Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: P5C1mOUYN9e+X/UT6RzYJKsYz6/d0sYCXLeuMe3wmVo=
Subject key identifier: AC:37:AF:A5:E7:5E:A9:33:28:A6:86:04:2B:D2:01:90:62:17:3E:6A
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 019874506C50C054121E89FEB227278024EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 10CF
Signing time: Mon 04 Aug 2025 09:01:24 +0000
Manifest this update: Mon 04 Aug 2025 09:01:24 +0000
Manifest next update: Tue 05 Aug 2025 09:01:24 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: PIEKo/oexJDim6LbUsx1nT7YHGjHb1xWlTZ4pr0Bsss=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6c:50:c0:54:12:1e:89:fe:b2:27:27:80:24:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Aug 4 09:01:24 2025 GMT
Not After : Aug 5 09:01:24 2025 GMT
Subject: CN=ac37afa5e75ea93328a686042bd2019062173e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:38:aa:27:b8:15:5e:6c:77:eb:47:5c:40:
3a:be:7b:83:34:53:fc:d0:3c:39:9d:37:25:c0:7f:
1d:d0:26:a5:95:91:02:cf:e2:4d:9f:17:b0:4e:28:
09:1f:5f:b0:cd:e5:2a:63:b3:b9:c2:b4:00:a3:d3:
6d:de:51:5c:6e:aa:a5:f0:da:35:a9:99:ed:49:60:
4e:cd:66:90:04:bd:7e:01:44:cd:56:86:a8:47:29:
ae:a7:80:1e:6b:a6:11:8e:16:59:ec:8b:86:d2:08:
14:f7:45:1e:d1:83:0e:d9:5a:a5:91:86:41:0e:f4:
11:5a:3c:41:80:63:a1:df:22:db:e2:69:fa:95:1d:
df:7d:b4:f0:23:f7:fd:3b:35:d5:cd:79:e5:2f:e7:
0d:8f:33:4d:4e:78:1c:97:fd:20:ae:96:df:06:2b:
32:47:51:58:7a:97:cb:fe:22:39:7c:7b:f5:67:df:
fb:c5:24:6c:2e:dc:ce:e8:d6:74:02:a9:6b:95:03:
a2:71:f2:7d:27:fe:85:dc:5e:ec:da:86:61:a9:01:
1a:be:fc:40:f7:e7:ed:1f:b5:79:3d:67:96:aa:ab:
37:c6:9b:e8:c5:99:92:9b:d3:1b:5c:c6:58:15:fd:
e9:9f:e7:aa:c5:02:30:c9:ac:2f:85:13:e7:80:9c:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:AF:A5:E7:5E:A9:33:28:A6:86:04:2B:D2:01:90:62:17:3E:6A
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:2f:38:36:27:43:2d:b4:63:99:a0:ad:d9:d7:a4:22:49:17:
99:89:9f:1a:57:c0:a0:fc:b3:48:7f:74:ac:c6:8a:83:ea:2c:
c4:9b:24:37:52:0f:ca:a3:61:e1:22:75:61:58:78:bd:2a:4b:
f7:f5:11:17:45:67:8e:4c:ec:df:47:c2:69:e4:a3:c2:89:6d:
2b:e8:0a:99:20:35:8e:75:0e:f1:df:07:49:ac:e4:cf:4d:f0:
85:7f:d8:49:f2:e6:b6:cb:2c:8d:6f:68:29:83:d1:44:51:e4:
e1:fb:32:80:6c:b9:c4:41:b0:87:8d:d7:3d:f8:76:2b:41:8d:
b5:0d:3c:4d:ff:97:89:b0:e6:93:bd:c3:e2:61:ee:d4:15:c9:
b2:c9:f5:57:f9:2e:63:f7:3f:da:b3:af:b7:3c:b4:3c:73:b1:
c6:07:14:f1:4b:44:55:a3:47:cf:0d:8d:0a:0d:94:0b:42:e5:
ae:59:6e:c4:c8:d8:c6:18:63:6d:91:66:18:b3:44:2c:3d:03:
65:f7:03:7b:13:d8:f3:3e:3d:34:97:0a:5d:6a:17:fb:91:66:
12:b4:d9:82:b6:c3:a0:3e:76:99:2f:a8:00:b7:23:d3:bf:6d:
a2:53:e8:d8:96:c8:dc:62:81:e6:d8:76:1d:f2:f1:ff:12:e2:
28:e9:f4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:58 2025 by rpki-client