Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
File: pIqHxF2XIEZJBbamsJM_fDlRGS0.mft (raw, json)
Hash identifier: tACNBq4h+KbmFUTckdQt/PfxYDWHxyDgmw8ARp00P0w=
Subject key identifier: 17:EB:47:44:01:45:D3:C9:B2:5C:01:36:8B:4D:6D:99:3D:AA:3F:CC
Authority key identifier: A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
Certificate issuer: /CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Certificate serial: 01987F0AB1DC03C7205A9910024A114C1144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 11:01:03 +0000
Manifest this update: Wed 06 Aug 2025 11:01:03 +0000
Manifest next update: Thu 07 Aug 2025 11:01:03 +0000
Files and hashes: 1: 3slyfZXxVcWO-rhXLBn1z60ShoQ.roa (hash: aD+13qB77l1eWjcaYEDaoeBPF19MIy6v6JQPzBT88zc=)
2: pIqHxF2XIEZJBbamsJM_fDlRGS0.crl (hash: PDRCFGgVxUVnQB5TQ5RD2y+BzMwOI1icv6Rd9zRdj5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:b1:dc:03:c7:20:5a:99:10:02:4a:11:4c:11:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a48a87c45d9720464905b6a6b0933f7c3951192d
Validity
Not Before: Aug 6 11:01:03 2025 GMT
Not After : Aug 7 11:01:03 2025 GMT
Subject: CN=17eb47440145d3c9b25c01368b4d6d993daa3fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8d:de:f4:4a:3e:f0:d2:9f:16:2c:ca:db:ee:
9b:a3:09:75:d6:23:52:96:5a:5d:c5:40:32:be:f3:
f3:4a:19:56:cf:b7:17:60:0d:4d:78:53:86:7f:47:
2a:75:99:e1:5b:8d:a4:ab:4c:73:c9:78:e8:3c:f3:
4f:82:af:20:0e:12:8f:e1:e0:3c:98:35:42:c9:4c:
ef:8c:89:e2:71:3e:f1:08:d4:e5:bb:51:f5:08:d9:
53:93:ac:e2:be:d5:1a:21:d9:10:a4:14:df:49:8a:
8b:35:07:a8:c1:16:17:2a:10:5f:eb:b7:a1:02:86:
32:e1:87:ab:75:aa:64:8a:1e:96:da:cf:99:f1:71:
41:5e:3e:8c:87:66:4b:0b:8e:c0:da:69:56:cc:86:
8d:dd:d7:7c:4e:4f:3e:40:b3:9a:ef:db:6e:e1:32:
b2:5d:0b:94:eb:d5:3c:5c:50:db:bc:87:54:c1:9b:
ec:63:59:25:f7:e5:cf:32:40:37:29:24:94:ac:a9:
3d:ac:f7:2c:27:03:be:22:b8:18:e8:4c:4e:1e:23:
85:09:ae:aa:92:95:22:7e:d8:f2:ff:96:83:de:39:
1f:2c:32:6a:0f:bd:7f:17:0c:f1:a1:ca:64:aa:6f:
a7:f9:4a:de:16:4c:db:dd:c7:48:39:ec:3f:02:c7:
97:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:47:44:01:45:D3:C9:B2:5C:01:36:8B:4D:6D:99:3D:AA:3F:CC
X509v3 Authority Key Identifier:
keyid:A4:8A:87:C4:5D:97:20:46:49:05:B6:A6:B0:93:3F:7C:39:51:19:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIqHxF2XIEZJBbamsJM_fDlRGS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/7a9f0c-5888-4fd8-bd90-683384b19ea3/1/pIqHxF2XIEZJBbamsJM_fDlRGS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d2:04:db:79:e4:a6:58:f3:b2:29:4d:66:88:46:1f:34:7a:
f7:07:dc:54:20:2a:32:07:f8:cc:72:cc:d2:0a:4d:9f:08:70:
b3:ba:88:a6:70:62:0c:88:f1:f4:73:ad:99:7e:92:25:24:64:
ed:a6:14:59:91:b3:8e:46:53:74:4c:ff:b5:87:d7:b6:13:a8:
36:48:64:99:f6:b1:3b:45:2a:a8:9f:11:73:b5:5b:c8:16:15:
05:ca:58:46:42:ee:41:73:cf:82:87:38:3d:6f:ca:a2:b0:c4:
e4:8c:72:79:2c:99:43:e7:ad:3b:78:cd:11:a8:05:cc:05:4d:
94:5e:8e:03:46:41:5e:d9:32:0a:2a:da:0a:42:b1:94:71:96:
3f:2a:f5:16:a0:db:33:9e:a5:f0:87:7c:24:77:1c:cf:97:64:
61:da:7c:63:bd:2d:72:95:3f:a9:72:8c:da:ba:07:90:df:1f:
b2:a6:bc:61:c7:6b:f4:c5:2d:8b:90:b6:2a:30:4c:fa:31:11:
c0:38:99:5d:37:7a:5f:ae:d4:9e:e8:71:54:0f:1a:89:55:2c:
8e:e7:be:18:dd:fd:2f:fb:4f:ac:27:41:c3:7f:ff:e3:3a:83:
09:d5:28:b9:eb:8d:56:10:82:25:06:b0:f4:5c:b5:e3:1d:b4:
f1:c3:01:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:39:23 2025 by rpki-client