
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
File: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft (raw, json)
Hash identifier: Xs+qEgnZXkp13BpRaSc6zCkv8iwyOrDPgnY39QRaHao=
Subject key identifier: 5E:E1:4E:D0:FA:08:38:4E:49:AE:B8:05:EF:37:FD:89:51:0C:EE:F1
Authority key identifier: A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
Certificate issuer: /CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Certificate serial: 019880542B97777153A804CCAB60A566FBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
Manifest number: 02B1
Signing time: Wed 06 Aug 2025 17:00:56 +0000
Manifest this update: Wed 06 Aug 2025 17:00:56 +0000
Manifest next update: Thu 07 Aug 2025 17:00:56 +0000
Files and hashes: 1: aU9nU6J43VKML7pOttC9ZY6jQ98.roa (hash: FbRy0Mzafv2hiOEuNsxPoMw70K3GoSJZXHuz7LnmQeE=)
2: pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl (hash: b/BhDcixn6218K8r4PFqHHOc5danV1vjYVyFOG4Sn5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:2b:97:77:71:53:a8:04:cc:ab:60:a5:66:fb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f5533a527b264ca2e8373285d780d33a2bd0a1
Validity
Not Before: Aug 6 17:00:56 2025 GMT
Not After : Aug 7 17:00:56 2025 GMT
Subject: CN=5ee14ed0fa08384e49aeb805ef37fd89510ceef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:d5:3f:62:12:1c:c0:c2:aa:14:c1:a4:db:
d9:ae:28:04:d5:22:9a:69:2a:c7:c1:bf:e0:82:88:
ba:b2:02:be:c8:04:23:cc:a2:e8:e0:95:8b:d4:db:
6f:2e:45:41:05:42:61:af:2f:03:46:a5:4e:c3:e6:
f5:23:44:dd:c4:67:bf:c0:e5:dd:54:bd:50:c6:f4:
41:22:86:5a:07:9d:49:9f:4b:76:0f:de:f0:d7:06:
19:b0:4b:80:28:2d:cc:26:b7:8c:3d:3c:58:a5:9d:
a8:a6:8f:89:6c:47:c8:cf:4a:a9:9b:9d:e6:bc:4d:
2a:65:63:71:12:d8:d7:e2:85:13:05:4c:11:01:6a:
4c:30:f7:a9:38:17:d0:5f:50:eb:09:3f:22:26:a8:
b0:71:79:8a:9c:81:bf:95:f3:62:39:2a:a5:c1:a7:
c5:fd:af:35:33:2d:b1:a2:4c:f5:83:67:7a:ab:dc:
9f:3f:c0:e3:1c:0e:59:a2:4c:d7:a9:9b:8f:8a:a1:
f9:69:5a:d2:7e:9d:cd:fe:74:66:15:ae:bd:58:be:
db:17:12:14:2c:f6:58:d5:74:70:b2:a1:01:a2:8d:
12:fa:ba:84:07:a4:1c:b6:3e:c5:be:90:8c:97:17:
f0:14:9a:49:54:55:86:ea:ff:d3:14:e3:3e:10:a2:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E1:4E:D0:FA:08:38:4E:49:AE:B8:05:EF:37:FD:89:51:0C:EE:F1
X509v3 Authority Key Identifier:
keyid:A4:F5:53:3A:52:7B:26:4C:A2:E8:37:32:85:D7:80:D3:3A:2B:D0:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/afc3c8-e952-4070-a546-424462bc949b/1/pPVTOlJ7Jkyi6DcyhdeA0zor0KE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:e9:51:2f:09:58:cd:9e:97:50:ba:f5:5d:eb:01:9e:59:
bc:d3:5c:4b:81:57:48:f0:90:03:46:6b:38:56:35:28:1c:15:
3e:77:b9:e9:df:14:f6:28:86:69:db:0d:c6:40:52:13:3d:6f:
8c:54:b4:1a:5d:2c:d7:d7:f6:a1:9e:c4:02:af:56:c7:ab:a9:
f4:fd:33:16:de:6d:a2:53:47:ec:d0:7e:5c:4c:7d:ec:47:46:
59:ce:03:16:82:02:f5:68:45:78:ba:22:e5:ee:5a:ae:87:53:
18:06:96:45:f7:21:ec:64:5f:6e:e9:08:db:1b:99:cb:4b:48:
4a:cd:92:a7:83:a3:a8:ba:c9:49:71:e6:52:c2:49:df:a7:b4:
7f:88:3e:30:00:4f:15:bc:86:ae:06:c6:28:15:17:c4:34:31:
7b:78:90:9e:0a:3e:76:e2:97:b0:a7:a7:4d:be:87:ca:b0:6e:
35:a3:70:06:96:4c:59:9d:fd:4f:c2:cc:e0:68:35:07:17:40:
68:ad:d9:d2:41:86:73:52:4e:e2:a0:52:6a:69:6e:73:32:c8:
f5:f5:3e:cb:33:c3:e3:31:eb:a2:34:2c:63:46:67:61:9f:eb:
19:f8:fe:80:a7:2f:e2:ab:85:58:55:1f:dd:98:5d:91:73:5c:
41:75:ff:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:14:26 2025 by rpki-client