
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: z4INtbUFRSPMbGgDSOD33TVUvxw/ssbs/m/wTS46Ky0=
Subject key identifier: E1:41:81:B9:A5:B9:BD:B7:9F:B6:D2:91:F7:B2:C6:AC:48:12:F8:8E
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019873E3E35C167C7C513DD1AB9C1955F3B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1585
Signing time: Mon 04 Aug 2025 07:02:51 +0000
Manifest this update: Mon 04 Aug 2025 07:02:51 +0000
Manifest next update: Tue 05 Aug 2025 07:02:51 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: dSoD97OkaPjPHE1DYFaJFlW6TStcZXu3ewprxNbXr0o=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:e3:5c:16:7c:7c:51:3d:d1:ab:9c:19:55:f3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Aug 4 07:02:51 2025 GMT
Not After : Aug 5 07:02:51 2025 GMT
Subject: CN=e14181b9a5b9bdb79fb6d291f7b2c6ac4812f88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:60:d2:5b:66:9e:e3:f9:f9:de:bd:b7:66:
c0:6b:fb:7d:fe:32:70:3a:8a:3f:78:b0:67:b6:88:
dd:64:eb:e9:bf:f8:7a:76:2c:0a:6e:25:a7:5a:35:
01:cc:74:fa:4e:16:01:1f:9b:14:f1:22:eb:23:a7:
31:6c:39:64:06:97:aa:79:2d:3c:04:0a:7e:be:40:
3d:b8:0a:b1:17:af:22:1c:10:3f:40:9e:4c:f1:bb:
13:48:42:86:2e:56:a4:7d:b3:b2:a9:a0:02:43:68:
c6:b6:0d:41:29:a1:23:d7:08:15:6e:ca:de:ab:a8:
44:9e:1c:8a:d2:a0:fc:ac:95:d9:ab:b6:ef:87:b9:
64:24:b8:f1:de:ab:50:2a:74:08:a0:0c:e8:9f:08:
f7:23:dd:2a:d0:53:ad:01:ba:4c:80:b1:5a:1e:a6:
1d:eb:88:04:d7:3f:1b:50:89:0e:fe:a2:28:c8:d8:
12:86:f2:7c:49:8e:ee:ea:dc:7e:3a:eb:8a:35:77:
a5:a0:d7:c3:a0:86:f9:f2:3d:47:92:26:ff:16:41:
dc:93:96:9b:18:39:aa:b0:ae:b8:ea:f3:b8:3c:38:
12:67:1b:0f:d5:43:f8:3e:30:0f:42:61:dd:b4:28:
2e:3e:f5:1a:b9:77:a5:b4:74:13:63:53:6e:df:74:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:41:81:B9:A5:B9:BD:B7:9F:B6:D2:91:F7:B2:C6:AC:48:12:F8:8E
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:37:ea:df:ec:8f:4c:d0:91:ca:dc:23:83:7e:a2:35:94:6d:
3c:e1:85:5f:00:ce:86:69:4d:75:55:b5:53:1f:e2:ea:f3:1d:
02:f8:41:bf:dc:13:44:8a:8b:bd:de:58:c3:16:57:4e:95:8d:
5e:33:44:01:4a:66:a4:64:b1:5a:a1:9b:bf:e5:75:05:ea:0f:
46:cb:75:38:39:c9:d1:0e:36:f7:80:bc:ba:b5:00:99:04:15:
09:65:60:d5:cd:86:a4:bd:80:2e:52:d8:3d:49:53:9e:cf:b2:
9c:0a:02:eb:ee:7a:14:03:52:4a:75:3b:2e:66:b1:7c:7b:4a:
1c:1b:cb:d1:85:3d:55:44:7c:70:0a:cd:6c:00:99:83:c7:42:
03:34:4f:ac:d7:46:0a:3e:38:d7:39:d0:ea:3d:24:26:eb:4a:
ad:27:70:4c:c2:51:e0:45:58:32:78:bc:6a:56:fd:19:97:63:
8c:e5:76:6c:4b:8f:47:33:d7:37:66:fb:51:37:57:6c:d0:fc:
e5:1e:83:5e:e9:55:3a:fc:e3:ae:40:0b:f2:28:d2:a9:55:b1:
62:b7:1a:32:81:52:17:a2:70:ba:47:bb:69:d3:ce:0b:46:df:
3d:f3:e3:47:57:45:0a:b0:43:11:85:54:b9:00:bc:32:fa:8b:
73:36:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:44 2025 by rpki-client