5:1B:46:EE:AA:D1:61:87:32:28:AD:6F:0F
Authority key identifier: A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
Certificate issuer: /CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Certificate serial: 01987C40E7F0104C926549E04D2D58F613E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
Manifest number: 04E1
Signing time: Tue 05 Aug 2025 22:01:25 +0000
Manifest this update: Tue 05 Aug 2025 22:01:25 +0000
Manifest next update: Wed 06 Aug 2025 22:01:25 +0000
Files and hashes: 1: T0GLC9ivgiSJVwGQ5KIOLCKOjqs.roa (hash: FKLm57miA/xZK8gsx+DBE/lZzuzN5GXUjYHQsCWDe8M=)
2: pQl6FWrvL4L_E7PBav9vfhbbAsg.crl (hash: Y5i/NAYgCeKna14tR9/LzlxfuBH1Sf9s9gVzQa0kADs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:e7:f0:10:4c:92:65:49:e0:4d:2d:58:f6:13:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5097a156aef2f82ff13b3c16aff6f7e16db02c8
Validity
Not Before: Aug 5 22:01:25 2025 GMT
Not After : Aug 6 22:01:25 2025 GMT
Subject: CN=16afd4ec01c543d51b46eeaad161873228ad6f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:26:6d:7b:dc:ad:94:d1:e4:a5:6c:c8:37:
e5:07:12:8e:bb:4e:a8:f0:ed:f0:ae:11:6d:cb:ff:
36:eb:ae:f1:3c:16:66:19:f0:d0:44:0a:6c:9b:55:
6a:fa:1d:8c:bc:db:b4:2c:1f:6d:a2:c5:36:51:7b:
f5:58:ba:26:fe:a7:70:f7:ee:94:84:ce:d1:69:34:
2d:22:e8:9b:23:f0:2f:28:9f:89:50:df:6a:32:a9:
45:48:76:74:5b:49:d9:e0:c1:81:da:e2:16:bd:c7:
ae:23:ab:a4:8c:cb:a3:2e:a4:2a:30:1a:cf:93:57:
1c:e8:e1:5d:21:ff:91:7a:b3:0c:4e:6e:43:58:3b:
c4:91:97:9c:e3:c9:21:ad:98:57:7c:d2:55:62:94:
d0:fd:66:27:a8:29:bb:a6:17:5f:30:46:fc:dd:3b:
51:0d:b9:f7:d0:0d:b1:18:69:6c:54:b7:8e:c9:a3:
8a:6b:a7:11:ea:37:3d:ee:02:47:22:b4:1e:83:48:
e1:92:0c:58:2d:5a:3f:b1:27:51:09:e0:7b:e9:83:
59:66:fe:56:b5:c3:00:3b:55:60:b4:d3:bd:a4:2f:
68:d3:ee:da:9c:87:48:30:20:5f:c4:17:02:1f:ef:
25:ca:df:55:98:e2:67:d2:d3:46:96:03:04:2f:a1:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AF:D4:EC:01:C5:43:D5:1B:46:EE:AA:D1:61:87:32:28:AD:6F:0F
X509v3 Authority Key Identifier:
keyid:A5:09:7A:15:6A:EF:2F:82:FF:13:B3:C1:6A:FF:6F:7E:16:DB:02:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQl6FWrvL4L_E7PBav9vfhbbAsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/42f7f8-7407-432d-bbb5-0d339707cb88/1/pQl6FWrvL4L_E7PBav9vfhbbAsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:db:84:4e:2d:d3:cd:7e:87:fb:b2:d1:0f:11:20:06:e2:c8:
42:8f:ee:ef:f4:5a:53:99:46:74:ed:32:7a:9d:72:e5:c9:08:
29:46:e3:fa:05:10:5d:63:21:75:8c:6f:51:be:9b:c4:b9:d8:
a4:75:d1:3e:77:3f:75:84:8b:a8:28:3c:bd:40:e2:04:26:86:
90:5f:6e:33:6e:bf:5b:62:f9:b6:26:1a:f0:de:7c:d0:16:ad:
80:7d:48:aa:52:4a:96:44:be:82:fe:38:cd:da:0a:96:52:40:
e9:83:cf:a6:4e:d9:b7:c5:b5:77:fc:78:61:5e:39:14:87:c3:
e4:01:cb:e3:b4:e4:12:dd:13:b4:ba:81:a3:ad:a0:da:01:58:
ba:1c:92:58:f5:44:ea:fb:fc:9c:0a:8d:c1:ab:e0:88:f5:f3:
5e:16:74:e0:bb:c3:67:8e:db:99:ab:aa:6d:c6:23:b6:e2:16:
f2:62:34:2c:09:e4:ca:33:91:00:2e:3b:82:54:f3:12:5e:a5:
fa:95:26:23:dc:70:b7:2e:7b:a7:f8:a9:aa:27:bd:69:6a:14:
0e:70:66:53:5d:d0:7f:17:af:53:a9:b8:df:0d:3b:39:c4:08:
ce:ac:f2:7b:3a:1c:45:08:51:76:75:1b:19:4e:85:d1:2e:93:
4e:a8:20:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:29 2025 by rpki-client