Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
File: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft (raw, json)
Hash identifier: TmQgfjYtTTBuyoenIdeP4GmCGxZ9oDPxR+2g97DAfVk=
Subject key identifier: E9:6B:02:F7:C6:50:55:8A:B2:99:56:81:C2:46:CB:3E:94:0D:F0:7D
Authority key identifier: A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
Certificate issuer: /CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Certificate serial: 019897B7C43485DC8472F6BA0A259DE727E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 06:00:59 +0000
Manifest this update: Mon 11 Aug 2025 06:00:59 +0000
Manifest next update: Tue 12 Aug 2025 06:00:59 +0000
Files and hashes: 1: 561vyQubUBVe_MLgzSiqqYxU6_Y.roa (hash: 6HivC1fxPXMlCdAVu0fVBq06y4Hg53XB3H7/WZM7Ul4=)
2: pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl (hash: Bzo0LCeW17Bqhu18Fw5yK0eK1C0CqgNbTScgjLcVuZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:b7:c4:34:85:dc:84:72:f6:ba:0a:25:9d:e7:27:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f523d948387d8c5fcdf752e0a1cc408cfe8395
Validity
Not Before: Aug 11 06:00:59 2025 GMT
Not After : Aug 12 06:00:59 2025 GMT
Subject: CN=e96b02f7c650558ab2995681c246cb3e940df07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6b:5e:a0:fd:da:aa:38:73:d5:15:74:cc:5b:
38:76:25:dd:6f:20:36:3d:0f:da:4b:f4:f4:69:fe:
ec:96:06:aa:1f:47:32:d0:c6:87:0a:d5:81:13:ff:
26:4e:11:ba:67:6c:84:05:dd:f7:57:f4:28:d4:43:
02:74:32:a3:d5:24:b8:77:02:dd:93:c1:aa:1e:a1:
24:e8:03:1f:66:11:c5:fd:b7:82:2e:a7:af:2a:f2:
86:c7:a1:2a:72:5a:44:3f:6b:85:81:ba:8a:3e:27:
0e:9a:3f:1e:ef:b3:62:e5:d6:cb:f1:73:9e:5f:7f:
4c:58:fb:dd:e7:e2:15:20:06:1f:7d:9b:03:0f:d2:
f9:4e:c0:ae:f8:58:3e:66:f5:68:12:24:5d:9b:8b:
b8:e1:7f:9a:3e:a0:9d:5f:d0:60:af:91:f9:7c:4e:
1c:05:ec:3c:8f:a8:5f:fd:8c:01:86:71:36:b9:b9:
07:57:b9:fa:c8:a3:32:3e:a8:1e:1f:e3:57:35:ae:
74:ac:4e:6f:79:ae:fd:6e:fa:01:88:5d:87:8f:63:
c7:24:e5:c0:26:95:1f:8a:9f:d1:e7:9f:9c:a3:1b:
98:3d:15:d2:bd:53:7f:9e:ff:a9:68:46:82:c5:e6:
6f:4a:77:52:a3:81:ac:c6:2b:6a:d2:de:80:6b:a9:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:02:F7:C6:50:55:8A:B2:99:56:81:C2:46:CB:3E:94:0D:F0:7D
X509v3 Authority Key Identifier:
keyid:A4:F5:23:D9:48:38:7D:8C:5F:CD:F7:52:E0:A1:CC:40:8C:FE:83:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/085c35-28ac-4241-b951-20a900bc776a/1/pPUj2Ug4fYxfzfdS4KHMQIz-g5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9b:1d:9f:f7:50:73:b5:26:84:4e:f0:c9:7a:45:29:8d:0c:
a2:13:0a:e9:4b:ca:74:9f:b2:38:ea:e2:5b:68:c1:65:0a:67:
9e:77:c2:c4:89:50:9e:20:c2:76:89:50:26:72:70:08:e4:f2:
0d:cd:46:5b:2c:d2:27:6e:1e:81:b3:9b:53:85:fa:3a:b5:97:
2d:03:ae:8e:1e:ff:5e:cf:30:47:42:93:48:07:8d:d4:42:b9:
0e:26:bd:59:10:fc:54:d9:1b:09:10:cc:3f:15:c6:16:03:0b:
c9:1b:e5:33:bf:bb:eb:e1:75:00:d0:33:c0:5d:27:cf:76:3c:
77:f0:5e:23:d0:a8:eb:50:57:d7:98:ee:46:eb:ae:e0:72:06:
99:10:55:44:1e:2e:6c:a6:47:aa:b7:af:0e:fc:2d:74:e2:d2:
0d:fc:c7:df:ff:3f:08:5c:8f:32:96:c0:07:35:69:c5:cf:9c:
07:6b:72:54:c0:f9:34:56:4d:ad:fd:c8:39:f2:12:1a:17:94:
a1:9e:86:74:07:15:a8:ae:d3:03:f8:21:4b:ee:11:4a:78:3b:
0d:35:46:2d:70:7f:56:de:46:89:a5:a0:6a:91:6f:a5:6c:d6:
52:8a:8b:99:d5:fb:76:cb:3f:a6:a0:a2:17:16:fa:d1:c5:d0:
68:6a:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:31 2025 by rpki-client