Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File: pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier: K7J/QpPULCfvGS6rHQvx0Vqkz2392kDzndgjv4tqRFQ=
Subject key identifier: 56:2D:40:39:E3:23:05:2D:86:5B:ED:90:32:08:7C:AC:7A:33:13:56
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer: /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial: 01989FA873B1D827B731513F9B90FDE3F8DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number: 0D47
Signing time: Tue 12 Aug 2025 19:01:13 +0000
Manifest this update: Tue 12 Aug 2025 19:01:13 +0000
Manifest next update: Wed 13 Aug 2025 19:01:13 +0000
Files and hashes: 1: S2CydqVU1Bg8JlGW4qN48rRbYzM.roa (hash: BGDB4Vnl+lNKwWJXdwvf53CCXNQUCVk3dMF/mpOaQyY=)
2: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: N/FKlVWneyUOXSXVgnzmMNuOvYOzU4Mw3hUmGM1dbyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:73:b1:d8:27:b7:31:51:3f:9b:90:fd:e3:f8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Validity
Not Before: Aug 12 19:01:13 2025 GMT
Not After : Aug 13 19:01:13 2025 GMT
Subject: CN=562d4039e323052d865bed9032087cac7a331356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:90:9d:d0:df:14:1d:8b:1e:5c:ee:77:e8:
6a:29:12:8e:ee:2e:90:7c:61:ab:bd:91:fe:de:59:
26:06:85:d7:3a:20:c8:a1:f8:d2:f2:9c:22:d4:73:
12:49:4d:3a:9a:20:54:2a:d6:fd:58:b1:96:a2:1f:
ed:4e:1d:93:bf:18:d3:b2:38:9c:3f:4c:a0:7f:8c:
f2:0a:44:3d:3e:26:f1:f6:44:85:57:31:fc:31:1a:
20:b3:c2:3d:5b:61:e4:20:d4:a9:98:45:1e:23:70:
d4:0f:fd:f8:37:73:fd:2a:a3:d4:d3:8a:f3:02:fb:
09:dd:d5:40:d4:5c:77:a2:44:36:cd:2a:fd:20:c8:
48:16:82:b4:89:9d:0d:42:d8:6a:3d:5f:65:a8:6e:
c3:b3:ab:4e:77:76:66:42:1c:3b:04:83:f7:62:6d:
52:c6:64:af:d7:2f:01:2e:1c:04:aa:1a:17:ab:c2:
0a:78:31:65:d1:2b:fd:60:6a:b4:48:e3:1b:08:b8:
0f:a6:e8:b5:69:7b:d2:1e:87:3b:6a:08:0f:9f:9b:
17:d1:31:41:c4:ce:28:1f:9a:1f:fb:ea:73:62:44:
c0:c3:95:9a:3f:a4:3f:fe:33:7e:35:5e:d1:fe:49:
91:f0:18:1a:58:90:33:66:d7:6b:6f:25:9f:43:18:
af:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2D:40:39:E3:23:05:2D:86:5B:ED:90:32:08:7C:AC:7A:33:13:56
X509v3 Authority Key Identifier:
keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:60:b0:e8:8f:f4:94:8c:79:96:32:c6:2d:77:5c:fe:a2:63:
04:4b:ea:9e:d1:e3:2e:80:7a:5d:b6:74:ad:ff:2a:53:fc:4d:
90:56:b6:13:06:93:f1:49:84:4e:c3:ba:af:a7:ad:71:ba:0e:
ff:68:14:5d:45:0c:6a:58:2e:9d:40:99:7c:14:c4:4e:80:fa:
98:a9:35:20:da:a7:f4:7b:04:79:56:07:8b:95:d5:fc:3b:d1:
00:b5:08:f1:29:6e:b3:7a:9c:0a:d9:bd:0c:96:bc:6b:fc:15:
f6:7d:6d:3f:c2:a7:8a:d5:74:a0:18:3f:74:f9:c9:76:a5:bc:
b0:0b:1d:92:6c:38:c6:7c:22:bd:e4:ad:1c:6b:d2:eb:a6:b4:
2c:23:15:70:b6:15:a9:50:f4:22:cc:17:73:45:7c:1e:93:7b:
9c:7c:ee:26:2b:ec:55:56:08:d8:a0:51:e2:5e:5f:0a:3a:7c:
79:c6:aa:1c:43:04:6b:5f:43:da:fb:7a:82:f9:a0:62:ee:ae:
48:6a:4e:e5:eb:e9:9f:dd:df:4a:a7:f4:cf:82:3c:85:1f:2a:
33:4f:0e:d9:ac:bc:55:13:5a:60:7d:d9:1a:bd:04:89:10:47:
25:00:72:78:fb:d5:6f:da:dd:43:fe:65:34:9b:34:32:1d:26:
11:8c:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:10:17 2025 by rpki-client