Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: 3wogYe+S8kpSKNWOhVtf0X5UzRzgecJiApDfm2toKxo=
Subject key identifier: EB:B1:BB:1E:02:5D:A0:CA:A1:C5:57:A4:68:7B:53:04:AF:5C:EF:74
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 01988D33C5F442BB1FD6A76AE2228577EBF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 10AF
Signing time: Sat 09 Aug 2025 05:00:37 +0000
Manifest this update: Sat 09 Aug 2025 05:00:37 +0000
Manifest next update: Sun 10 Aug 2025 05:00:37 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: 724nuys0XONgSLOMH1J9Q9LE0pNkKAjE6etFvd74rak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:c5:f4:42:bb:1f:d6:a7:6a:e2:22:85:77:eb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Aug 9 05:00:37 2025 GMT
Not After : Aug 10 05:00:37 2025 GMT
Subject: CN=ebb1bb1e025da0caa1c557a4687b5304af5cef74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f4:55:cd:d5:6f:ce:d0:f2:8d:af:3b:a6:b0:
d5:66:70:ba:2d:0b:2d:41:d4:31:8d:64:8b:c7:c9:
c1:fe:8b:89:e0:2a:ba:9d:61:1b:fd:e4:cc:3c:46:
7a:51:91:96:e1:aa:e7:04:31:37:59:4d:ed:f9:99:
60:bd:68:bc:95:0f:a0:06:61:ed:5b:92:b5:9f:8d:
8c:40:46:67:3f:63:e9:90:ee:85:83:69:3d:12:f2:
b5:38:98:5e:cd:1a:6d:ad:b0:4b:d2:4f:d1:4f:a7:
99:16:d9:d1:03:6f:ff:20:49:1a:ad:61:cf:51:67:
7c:8b:e2:73:0e:79:55:0f:93:b0:59:c6:45:f6:90:
d8:6b:6c:11:7c:c2:d2:fe:57:0f:ea:6f:d9:19:fe:
5d:df:3e:1c:5b:2d:9b:9a:c3:02:a3:e5:f2:44:fa:
b5:c6:c4:10:fc:98:02:cf:a9:b7:8b:c1:0f:3e:f1:
c5:d4:ad:f7:29:bb:c6:34:79:80:21:54:c4:98:cb:
d2:f3:78:61:f1:a7:fc:e7:c1:5b:ef:75:9b:b9:99:
3a:63:fe:bc:39:a4:bc:39:e3:23:95:55:c6:da:b9:
6d:11:ec:85:77:07:5e:65:47:57:bc:bd:08:b4:df:
e6:5a:73:fa:50:56:63:0a:3e:8a:3e:5c:4f:fa:94:
a9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B1:BB:1E:02:5D:A0:CA:A1:C5:57:A4:68:7B:53:04:AF:5C:EF:74
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:17:43:13:9d:0f:8d:37:71:ae:d0:70:1e:67:91:43:44:
f4:c8:1c:f9:6c:25:6b:1e:4e:4c:bd:8d:11:2c:7b:07:bd:53:
65:0f:cf:14:4c:ec:2e:95:12:ff:ce:f8:87:2a:52:e1:2b:6f:
6c:f0:b5:34:f2:05:71:31:70:b4:6f:c1:cc:b1:02:26:1a:57:
98:4b:48:0a:0d:42:61:bd:2e:3d:4f:6c:e5:fd:2f:a9:07:fd:
b7:48:2c:43:b4:a0:d4:0c:9c:da:49:50:5b:24:d6:9d:0c:7e:
63:e4:e9:66:fe:4d:77:57:d3:00:2a:f1:94:79:fb:dc:5b:bd:
ae:dd:e1:93:15:c0:83:a5:7a:22:d2:d9:82:5f:c5:8c:f1:68:
7b:48:21:86:c8:fb:75:88:a4:e1:a3:52:27:19:7f:82:c8:6f:
1c:57:2c:b3:a0:64:42:15:11:eb:7c:d3:8c:27:ef:bb:65:a9:
fd:21:ad:fb:44:d7:80:bc:4c:1d:6f:2f:6d:0e:0c:a4:14:b7:
cd:b0:da:15:6e:dd:6b:02:64:70:6b:38:ff:0b:35:ce:20:8a:
b8:3d:3d:cf:35:67:de:b4:b7:43:b5:a9:fd:e9:1d:c8:dd:6b:
a1:2f:a0:2f:d2:a5:a1:92:7c:26:34:56:a2:79:d5:46:ef:74:
e1:ba:50:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:21:32 2025 by rpki-client