Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: VCtQ3HAzxHlcwhapE9UOIZWT4xsS/ujWGcCjDY1tuA4=
Subject key identifier: F0:42:43:9B:C8:6C:24:59:41:F2:09:BA:D8:21:EE:43:FD:70:56:FC
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01988467A0CF6C93594474362AE639BCEFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 12:00:40 +0000
Manifest this update: Thu 07 Aug 2025 12:00:40 +0000
Manifest next update: Fri 08 Aug 2025 12:00:40 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: G7uY2vZQSDAxHuhKThBQMlmXs78Qu5MY5z71VnFeJms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:67:a0:cf:6c:93:59:44:74:36:2a:e6:39:bc:ef:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Aug 7 12:00:40 2025 GMT
Not After : Aug 8 12:00:40 2025 GMT
Subject: CN=f042439bc86c245941f209bad821ee43fd7056fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:97:6d:77:d9:e7:61:6b:aa:c4:cb:28:46:
35:4c:27:ee:32:a0:43:cf:ae:a0:35:10:a2:82:34:
df:db:ba:7e:ad:be:02:b1:67:d6:10:6b:e0:60:9b:
78:29:95:dc:8f:7f:44:19:67:0c:32:e4:29:13:dd:
39:1c:5f:3f:56:25:dc:e9:76:ea:ce:49:7d:5d:a8:
8e:34:b5:fb:68:d9:24:98:a2:10:81:48:01:c3:85:
8a:ce:e2:75:38:64:e5:f6:c9:18:b8:a3:95:e8:e9:
09:97:e7:18:c1:5a:87:35:f1:80:09:d0:11:c2:b4:
7b:c6:db:a1:fe:48:87:84:7c:df:aa:a2:b2:43:ab:
fe:42:40:d4:5d:ca:04:ed:8e:39:74:82:fe:3e:b8:
79:9d:7e:ae:8e:fd:72:94:9b:b7:00:58:e9:ec:f0:
85:08:80:8a:45:ac:53:ac:20:64:79:ba:bb:8b:ea:
25:9a:46:0b:27:ba:1b:67:17:ec:ed:d3:88:41:62:
44:88:ed:00:7c:0f:e8:e8:82:2f:ef:7d:25:bb:32:
9b:a5:4a:b7:fa:7d:b0:94:2a:ab:cb:31:b9:27:38:
87:8e:c8:15:0b:39:ef:f7:9b:a1:be:a2:1f:c9:d5:
6d:49:23:3f:1b:32:b2:6c:a5:e3:c0:d5:ba:da:e7:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:43:9B:C8:6C:24:59:41:F2:09:BA:D8:21:EE:43:FD:70:56:FC
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:72:d2:5c:7d:94:9c:cd:0b:22:00:f0:a5:6d:fc:fc:74:43:
32:82:08:35:fa:a2:50:28:e0:70:e1:2d:a8:e4:20:96:ab:d2:
23:e7:39:0d:02:5d:db:98:e3:f0:75:bd:37:1c:b5:07:3d:31:
b2:78:1a:7f:a4:11:0a:30:77:43:8f:f7:8e:02:5e:c8:ec:52:
bd:3f:75:32:7d:d5:1c:b2:f4:e0:8e:2f:7a:19:7b:34:0e:f3:
44:27:e5:dc:49:3d:f3:0a:d6:ce:98:87:c6:b2:ce:49:f7:a4:
49:78:df:6d:66:71:50:3b:9e:40:42:83:cc:d2:5c:a4:d0:c0:
d4:81:89:c4:1f:67:ae:ce:a6:69:e5:80:b8:96:1b:f1:86:ad:
52:e1:44:9f:a5:b0:fa:27:d9:83:32:f6:85:24:79:b4:84:68:
f9:5c:54:93:85:1b:c4:63:43:f3:13:2a:1e:a0:cf:52:d4:98:
43:1c:09:73:96:97:d3:fa:8b:7d:78:d9:07:4a:f9:2f:62:d9:
c0:1e:51:01:94:86:e5:da:20:cf:44:84:2b:83:38:d0:c4:b9:
3f:cf:dd:40:0f:84:de:5d:b4:14:6c:a9:ae:c7:a2:cd:b4:ca:
c6:76:c5:e0:bb:93:be:38:11:80:43:37:4b:3a:c5:21:b1:29:
99:57:f9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:33:33 2025 by rpki-client