Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
File: pZyqKnNoBpiyyeGmyWQadPPOdug.mft (raw, json)
Hash identifier: 5PXOh+W4/6LHtuUcws74kB8TYK1R/PAEwYP6YO9dJ9g=
Subject key identifier: FF:B4:ED:31:97:41:C0:9C:55:DB:B1:B5:B2:22:93:DB:B6:A0:2B:6A
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial: 01988356F83B56060EA8FE48C73C5F2192D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
Manifest number: 0AB4
Signing time: Thu 07 Aug 2025 07:02:51 +0000
Manifest this update: Thu 07 Aug 2025 07:02:51 +0000
Manifest next update: Fri 08 Aug 2025 07:02:51 +0000
Files and hashes: 1: _c_c0M25UwpZ7eHBk4pzeagMlVQ.roa (hash: 8jqy4hlWYt18GsvMo6F88//T4bDxnnNcBAAfWfrvPK8=)
2: pZyqKnNoBpiyyeGmyWQadPPOdug.crl (hash: DbgJTd1iV0QzCe43enRCrNiR5N3c+21Mchje8K+KV5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:f8:3b:56:06:0e:a8:fe:48:c7:3c:5f:21:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Validity
Not Before: Aug 7 07:02:51 2025 GMT
Not After : Aug 8 07:02:51 2025 GMT
Subject: CN=ffb4ed319741c09c55dbb1b5b22293dbb6a02b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:44:e5:96:9e:b1:bc:9c:b1:fb:59:ad:12:
04:03:86:82:e6:83:c6:18:2b:a5:18:df:a7:37:d4:
bc:69:bf:6e:9f:b3:8b:8f:00:a0:30:bf:9e:f2:68:
3d:e6:56:43:2e:28:a4:a9:27:db:2b:eb:77:5b:84:
95:e5:2d:cc:66:4c:0c:11:95:3b:2e:9c:84:64:f7:
8d:fb:96:04:45:84:1f:e7:e1:06:5d:df:95:bc:8d:
a4:50:8c:93:61:d8:ad:78:fd:06:ab:2e:1d:78:b6:
6d:a2:a8:b1:e9:7b:40:e1:40:e0:85:60:d9:57:db:
00:ab:f8:ee:f5:44:93:1d:c9:d1:45:29:66:84:67:
2f:c5:88:9d:b6:76:76:fc:8d:59:7b:17:37:37:15:
46:e1:98:31:c1:78:5e:43:d5:f2:a5:34:25:bd:f3:
40:dd:d8:65:44:8e:1f:e0:c3:6b:3b:81:e3:f6:e6:
58:6c:29:ca:8f:6a:03:4d:ae:cb:13:72:dd:86:91:
2c:fb:70:76:33:87:73:4a:a9:51:2d:76:10:16:aa:
0a:67:06:b3:9c:a3:c1:3b:4e:f5:c8:e6:43:40:2e:
b6:f4:c3:03:db:5e:5c:c9:de:6e:e5:cb:c5:26:0f:
0c:fd:c7:8f:4c:32:d9:67:0b:89:7a:32:92:63:6e:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B4:ED:31:97:41:C0:9C:55:DB:B1:B5:B2:22:93:DB:B6:A0:2B:6A
X509v3 Authority Key Identifier:
keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:63:c7:2a:e6:69:51:43:f5:de:38:ce:12:c0:da:12:65:bf:
b7:b4:4d:bc:98:e3:74:65:8a:fe:11:14:ee:32:f8:76:e8:c5:
f3:aa:f2:98:4e:40:92:d2:77:f4:56:4d:ce:3b:a5:d9:75:95:
c5:d0:64:fb:64:17:fb:6c:ad:39:a8:75:1f:9c:10:6a:50:9f:
51:ef:91:ef:cb:bd:49:a4:06:2b:0f:78:94:39:b8:1f:e8:07:
b2:3b:58:bf:60:43:63:4c:7e:85:02:cc:03:03:28:60:26:d1:
75:0b:a2:79:eb:a8:da:65:35:fb:90:5f:aa:aa:94:27:f3:04:
cb:e5:a9:2e:46:f5:26:0a:05:03:48:1d:54:c2:78:f9:f9:92:
b1:5b:5e:5e:29:8a:ac:bd:60:21:71:84:21:b6:e9:5e:63:23:
66:c9:34:95:f6:cb:35:c8:b7:c8:5e:49:a8:ea:23:57:d6:2a:
6e:bd:8a:93:04:b6:11:17:b0:d5:9f:33:64:ef:59:3f:23:16:
92:bf:a2:03:f8:4b:4a:3e:f6:1c:ad:97:9f:a0:f4:d3:a1:07:
d0:fb:61:c1:f1:f7:85:9c:f9:bd:c9:1b:af:45:e5:9e:9d:70:
b6:f7:b6:10:8c:bd:dd:7c:94:2c:ed:45:7c:85:48:91:ba:3c:
76:09:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:06:57 2025 by rpki-client