Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: UXFZ4i9aioeEmBWcPq4Ix9016RUwkR2b01hFylQJToE=
Subject key identifier: A7:68:44:98:99:8B:37:01:23:CA:8D:6A:BC:47:B1:89:C0:17:EF:18
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 0198733D8101F168C70577FBFC0234C2EB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 04:01:07 +0000
Manifest this update: Mon 04 Aug 2025 04:01:07 +0000
Manifest next update: Tue 05 Aug 2025 04:01:07 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: 3U8nO2YWjbAnFeGDt+OKqbB01oGyeOHpMYtXuo+zMiY=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:81:01:f1:68:c7:05:77:fb:fc:02:34:c2:eb:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Aug 4 04:01:07 2025 GMT
Not After : Aug 5 04:01:07 2025 GMT
Subject: CN=a7684498998b370123ca8d6abc47b189c017ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:f5:f3:c3:03:8e:ca:9f:69:ea:7f:bb:47:
97:64:5b:c1:6f:25:dc:ea:7e:c2:1b:29:71:dc:79:
68:27:01:50:62:33:c8:05:35:8d:cc:3a:ff:06:ac:
62:94:fb:65:f7:b1:5b:92:e4:e0:fe:14:56:ef:58:
1c:e8:00:99:23:64:b0:ad:f9:54:b0:0d:0e:0d:f5:
a2:cc:04:7d:4c:1d:39:d1:2d:eb:6f:6b:35:55:7b:
a9:fe:ad:c9:b2:71:e5:b5:6b:52:95:90:d4:75:90:
72:5c:9b:b6:4b:70:dd:56:cc:eb:dc:bb:3d:c2:c4:
3b:fd:51:37:53:c9:5b:5b:38:cb:fc:3c:69:dd:34:
2c:a6:b4:ed:64:1f:c7:dc:f2:78:97:88:a9:f7:f6:
7a:46:e1:2e:f5:c8:68:ce:89:f1:0a:67:a4:0a:ea:
81:fd:fb:15:75:b2:ec:89:33:af:df:93:35:90:3c:
a7:6b:15:ed:cc:b5:15:19:35:ad:da:9b:47:d0:cd:
33:97:3d:a0:81:df:4c:96:69:25:af:c8:5d:f0:31:
42:23:f9:eb:1a:93:f9:85:36:25:43:21:fb:bc:6d:
39:bc:0b:86:91:53:43:03:7e:f5:d9:7c:df:68:6e:
4f:d3:96:6a:d3:d9:fc:77:97:ce:c2:b9:23:12:d2:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:68:44:98:99:8B:37:01:23:CA:8D:6A:BC:47:B1:89:C0:17:EF:18
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f0:18:31:61:f9:29:ac:84:88:25:44:ef:d6:9e:f1:86:59:
23:23:f3:12:52:4f:68:97:8e:9e:46:60:af:a7:13:5f:d8:52:
a2:46:92:75:fa:e7:e3:6b:39:3e:cb:20:20:c4:66:cf:c4:37:
a9:01:a9:0f:3f:54:a7:08:92:89:b3:3c:e8:61:7d:b5:7b:33:
1d:58:c0:2f:ae:1e:86:18:ee:5f:50:b3:d8:b0:bf:9e:80:25:
2e:e1:ed:4d:52:9b:9f:27:3e:b6:4f:9e:ad:2a:91:48:bf:c5:
f7:af:30:d4:61:db:42:87:25:70:1f:8a:3b:46:41:d8:cb:6c:
62:12:81:71:4d:40:0e:b9:b4:8f:42:0b:23:ec:d7:7e:79:6a:
81:fe:5d:f2:26:a4:e9:2e:19:59:a0:1b:f2:c1:8f:05:77:75:
e4:55:36:1d:fd:1e:ac:24:4a:0d:92:64:d5:76:de:4d:e9:43:
73:20:81:aa:70:a4:76:87:ad:0b:77:b7:63:6a:b9:03:d6:76:
6d:d5:06:74:b8:cf:2e:4d:9a:77:6f:d6:52:e7:0b:97:d3:7c:
07:da:95:2d:00:7a:99:b4:44:03:44:05:39:a1:4c:5e:58:6e:
c1:fe:b8:67:5e:cc:9d:35:82:bd:7a:85:e4:74:19:00:57:9b:
d8:ff:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:59 2025 by rpki-client