Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: leRM/aoCnV7Q6iLqF689DTBtYFpqEYk8i9DCBdkh5+Y=
Subject key identifier: EE:48:38:65:4B:92:EA:A3:43:27:73:5A:BC:E3:60:F6:54:FC:77:DE
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 0198898EB81789CFE02FDEA8AB1A07553EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 044F
Signing time: Fri 08 Aug 2025 12:01:28 +0000
Manifest this update: Fri 08 Aug 2025 12:01:28 +0000
Manifest next update: Sat 09 Aug 2025 12:01:28 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: /7Q/RTOOCVRxy5ZXYBk0jjw18Je2gAn/Y2IA7VcOcnY=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:8e:b8:17:89:cf:e0:2f:de:a8:ab:1a:07:55:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: Aug 8 12:01:28 2025 GMT
Not After : Aug 9 12:01:28 2025 GMT
Subject: CN=ee4838654b92eaa34327735abce360f654fc77de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:2b:f6:3d:ec:4f:46:10:42:c4:d8:04:60:
63:68:d9:a2:01:56:89:dd:27:fd:36:27:ae:6f:03:
6d:e6:63:74:48:58:48:c1:90:19:9e:5e:e5:a3:ea:
11:78:e8:ea:a5:58:42:35:18:55:77:5a:2c:b9:ac:
6a:b8:09:f3:23:40:54:c6:23:1d:af:2f:52:ac:4b:
b9:df:c7:31:f5:46:b3:e1:42:e1:03:78:a7:1b:29:
15:e4:f2:1b:78:27:ab:e2:d4:d9:f1:1b:1e:b7:04:
29:a9:25:f1:97:8d:53:50:97:79:93:d2:26:7c:38:
21:c3:2e:90:c1:1d:5f:54:55:1d:36:64:a2:1f:d5:
7a:d3:3e:00:a8:8a:f7:0d:53:45:e6:cc:8d:1d:de:
86:da:63:c3:8b:4d:a1:48:6c:35:a4:c1:3d:9f:d5:
fa:08:48:ca:38:db:cd:1d:bb:fb:5f:55:4d:dc:aa:
62:28:43:3b:af:b2:8c:81:83:8e:ee:1b:3e:d4:0f:
b7:68:0c:4e:e1:a1:c4:ad:3d:cf:04:03:ed:32:a4:
a4:16:2a:00:c0:be:28:02:c6:7b:cf:1c:e3:e2:9d:
35:6c:66:8c:ec:54:86:b3:e3:0f:e9:3f:5f:90:e9:
c2:c0:5c:f2:d9:a3:af:3b:5c:f2:00:57:2b:ea:4d:
ad:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:48:38:65:4B:92:EA:A3:43:27:73:5A:BC:E3:60:F6:54:FC:77:DE
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5d:1d:9e:f1:aa:2c:0f:3b:e3:51:72:b3:35:64:3e:8a:3a:
a9:ea:c5:3d:cb:30:82:cc:c4:e4:de:8f:52:ab:4f:e3:be:62:
c7:36:4a:52:39:24:29:0a:0f:1e:33:ad:c1:af:92:60:c4:e6:
96:89:c1:6f:cd:6d:4a:17:6e:27:ad:3c:11:5a:07:a6:49:61:
ca:40:e7:bc:0b:54:25:12:a1:d7:cd:83:c3:cc:3e:71:ee:7b:
a1:c3:2a:c2:2c:b8:f6:8e:97:50:ee:4c:56:b1:c0:b5:16:df:
da:db:be:77:43:a3:72:22:50:3a:71:bb:41:03:69:03:7f:a1:
33:02:b6:21:51:f7:2b:b4:48:d1:a5:5d:45:bd:78:2b:6a:de:
87:c2:40:36:03:54:4f:7d:77:28:47:fe:8d:f8:db:b8:db:62:
1e:03:eb:1e:91:5f:37:21:1b:54:14:c6:a0:92:cc:09:24:38:
7f:e1:6c:c7:10:7e:b2:f4:90:cf:66:79:f6:15:89:23:cc:4b:
b7:db:41:04:58:c1:32:6f:f2:d3:ad:69:74:5d:a9:42:06:e1:
73:6e:ce:87:21:51:37:79:4c:81:4d:67:85:79:bd:c6:c8:2f:
79:04:55:8b:2c:c1:e5:1e:24:ee:c7:95:09:09:72:fc:65:3c:
93:e4:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:27 2025 by rpki-client