Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
File: pcUihESYJRJgyNqrvCxeGp6PNf4.mft (raw, json)
Hash identifier: vho9xGDRVPjC/TV9BWqRMpHuKiO5jZcO68ZDn6l6YhQ=
Subject key identifier: 4D:28:23:C0:8B:17:E9:FA:12:72:D7:19:55:1B:9C:77:6C:65:38:05
Authority key identifier: A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
Certificate issuer: /CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Certificate serial: 01988BEAC9E12438E90DD906FB84FB72C765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
Manifest number: 0CD9
Signing time: Fri 08 Aug 2025 23:01:16 +0000
Manifest this update: Fri 08 Aug 2025 23:01:16 +0000
Manifest next update: Sat 09 Aug 2025 23:01:16 +0000
Files and hashes: 1: mjQr1y7CThAMWtspCv07qky-Fa8.roa (hash: 1Julh/eRIdAGf0PUhXIsjYftTFh05ZaBnAtvljFrsQs=)
2: pcUihESYJRJgyNqrvCxeGp6PNf4.crl (hash: QLqNz59Bxs0TQ3fnHVJCBCYA7Todpa/sId5JQlV6bOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:c9:e1:24:38:e9:0d:d9:06:fb:84:fb:72:c7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5c522844498251260c8daabbc2c5e1a9e8f35fe
Validity
Not Before: Aug 8 23:01:16 2025 GMT
Not After : Aug 9 23:01:16 2025 GMT
Subject: CN=4d2823c08b17e9fa1272d719551b9c776c653805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8e:57:e2:2a:6a:89:38:ff:1f:46:9c:b5:30:
30:8b:29:de:12:e2:01:e2:ae:44:a9:61:88:da:d1:
2c:82:10:72:1a:b7:5a:01:9a:9e:98:f0:86:7b:20:
07:0a:4e:5c:f1:6a:a2:40:0e:3d:c8:ed:09:b1:86:
d8:b1:25:cd:d3:71:95:c7:bd:e5:32:6e:14:d7:67:
48:e9:89:38:13:57:65:be:cd:88:3a:1e:3c:50:38:
93:93:29:ca:5a:32:db:0e:74:47:28:dd:00:3a:6b:
ad:da:c6:b0:a1:24:77:ab:1d:fa:e3:34:89:e8:a5:
6c:ad:17:ce:23:ce:b2:c2:fd:bf:a8:6c:f9:75:0f:
08:f8:0b:50:8e:37:76:3f:a3:ea:98:73:6f:56:98:
18:0a:ab:3d:96:79:47:53:f8:db:a8:18:e6:d1:4f:
d5:df:93:f2:1b:1a:4d:ce:5d:98:5f:82:04:f0:5b:
05:4e:69:61:46:50:d3:d9:0b:82:06:10:34:4d:3b:
f7:7a:3e:32:2a:8c:62:5c:0b:fb:92:93:c2:10:5d:
22:33:84:f4:99:5a:f9:a3:f6:5a:81:1d:41:a6:9e:
0d:5e:04:b1:c1:17:bc:a4:01:12:0c:b4:2b:e3:10:
a7:64:e6:21:a4:f9:f4:9f:94:0a:56:a7:f2:8f:8b:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:28:23:C0:8B:17:E9:FA:12:72:D7:19:55:1B:9C:77:6C:65:38:05
X509v3 Authority Key Identifier:
keyid:A5:C5:22:84:44:98:25:12:60:C8:DA:AB:BC:2C:5E:1A:9E:8F:35:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcUihESYJRJgyNqrvCxeGp6PNf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2ee229-68c5-4f8c-807e-548e7f024314/1/pcUihESYJRJgyNqrvCxeGp6PNf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:49:3c:74:fb:9e:35:e1:d0:29:b0:35:01:55:d2:7e:f5:2b:
bd:c6:97:6b:9d:cf:18:42:f1:12:1c:d1:27:61:5a:35:c5:5f:
77:c2:05:66:a7:be:ee:46:7c:9e:8b:d6:1d:1c:f5:df:f0:1d:
83:16:2e:e5:3d:96:e1:f7:0b:db:15:d3:48:f6:9f:52:1c:68:
58:d8:96:83:77:ec:36:4c:27:a0:58:95:62:d3:83:10:f9:ad:
67:c6:29:cd:cd:23:d2:a3:c3:9e:31:be:e5:d7:64:70:e9:a0:
fd:5d:3d:4f:8d:85:48:ab:09:65:ad:89:be:08:8d:f4:41:08:
5e:cd:47:3d:be:16:64:74:3b:80:82:93:32:99:90:00:07:ff:
1d:eb:cf:bb:3d:75:93:b3:90:16:e8:f9:3d:ae:9a:38:d8:e3:
df:43:95:58:8e:29:99:bd:e1:0f:f8:7c:da:de:95:b4:dd:df:
c7:86:9b:1c:d8:96:00:21:2c:7e:73:74:df:d4:c7:9c:64:a3:
15:ce:00:92:e0:ac:21:4e:7e:fa:f1:4f:e8:72:12:b6:79:df:
13:d2:0a:fd:9f:b2:a7:55:89:21:b9:11:8f:78:47:1d:62:d8:
f6:3e:df:8a:d9:97:46:73:ac:0e:da:28:eb:a6:f8:0f:e5:11:
53:3d:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:21 2025 by rpki-client