Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: UKIPhWVmmg8vwb485Lcy/Xd2Blhrh3GooWTVQZxC+24=
Subject key identifier: 21:6B:57:98:98:54:9C:AB:B1:5A:65:86:DD:B7:B3:DC:A1:C3:B3:F9
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 0198A0F1921E9DECECEE96D9E4123FF4BD2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 1405
Signing time: Wed 13 Aug 2025 01:00:42 +0000
Manifest this update: Wed 13 Aug 2025 01:00:42 +0000
Manifest next update: Thu 14 Aug 2025 01:00:42 +0000
Files and hashes: 1: 3nrrtsZJ-IpATR6f6X0fXP8P3Ds.roa (hash: dHLYJp8vBdcpEI62KQkymjAsJXGywGpijB0UQKFJ6p4=)
2: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (hash: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=)
3: o-IAHNtlfJTe0lrMjkAn3EfKWfQ.roa (hash: 4yZoP16QAdZ03Ygf8PchIKIjGuMurg8hghXjeARQmNw=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: dlDnpNX9NyaAnW75tB6+PR1jcR7zbry6PG3Tawz4B2k=)
5: z9pY0mNZw1275Un36HrGri4KO4o.roa (hash: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:f1:92:1e:9d:ec:ec:ee:96:d9:e4:12:3f:f4:bd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Aug 13 01:00:42 2025 GMT
Not After : Aug 14 01:00:42 2025 GMT
Subject: CN=216b579898549cabb15a6586ddb7b3dca1c3b3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:5d:e8:8d:b3:31:0c:89:0c:62:be:62:d7:
fb:aa:06:81:9e:8e:18:cd:17:d3:3c:c3:ca:05:5d:
67:e2:86:f4:06:25:03:4f:6f:18:1c:6d:ea:19:d3:
7d:b4:bd:85:e1:54:00:42:4e:94:bd:dc:04:b3:35:
f0:77:22:bb:2c:a5:a5:63:dc:79:ae:46:bf:57:9e:
a3:b7:ee:85:2e:e8:eb:c8:d8:90:c1:b0:8c:0d:51:
03:9d:fe:2f:02:fb:fd:14:c4:e8:60:b3:14:ba:63:
f7:bc:5a:86:32:ea:eb:32:9a:87:f1:aa:8a:f3:bf:
02:ea:41:09:e9:57:9d:4a:a8:39:49:16:bb:ab:8e:
43:12:5a:5d:05:c5:f4:00:ee:80:55:91:29:d0:41:
97:a7:ff:70:90:80:b2:f6:98:e8:4e:4d:cf:b8:1e:
f0:56:57:46:d8:76:7b:f5:c4:b3:55:3e:37:20:eb:
88:2b:f2:d4:4f:c2:21:12:ad:12:1a:c5:52:76:bc:
c2:7b:05:5b:52:1c:c4:d4:80:c5:66:8d:77:8e:9a:
75:b8:2d:8e:55:c6:c8:cc:b1:a7:65:b0:d9:76:b2:
3a:3b:32:62:dd:52:dd:48:81:b1:14:b2:c7:64:f2:
53:ba:9f:36:20:f4:20:28:9f:a8:51:d9:fe:a9:e7:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:57:98:98:54:9C:AB:B1:5A:65:86:DD:B7:B3:DC:A1:C3:B3:F9
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:e1:98:5f:17:61:55:aa:08:d1:c0:0f:e1:ce:70:b4:35:5d:
2b:cb:78:2c:24:f7:23:2e:c9:0f:b8:52:40:90:1c:4e:d7:f2:
e2:31:44:ad:59:28:f5:f9:36:2c:ba:8b:2f:f0:db:2e:69:c8:
38:b1:d7:b7:9d:6d:5e:a0:29:60:c7:85:b7:b4:cd:88:3d:3d:
ea:5a:29:15:45:45:ee:81:bf:6c:d8:25:7a:80:c4:64:e9:23:
dc:30:0c:8d:d1:2d:fe:18:d4:0e:a4:23:ed:79:3b:b0:05:74:
74:2d:d0:00:5a:fa:47:0d:1b:aa:4f:28:14:72:b2:96:eb:16:
e3:8f:6f:eb:a4:da:ed:5c:f7:53:7d:28:e7:3f:35:2b:91:5a:
44:71:ba:83:73:c7:72:ef:d2:e0:2c:c1:74:73:06:f1:19:95:
fe:cd:fa:07:42:27:f1:5c:85:f5:81:02:42:99:4f:84:5d:ed:
eb:8a:01:d3:ab:01:fb:08:ca:42:15:cb:ec:4d:a7:9e:40:ee:
bb:98:51:99:7a:44:87:37:5b:7c:76:25:db:8a:4d:71:c0:eb:
fb:31:86:0b:ac:ff:aa:4c:66:48:87:53:09:21:67:ce:61:d9:
1a:f4:5f:0f:cc:ce:d7:e2:ba:d6:85:52:6b:8f:96:4e:72:63:
4d:30:f4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:05 2025 by rpki-client