Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: 5NpAE7dLGS8qygGGS4A8aaC4a3ZEwco2E3WOARAhg6k=
Subject key identifier: 5B:48:8B:5D:0B:DB:C6:60:C4:DB:ED:7B:AF:BF:3D:71:F9:91:30:C1
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01977075975C224F04191CEA2E3871353D54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 159D
Signing time: Sat 14 Jun 2025 22:00:43 +0000
Manifest this update: Sat 14 Jun 2025 22:00:43 +0000
Manifest next update: Sun 15 Jun 2025 22:00:43 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: Y3ezSMEiFHABawswF2JBoK6SP5jJgFlJ1R9B02zvQ24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:97:5c:22:4f:04:19:1c:ea:2e:38:71:35:3d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jun 14 22:00:43 2025 GMT
Not After : Jun 15 22:00:43 2025 GMT
Subject: CN=5b488b5d0bdbc660c4dbed7bafbf3d71f99130c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3e:ae:96:d7:6c:45:f8:64:f1:81:81:e9:7a:
4b:cd:c3:7e:59:6e:75:d4:80:4e:10:cb:2d:30:4c:
5d:db:78:16:e7:d7:25:f6:4c:7f:a3:68:6b:9d:35:
24:f5:45:7e:65:9f:a4:3f:34:40:2d:0c:be:a1:72:
9d:f4:10:cc:7b:9e:e0:5d:07:ff:2d:f9:35:d4:31:
1b:5b:b0:8a:f4:68:30:c0:02:51:f9:24:77:7e:92:
05:29:51:49:9e:cf:88:fd:99:53:6e:33:ed:37:bd:
6e:c2:63:c7:21:46:02:89:bc:a4:c2:d2:d8:f7:05:
b1:53:20:b1:87:25:fc:81:8e:69:84:7c:3a:99:5c:
9d:82:29:33:14:c7:d7:a2:c2:e6:d4:1c:40:34:2e:
d2:06:3d:c1:ea:6b:86:19:47:c4:32:09:2e:c5:1b:
9a:3a:96:8b:e6:0a:bc:bc:e6:e9:94:ab:22:e9:3b:
0c:31:83:79:55:55:57:a2:d6:34:26:df:64:06:82:
84:7e:f1:5d:c4:73:98:c5:6b:fc:fa:af:8a:b9:48:
d1:ce:d0:b2:f0:03:99:21:24:65:ed:71:1f:3c:ba:
92:17:6c:7f:e7:b7:f1:a7:b4:14:0b:1e:63:24:d3:
4d:2f:42:da:8a:42:a0:1b:e3:4f:3c:98:03:4e:83:
5b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:48:8B:5D:0B:DB:C6:60:C4:DB:ED:7B:AF:BF:3D:71:F9:91:30:C1
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:57:87:24:66:58:f0:b3:a6:42:5a:04:78:c8:b1:43:86:2b:
3d:8b:a4:c7:b2:0f:18:2b:29:df:b4:ee:a6:83:33:c9:09:4d:
07:19:12:0a:cb:b8:aa:19:62:89:7c:48:13:a4:82:f0:4b:df:
fe:9d:5d:24:ae:d2:b5:20:ad:ef:67:85:13:06:ca:69:c8:8b:
ea:52:f4:d5:13:c2:09:11:b0:7f:1c:74:6d:2b:a6:49:e3:e1:
28:81:6c:5d:a9:f5:3d:d2:f7:57:82:62:9d:87:ec:2c:67:f8:
1f:c0:33:54:4c:eb:66:ad:9c:b8:89:ab:c7:04:cb:6c:ef:86:
77:3a:01:20:3c:97:1c:6d:e5:49:d5:3a:29:14:ee:93:14:86:
ba:09:89:2e:60:77:35:41:12:f8:25:93:d4:50:1b:7a:2a:ee:
82:4f:d1:01:b4:6c:5e:64:02:5a:7b:5b:a0:f5:a9:25:77:ec:
39:f3:87:f2:9d:27:0b:49:cb:83:13:07:36:3e:7b:0a:56:e8:
85:9c:90:64:25:2d:50:c8:36:e2:af:28:80:98:c7:d0:94:9a:
d0:b1:16:90:74:60:7e:df:20:d7:15:21:71:dd:46:70:70:bc:
f0:11:61:e6:1c:4b:a6:e7:85:f3:d8:1f:45:53:2e:42:e5:bb:
fa:91:6b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:13 2025 by rpki-client