Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json)
Hash identifier: Ws3zzYX3UUsnt/dLO2Qj8804mLjj4yQCHYHDZrpdkKA=
Subject key identifier: 89:D9:2B:1E:27:5E:70:4B:D8:7E:77:16:D7:6E:EC:8F:3D:3C:5D:B2
Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Certificate serial: 01988D6B82C989661815DB04CD2F86DD0EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
Manifest number: 76
Signing time: Sat 09 Aug 2025 06:01:29 +0000
Manifest this update: Sat 09 Aug 2025 06:01:29 +0000
Manifest next update: Sun 10 Aug 2025 06:01:29 +0000
Files and hashes: 1: BI83gyIjEGBOS7ZKdoDrSv8devY.roa (hash: jLwvUyWb11PVZ3r8d/OcSHQ4Hzj4d1bbdW3f/BH7o3c=)
2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: K647oFjc0LLTi3HdnZdx1sQ8yAZxLDDFgVgyDsZ0lJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:82:c9:89:66:18:15:db:04:cd:2f:86:dd:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Validity
Not Before: Aug 9 06:01:29 2025 GMT
Not After : Aug 10 06:01:29 2025 GMT
Subject: CN=89d92b1e275e704bd87e7716d76eec8f3d3c5db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:e1:48:25:84:47:38:18:1a:66:2e:8f:c8:
2e:ed:71:b0:09:c4:15:9c:98:a4:07:6a:9f:60:2e:
66:60:51:7a:7c:b4:3d:22:4d:12:b6:e8:85:bd:10:
24:96:a2:17:f0:79:f4:18:b7:bb:33:5b:d3:80:38:
87:05:b8:9d:bc:c9:aa:bc:ba:95:3c:f1:e3:85:e0:
31:ed:13:66:de:8a:b0:03:28:92:78:9f:4d:b6:2e:
b8:10:64:a1:9d:5b:f1:c3:5f:3d:b4:e7:44:fc:96:
4f:d2:2d:5c:7a:aa:95:df:65:c1:d1:a4:19:33:30:
be:36:69:11:2b:1d:02:ac:ce:4b:28:10:02:6d:aa:
c3:3c:1e:3a:1b:ec:a7:6d:20:b0:9a:2e:8d:4d:3b:
5e:ca:21:9b:47:cd:61:a3:81:bc:66:26:f2:54:2d:
86:0f:45:13:37:c2:5b:46:10:c5:de:93:81:7f:47:
f4:4a:d8:60:a0:78:a9:35:8c:c8:de:99:b7:22:6b:
a7:07:06:d4:8d:b6:7e:47:ba:37:4f:0a:36:25:30:
ca:d7:bc:b6:bf:5b:e9:25:9e:6c:d4:9e:37:19:94:
38:f8:2f:ed:96:6c:47:ad:bf:81:99:84:74:b6:d3:
dd:fc:c1:46:7c:50:14:40:49:68:f6:31:a3:d0:db:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:2B:1E:27:5E:70:4B:D8:7E:77:16:D7:6E:EC:8F:3D:3C:5D:B2
X509v3 Authority Key Identifier:
keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:09:5a:db:45:15:e2:2e:91:b1:61:d5:3f:77:37:26:19:
d6:ae:bf:a2:98:b7:24:45:ce:63:e6:63:07:64:0b:1a:46:1f:
82:e3:fd:6a:52:04:73:f5:c9:14:29:77:62:57:21:d4:d9:c8:
e7:d3:6a:54:41:be:47:82:fa:80:23:db:4c:c4:1b:2a:88:15:
61:52:ab:c7:fc:bd:f7:8e:be:71:31:2f:f1:ea:15:19:15:9a:
4a:9e:88:e9:45:64:03:82:c8:83:ae:d7:a6:63:0d:2d:ab:21:
e6:5f:94:49:54:d2:5b:a4:97:48:54:a4:ad:6b:ba:81:38:89:
9e:96:fa:2d:c8:68:c8:74:d6:06:0e:8d:21:5c:8a:5e:e6:6b:
40:83:4c:b1:80:9f:20:31:db:43:73:db:13:8b:dd:9c:e6:87:
c1:38:63:fc:fe:44:9b:6a:e2:74:72:96:ef:97:9e:b2:b6:1a:
f0:64:bd:33:ec:3d:2b:d4:9a:52:38:23:fa:87:5e:38:e0:34:
9d:fa:71:7b:c5:6f:e4:e4:6e:2c:44:1e:05:82:ae:b4:d3:dd:
51:ee:8d:0c:68:35:d1:5a:16:82:fb:11:0c:70:6c:97:0b:ca:
00:31:7a:df:10:35:a1:a2:03:12:4b:96:79:62:f4:c7:98:c5:
af:77:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:42:48 2025 by rpki-client