Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
File: PcOGJxwOCo0B-xkNaNhf92TRatQ.mft (raw, json)
Hash identifier: 7jUiT1T0Efgi4niTku9zfrmsAPjzco4ylxPaL2dOPzM=
Subject key identifier: 15:A9:43:B0:01:4F:D2:EB:88:BA:0B:7C:45:6E:A2:8A:4F:78:74:33
Authority key identifier: 3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
Certificate issuer: /CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Certificate serial: 019893DB1EC8CFC81FD03FD3C966D803DF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
Manifest number: 0404
Signing time: Sun 10 Aug 2025 12:01:07 +0000
Manifest this update: Sun 10 Aug 2025 12:01:07 +0000
Manifest next update: Mon 11 Aug 2025 12:01:07 +0000
Files and hashes: 1: PcOGJxwOCo0B-xkNaNhf92TRatQ.crl (hash: 4mVdGQnZusB3E5+dvAz5Gx9LQyyk5YA9137C/JNX83c=)
2: dA9mnK7u8SrMJvStuVXROxjQcrs.roa (hash: JKT3V8fX4yHMnqh46H6Ra4xfMdM8EBf4akbaDFvA95s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:1e:c8:cf:c8:1f:d0:3f:d3:c9:66:d8:03:df:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dc386271c0e0a8d01fb190d68d85ff764d16ad4
Validity
Not Before: Aug 10 12:01:07 2025 GMT
Not After : Aug 11 12:01:07 2025 GMT
Subject: CN=15a943b0014fd2eb88ba0b7c456ea28a4f787433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:c3:fc:3a:01:59:d1:b6:22:df:f9:fc:67:
af:5a:e1:bc:6d:c9:96:10:88:83:fa:ac:ba:fe:76:
e2:67:f7:ea:d8:e9:36:ac:62:b1:ec:17:59:da:68:
16:74:1b:75:64:19:f0:56:ef:af:2a:0d:25:59:59:
c9:4d:69:c0:50:cd:52:32:b3:2e:7b:57:0e:67:d8:
27:ff:f7:7f:59:6d:86:04:ba:11:ed:75:be:03:d3:
d1:98:d2:93:1a:cd:36:1a:7e:f9:1c:ad:f9:44:ea:
66:07:2e:59:ec:a6:f7:09:c0:da:25:e5:9b:b6:c0:
05:56:c7:1b:5d:d8:61:8d:d4:0d:13:76:8c:f7:39:
d7:52:07:af:5e:c5:35:ee:98:08:1b:cd:19:48:7d:
7c:91:a9:b6:03:e8:7c:bc:3b:e1:ca:09:2d:0d:a2:
22:64:3c:c8:f3:9c:b9:3b:ab:a2:13:36:fd:1a:b3:
8c:b0:28:34:e5:0b:a9:c5:c5:8d:b7:e5:ad:33:e4:
d4:b1:07:db:b3:e3:ff:6a:51:72:f0:67:9b:dc:a6:
c3:8c:c6:60:39:9a:c0:33:cd:50:34:06:e7:2e:b1:
37:7b:b4:97:5a:08:3c:5d:0d:9d:d8:ff:c5:a2:5a:
a7:09:a9:69:7a:36:aa:14:d4:21:7d:ae:95:1c:d0:
62:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A9:43:B0:01:4F:D2:EB:88:BA:0B:7C:45:6E:A2:8A:4F:78:74:33
X509v3 Authority Key Identifier:
keyid:3D:C3:86:27:1C:0E:0A:8D:01:FB:19:0D:68:D8:5F:F7:64:D1:6A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcOGJxwOCo0B-xkNaNhf92TRatQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f264bb-efdd-4497-bc10-ddfef3c6ad9e/1/PcOGJxwOCo0B-xkNaNhf92TRatQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4e:1f:8b:90:9a:ce:9b:cf:b4:b6:96:8e:86:7e:2a:1c:a7:
ca:bd:0f:cb:80:79:29:86:db:66:c9:40:73:4c:9a:fe:20:c0:
dd:84:ed:72:a4:67:1c:3b:92:e1:a8:a4:fb:5e:37:3d:06:ed:
20:d5:34:16:78:5c:5e:b0:3e:bc:58:eb:08:9c:d4:ea:94:c4:
4a:58:d7:8d:6e:ca:35:d0:c8:89:6e:d5:17:cd:ba:79:7e:86:
16:83:32:2b:de:ea:bb:03:1e:be:f4:3b:39:dc:f9:f5:1d:95:
e8:79:4d:91:64:57:29:c8:a0:49:2f:11:f3:c1:8f:d0:cf:a1:
b3:4c:73:32:ac:e3:ec:1c:fb:76:c7:84:40:46:8c:f9:2a:36:
2d:ea:dd:a0:0d:c9:4a:88:b4:95:70:3e:2b:2a:42:19:1a:be:
5d:8c:aa:da:10:e1:72:5f:5f:17:9e:a7:ae:ad:2d:32:6d:cf:
09:80:46:32:a3:fa:39:ea:c7:bf:49:15:06:97:73:aa:bc:b7:
32:2a:3a:f2:85:6e:c5:ce:ed:e9:09:78:38:02:37:db:11:5a:
15:84:28:23:bc:f4:4f:93:51:1b:50:56:ce:f2:07:d2:27:50:
02:86:cc:14:59:ec:a4:2b:59:93:52:38:2f:2e:99:f9:2a:d7:
7b:2c:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:48:05 2025 by rpki-client