
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: E81ApnLgX3kXzuYIyXF4imzegmZwBiPUWVG8IWtF5Q4=
Subject key identifier: 64:6A:CE:27:EE:AA:2D:75:F4:A0:0B:4B:4B:F6:C3:A5:1A:04:7B:0B
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 019893362E1116CF002B190C5710DAED48C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 09:00:58 +0000
Manifest this update: Sun 10 Aug 2025 09:00:58 +0000
Manifest next update: Mon 11 Aug 2025 09:00:58 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: NkUeYEHAsp3LOOirpGZxoHGA+4O5yTxpKEcScNxCNuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:2e:11:16:cf:00:2b:19:0c:57:10:da:ed:48:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Aug 10 09:00:58 2025 GMT
Not After : Aug 11 09:00:58 2025 GMT
Subject: CN=646ace27eeaa2d75f4a00b4b4bf6c3a51a047b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9b:39:30:a1:a2:52:69:69:bf:23:5a:ab:b0:
8f:01:c9:07:a3:2e:64:33:88:97:86:07:16:86:b4:
f7:b6:95:0b:f9:fe:fc:95:e9:e5:ae:58:65:06:63:
4a:c8:ed:6d:e5:46:f4:27:d4:7e:15:d5:6b:33:e2:
99:6d:a3:eb:70:2a:23:97:0a:d2:c2:ee:67:05:28:
f5:58:32:dc:07:74:f1:40:51:7c:4a:b3:ab:b5:4e:
96:7d:4e:a2:68:94:48:93:1c:04:a0:b2:f7:28:37:
7b:f4:2f:94:44:8d:fc:9c:ec:fd:af:73:5c:e8:82:
43:16:da:e3:1f:5c:ce:7f:0d:e1:b2:d9:99:dc:83:
12:ab:55:4c:33:7b:07:35:74:8f:dd:e0:cb:d9:1a:
73:1f:d9:6c:0f:d5:00:ee:23:1e:7e:43:a6:c1:fe:
3e:74:84:a5:f9:53:82:47:52:85:8b:ff:25:c1:46:
d0:67:40:16:9d:77:18:23:5f:89:c3:f5:db:6f:b3:
b5:0a:72:d4:bd:b3:82:80:9e:0a:0a:b0:4c:6a:96:
7b:8a:f1:1a:4d:64:97:6e:74:7b:52:5b:3f:7c:41:
27:df:cd:8e:14:f3:dc:3e:83:2f:a3:01:da:c0:03:
e0:b2:88:21:b8:96:05:6f:46:2d:f6:a8:fb:d8:60:
7c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:CE:27:EE:AA:2D:75:F4:A0:0B:4B:4B:F6:C3:A5:1A:04:7B:0B
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:32:da:57:f3:30:36:2d:e9:8d:41:ed:3f:b0:e4:08:79:f6:
14:99:bd:94:b5:84:e4:39:7f:e8:07:f5:27:91:e3:ab:b0:c1:
c0:ca:99:97:8a:f1:09:57:2e:10:75:5d:1e:78:13:c0:d4:dd:
5f:c5:d9:61:45:6e:04:00:0e:ad:62:8a:cc:e6:2c:18:7a:bd:
c1:da:ed:c4:83:05:b4:39:96:37:cd:79:fd:4e:31:3a:07:48:
34:4f:ae:68:79:69:c3:6e:7d:7e:74:b2:c6:59:62:29:ae:f9:
0e:d9:b6:09:6f:62:99:1c:e1:47:61:aa:6e:46:fa:92:bc:8a:
d6:c4:39:8a:e0:24:4d:a6:d9:15:b3:f7:67:b6:15:95:93:09:
0c:a4:12:fd:d6:71:e3:d0:b2:9b:31:1f:fe:11:f5:78:e3:64:
be:ce:75:38:52:a7:7c:38:fe:59:31:f4:55:8c:3b:cd:85:f3:
06:d5:25:59:5f:0c:06:cc:81:04:e6:21:26:b5:f9:63:40:9f:
27:3e:0f:a2:3b:9d:74:a1:56:63:42:d8:e4:08:d1:2e:e7:04:
95:49:6e:0d:cb:c3:c3:4c:7d:fd:e2:9f:f9:26:9c:73:9c:4b:
31:43:27:8c:26:02:d6:32:43:d0:bb:04:34:0d:15:ee:c3:f8:
47:4e:08:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:41:46 2025 by rpki-client