Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: toNvml5xAm4+Fqb4ZllDw3TTjOTOAXlRV/6t91y8ryg=
Subject key identifier: 71:2D:25:87:75:82:98:CF:28:18:F9:DE:B1:8C:EB:8B:75:B2:41:35
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 01988FC773EC382EAF8C73BCE7B922999554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 1626
Signing time: Sat 09 Aug 2025 17:01:09 +0000
Manifest this update: Sat 09 Aug 2025 17:01:09 +0000
Manifest next update: Sun 10 Aug 2025 17:01:09 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: BIZA20gU6twT+AtTLTUn0X0y3IJyrPNvMc0RebmeQZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:73:ec:38:2e:af:8c:73:bc:e7:b9:22:99:95:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Aug 9 17:01:09 2025 GMT
Not After : Aug 10 17:01:09 2025 GMT
Subject: CN=712d2587758298cf2818f9deb18ceb8b75b24135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:63:ac:dc:21:9c:86:5b:f9:d4:55:83:f9:
cb:91:6a:39:b4:de:39:5b:73:f6:d5:83:05:9d:f5:
38:e9:dd:3a:59:82:5d:aa:58:75:58:fe:1c:65:49:
89:ee:6c:11:c2:4f:bc:9b:db:c8:6c:8d:c7:70:cf:
c9:4f:6f:2b:9e:08:1d:d4:f8:0d:05:81:b7:53:21:
19:ed:01:f3:ca:8d:ac:c5:27:4b:d6:23:be:1b:57:
32:2b:17:dc:d1:37:68:d8:9e:62:2b:62:65:3e:2f:
ea:a2:a8:ec:e7:e8:0e:d4:51:95:12:d6:6f:28:f5:
f5:04:14:1f:65:c9:83:71:2c:43:58:4d:dd:b9:f3:
53:85:0e:35:76:ee:a6:d1:2a:03:fa:3f:55:e0:a0:
be:bd:5f:19:40:44:a7:38:da:66:ae:47:ac:a1:8a:
8d:7e:b7:c6:f4:22:88:9c:98:e3:f2:88:63:ce:15:
39:4f:2a:fa:f1:ba:0c:de:cb:e3:ba:62:a2:b0:68:
44:35:da:25:01:98:2a:5f:c9:49:2a:e3:29:00:ca:
77:7f:c7:78:59:d0:dd:9c:28:01:5a:68:f9:45:94:
de:0d:d6:41:09:65:5f:a0:0f:09:a9:8a:94:09:6e:
8a:d7:42:a6:ef:e9:4e:bb:5d:43:45:9d:88:eb:e6:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:25:87:75:82:98:CF:28:18:F9:DE:B1:8C:EB:8B:75:B2:41:35
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:6f:5a:97:8f:55:64:f1:93:fd:ba:f4:42:69:9e:f0:4f:42:
4b:cc:ff:ee:7c:ec:75:1c:08:95:91:f0:40:0c:18:4d:03:71:
2e:5d:c6:f4:53:ed:41:6f:54:3f:6c:25:54:0e:8f:de:45:42:
4b:c9:8b:3b:1c:fb:f2:8e:71:e3:75:4d:ed:30:12:b8:9d:b6:
8c:3c:00:37:bf:e9:c1:ec:e2:b3:1a:8b:96:52:a8:09:02:98:
22:d7:fb:fe:a2:78:85:ab:6f:9f:6f:d7:d2:e5:ca:38:66:bd:
9b:75:44:cf:e7:57:9d:cf:ad:8e:61:6b:df:0c:c4:21:02:12:
d3:06:a6:45:90:b7:9f:99:7f:b6:4f:35:1c:50:ca:14:1f:7f:
7a:fa:90:f3:0c:2f:8d:02:a2:1c:99:57:3a:0d:1a:6a:91:98:
eb:65:ce:46:a9:74:2e:c7:43:80:1b:b5:a9:4d:2d:b8:e3:3c:
0a:2b:18:b1:aa:16:6a:6b:09:2f:80:d8:d6:05:65:95:b1:5c:
6f:23:db:4f:e5:e9:56:a3:4a:bc:bf:bf:3a:2a:68:39:30:3c:
34:07:7f:0a:9f:99:7a:37:35:19:60:68:3a:14:db:79:8c:1e:
e0:bc:fa:19:d4:a7:bb:da:e1:13:e2:81:8f:ca:58:be:53:82:
3f:2c:32:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:35 2025 by rpki-client