Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File: pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier: p8YDWCi0BWMUR5Pyg/+naQZy0FzL+xs4r/52iUS04oY=
Subject key identifier: F7:8D:4A:6A:A3:5E:82:AC:A2:8E:20:D3:D4:3A:9E:8A:03:F2:23:27
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer: /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial: 019873E1DBE2F9766579BC09D2F3F12CB7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number: 162F
Signing time: Mon 04 Aug 2025 07:00:38 +0000
Manifest this update: Mon 04 Aug 2025 07:00:38 +0000
Manifest next update: Tue 05 Aug 2025 07:00:38 +0000
Files and hashes: 1: oTERYQxbfcdAepRJdL-H3PXCPnk.roa (hash: BUX480Cq0/FWcz+EdrT0tY5q1vVSAi6pm1ula8qFGn4=)
2: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: oH5LTurWvycaojF5QUtoWSazX5RFeRlgssfMg5VW0Zc=)
3: wsY5k4qqG0xYHV0_JKKO-MLN1Lc.roa (hash: f/706SBS64fiaR4N+7m+WUBpo55cQMTVv5UqqvUPZQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:db:e2:f9:76:65:79:bc:09:d2:f3:f1:2c:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Validity
Not Before: Aug 4 07:00:38 2025 GMT
Not After : Aug 5 07:00:38 2025 GMT
Subject: CN=f78d4a6aa35e82aca28e20d3d43a9e8a03f22327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:44:75:df:cf:d9:5a:64:87:78:f7:94:34:
0e:2c:47:57:20:d2:7e:8b:d5:72:58:f6:73:f9:d4:
27:24:b0:b4:2e:41:d3:ff:4b:83:a3:b6:58:3a:97:
e5:86:81:e6:c9:15:3c:4b:75:17:f5:84:a5:be:5b:
dc:fb:5d:2a:f3:be:bd:d3:08:72:01:f0:fd:d2:a3:
f2:48:33:70:bb:1e:27:31:7b:cc:fd:f2:55:b9:d5:
22:af:5a:7f:96:5b:2a:42:b3:75:50:39:9a:e6:e9:
b4:cc:1b:31:5f:64:21:4c:23:df:36:79:1b:15:36:
21:66:44:05:9c:48:27:fe:3c:0d:17:d7:e2:7d:c1:
04:cd:a0:f7:69:90:e8:89:4c:d8:0c:b2:4d:9a:f4:
93:9e:cb:e8:50:b6:f3:72:ba:fa:dc:20:8b:76:c0:
00:43:bf:2f:1b:78:88:50:5f:c4:45:ee:32:77:3c:
c8:ba:c6:02:9d:2e:c8:6a:19:82:f2:d6:73:ed:cc:
c3:4f:a1:9a:9f:11:18:43:6d:d9:78:0d:f3:06:fa:
01:f3:08:8c:b2:24:ed:0e:9e:6b:a2:b7:ca:8e:e3:
cc:3d:48:46:bc:40:ea:fc:91:b0:c6:c0:28:65:fd:
7c:69:12:23:63:0b:80:33:30:62:ec:d3:30:f3:24:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8D:4A:6A:A3:5E:82:AC:A2:8E:20:D3:D4:3A:9E:8A:03:F2:23:27
X509v3 Authority Key Identifier:
keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:53:dd:a8:f3:d4:44:5d:2d:2a:04:7e:5f:65:72:6d:af:33:
c5:bd:dc:e2:2a:31:b6:53:f8:91:75:fa:85:ad:ea:38:f8:e8:
57:c7:e2:8b:0c:40:a4:38:fd:4e:3d:58:e5:e7:6e:2e:c0:6b:
a0:2f:07:12:c6:53:36:01:f3:9e:9e:fc:64:21:47:be:db:98:
29:52:a1:dc:32:4a:c6:b4:d6:00:f9:56:72:92:fd:7d:8a:e1:
3b:1b:d1:72:48:86:18:36:bf:19:a6:9f:96:7f:9c:a5:07:04:
b1:c9:ce:df:1e:48:10:cd:19:ab:b8:28:1f:4e:3b:bb:14:ed:
6e:a1:72:fb:fe:4b:5d:ff:15:f9:65:7e:28:13:70:e1:9c:e4:
d3:83:c9:58:cb:1d:0b:02:a7:dd:20:7d:74:a4:51:d6:df:81:
90:aa:47:c5:2e:bd:87:0a:aa:00:bd:25:c9:e5:b3:27:c8:1c:
7a:ce:db:cf:8b:ff:91:21:e4:24:a3:a0:3c:ab:a1:59:f2:fb:
ab:8e:de:14:e7:91:6c:bb:43:e4:11:0e:f3:81:39:73:c8:71:
44:11:3c:72:e1:36:c2:dd:83:2c:e5:c8:c7:92:8e:27:85:f3:
5f:9e:6b:c7:ee:b4:e4:70:9f:ec:7d:1f:62:bb:dd:ff:34:23:
1c:2e:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:04:33 2025 by rpki-client