
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: 6tItmlXPq9g1HnFiFUpDSirLxVxmDPce06lmsGa1L0Q=
Subject key identifier: 82:B4:83:7C:5C:63:54:46:F3:80:12:CA:61:FC:76:2B:D5:F4:2F:F3
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01987CE52B6EA4CFA81242406F8A2A007550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 01:00:50 +0000
Manifest this update: Wed 06 Aug 2025 01:00:50 +0000
Manifest next update: Thu 07 Aug 2025 01:00:50 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: kxDubJxpSjOssUfc0nGxskUUMlaO97PYzN4BCgrGEyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:2b:6e:a4:cf:a8:12:42:40:6f:8a:2a:00:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Aug 6 01:00:50 2025 GMT
Not After : Aug 7 01:00:50 2025 GMT
Subject: CN=82b4837c5c635446f38012ca61fc762bd5f42ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7a:ca:98:42:40:73:5a:97:fe:59:15:f8:e6:
70:a9:9d:f8:12:9e:47:1b:bc:9d:d7:f4:1b:24:91:
f7:33:76:4a:f5:da:2d:c3:27:2d:3c:51:9b:b7:00:
c8:7e:2d:84:26:76:a3:86:4e:04:06:ea:30:38:6a:
53:a9:c3:34:8d:07:00:cd:ed:cb:ef:cd:3f:16:a3:
94:b1:ae:6b:b9:1a:3e:b3:cf:b9:84:74:1c:56:4f:
7b:9e:95:74:07:b6:5d:4b:ef:3e:a6:43:9a:43:ca:
6b:79:30:63:46:07:ac:93:9c:45:09:9d:f3:91:2c:
cf:b0:35:ed:64:51:99:72:1e:8e:f0:f8:77:28:55:
70:71:f8:33:3a:df:80:4c:9f:25:8a:a9:2b:45:3a:
ff:ec:54:31:29:b6:ef:8f:07:fe:0f:68:f5:36:18:
69:04:ee:18:fe:cf:da:c5:7b:1e:95:fa:37:c4:7f:
78:2f:e7:0e:d3:32:fa:8d:5c:31:d3:e8:06:cf:39:
63:6f:c9:d9:95:d1:96:18:f1:6d:37:db:5a:85:a3:
d5:20:84:07:51:6c:49:96:2f:48:65:6b:8c:10:13:
a4:42:25:64:3d:c3:ff:84:46:7d:31:5d:61:55:22:
d8:f7:6a:35:17:a8:a8:30:bf:f0:d5:e9:8b:a5:31:
eb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:83:7C:5C:63:54:46:F3:80:12:CA:61:FC:76:2B:D5:F4:2F:F3
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:03:62:ab:5e:bf:04:2c:84:8a:f0:0b:2c:f0:f0:71:bc:
86:0d:2e:08:e5:0e:85:16:6f:c3:7c:1b:5e:9e:1e:ff:a9:1b:
0b:af:7d:6d:e0:4d:45:dd:30:0a:38:77:81:39:b9:c1:8b:ab:
db:5b:eb:3a:29:45:67:38:d9:0e:cd:06:35:2a:06:e6:c4:45:
9a:5b:41:aa:76:0e:3e:1e:8b:82:7e:3c:3a:ba:b0:27:95:ea:
e4:23:f3:3b:57:70:c0:3f:03:99:f0:b9:e9:47:59:54:66:9a:
ce:7e:3b:79:03:ed:fa:5e:7f:45:16:01:df:ec:9b:18:fd:a4:
9f:64:e1:95:d5:0a:bd:a2:07:af:f3:7f:10:be:fa:ef:5d:52:
26:c7:26:ea:21:36:a1:a3:62:82:14:48:da:26:2f:62:b2:0b:
0a:e7:fd:05:70:d3:ca:9f:62:96:e8:1c:07:58:10:02:27:4e:
cf:39:43:02:0c:e1:86:f1:62:96:9a:c3:8c:d7:6e:95:59:a5:
ee:4e:38:c9:20:5b:a8:8e:a6:75:65:36:dc:86:e0:e1:7a:f4:
1b:49:2b:a3:1a:c6:d5:1d:ab:21:21:c1:64:67:5f:76:cb:6a:
f5:9d:4d:1a:35:c5:93:91:ce:7e:96:42:d7:c6:ba:41:81:eb:
1b:0a:5a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:02:34 2025 by rpki-client