Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File: pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier: 3FZRCBu0FyseJMyZDD/IJWncohNt9X1lwyhD3PssezA=
Subject key identifier: A9:32:8B:96:9D:31:9E:B1:55:CC:33:C8:71:9F:06:6F:A8:8C:FA:7B
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer: /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial: 019881D4852E7072A3D7AB00C4DEB35886ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 00:00:45 +0000
Manifest this update: Thu 07 Aug 2025 00:00:45 +0000
Manifest next update: Fri 08 Aug 2025 00:00:45 +0000
Files and hashes: 1: iKx7DVcDIp4-3Ht_VZ0qOWxo2fU.roa (hash: zpfuponymK+r2Tkz+w9BOZiVOOpvDfzySSg7CkzrHaM=)
2: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: zyltv74j55aBImMI27ZYmBWhRWCvcnmhaWqQ9RKE6aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d4:85:2e:70:72:a3:d7:ab:00:c4:de:b3:58:86:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Validity
Not Before: Aug 7 00:00:45 2025 GMT
Not After : Aug 8 00:00:45 2025 GMT
Subject: CN=a9328b969d319eb155cc33c8719f066fa88cfa7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2b:05:16:50:7b:3c:74:a8:82:23:15:00:47:
72:91:56:f3:f5:04:49:41:89:1d:97:ba:89:b5:fe:
0c:bf:df:81:83:82:f1:c8:4f:f0:6e:be:fc:89:99:
ca:d8:6b:88:2f:62:93:7d:0c:29:1e:f6:75:69:cf:
a7:4b:03:ef:9d:6e:db:bb:61:d2:9b:c3:28:38:79:
ca:f5:95:f2:0e:45:30:06:f0:dd:79:11:08:06:17:
fb:a9:ec:d9:ce:09:e6:ee:06:f7:96:75:96:51:7b:
4a:fe:15:e5:17:cf:fb:f3:93:f7:34:f6:b1:5e:ff:
56:5c:d2:e8:c2:32:38:ff:72:60:54:ea:f4:24:f4:
46:69:42:bc:d2:99:86:ee:ef:80:69:4e:c5:ba:80:
fa:5d:25:e2:20:90:41:f0:8a:34:6f:03:47:0c:dd:
3a:42:85:6b:eb:c9:40:b9:63:ee:6a:42:df:58:e2:
18:df:83:89:65:24:1d:15:8d:1a:9f:34:90:99:71:
ca:4a:68:27:64:44:c4:6a:4e:c8:f2:ee:51:12:1a:
df:b4:cc:78:dd:7e:67:e3:61:a4:f2:da:c1:17:db:
1f:b8:89:ca:3a:fa:c4:14:6d:56:f7:14:62:60:f9:
70:cb:1c:cb:8c:c0:ed:18:39:d5:96:fd:e9:97:df:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:32:8B:96:9D:31:9E:B1:55:CC:33:C8:71:9F:06:6F:A8:8C:FA:7B
X509v3 Authority Key Identifier:
keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e9:62:57:06:d8:b0:35:84:1f:50:0f:3b:81:13:e2:51:1e:
48:22:f5:8f:19:ed:32:26:31:a9:9b:ac:1f:12:53:6e:ee:b8:
ef:9b:fb:35:b8:ed:58:04:47:6b:21:ce:03:de:98:4c:d6:71:
08:ae:a2:d4:d4:bc:b5:d6:76:77:e6:ae:08:cb:88:49:9a:67:
bc:7b:3a:c0:cb:90:2d:0c:e6:1f:0c:f0:29:8d:b6:62:05:57:
da:97:d3:db:a3:02:6f:af:7d:f3:86:73:62:63:9c:d2:c1:18:
78:c3:49:ad:40:e8:e9:ce:3b:17:41:cc:2c:5c:f7:d4:7a:a1:
4b:35:44:9e:c2:3a:be:c6:6d:17:13:79:72:6d:c0:e1:a2:eb:
9e:b2:fd:11:83:c3:ff:54:97:0f:bb:a3:72:3a:20:58:9d:77:
4e:b5:31:29:75:f1:d1:34:c6:5e:13:25:89:cb:df:eb:53:8f:
f1:7b:ca:67:50:2b:56:69:bd:74:b8:4a:90:1d:4d:bd:61:3a:
a9:1c:85:07:32:5d:0f:8d:97:d3:e1:11:d9:f2:e9:d3:81:86:
4d:19:f3:e3:62:b9:bf:0b:25:18:3d:ed:7a:13:cc:16:ee:42:
e7:8a:b7:d5:8c:f5:fa:4e:c5:5a:64:57:b1:a4:e4:69:83:eb:
31:b5:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:37 2025 by rpki-client