Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: uXlPNdS1ewJygyAPKDZauJvSElRAvWONPHBSQFKCt+Y=
Subject key identifier: A3:0D:10:22:96:21:77:A8:34:AA:D1:E1:9B:B1:97:88:EB:92:3F:A7
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 01976F2C522FEDD48F991DD0EB6A51C45CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 14FE
Signing time: Sat 14 Jun 2025 16:01:04 +0000
Manifest this update: Sat 14 Jun 2025 16:01:04 +0000
Manifest next update: Sun 15 Jun 2025 16:01:04 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: cwloyLei3DQ5/ebe70IFLVQNcZVc4xIyUEnPpAwRhXA=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:52:2f:ed:d4:8f:99:1d:d0:eb:6a:51:c4:5c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Jun 14 16:01:04 2025 GMT
Not After : Jun 15 16:01:04 2025 GMT
Subject: CN=a30d1022962177a834aad1e19bb19788eb923fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:66:01:b7:2b:39:61:7f:b1:c7:b3:1a:df:24:
cc:55:74:88:a6:d2:f6:f6:f6:78:34:1c:15:1f:c0:
c0:f9:22:eb:9d:1c:94:84:e1:6d:cb:b6:df:72:d1:
56:5b:df:cc:4b:fa:e4:9a:85:ba:5a:e7:71:67:fc:
74:e5:95:0d:c7:88:e1:ab:10:f1:42:6a:0c:bb:3d:
ae:54:cd:04:0b:9a:bf:a6:37:45:3b:a8:9e:04:00:
ce:3a:0c:bf:04:5d:fc:de:ef:a4:da:b3:f2:5e:78:
d1:3c:06:c7:fc:37:82:c9:db:ee:5f:87:b5:02:01:
5d:f7:41:70:bb:87:52:14:44:60:eb:ad:01:da:78:
cf:84:99:7a:32:8c:81:ea:ed:b3:23:fa:12:6b:2b:
ba:12:8e:7f:c2:00:08:41:09:34:bd:48:6f:e1:d6:
13:ce:4a:b6:4d:77:05:4f:c8:d2:ed:74:72:c3:2d:
77:0a:45:cb:e4:e0:c4:8c:cf:c7:36:e5:f9:ac:74:
06:25:e4:67:05:36:78:6b:7c:bf:74:fe:15:55:54:
08:d5:2f:07:8e:38:8f:73:80:5f:43:e2:7a:1c:44:
de:25:24:fe:12:8f:44:f5:80:53:24:b0:55:9a:f0:
15:96:4f:7f:a3:32:ba:dd:a1:f9:e4:f7:75:c1:a3:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0D:10:22:96:21:77:A8:34:AA:D1:E1:9B:B1:97:88:EB:92:3F:A7
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:a8:c0:73:20:01:44:07:84:21:3e:5e:f3:21:77:79:60:
12:ec:47:44:ca:df:19:5a:a3:d0:7b:b2:65:8a:f8:ab:5e:3e:
38:70:a0:ec:79:de:12:42:20:5f:64:82:50:15:35:75:3f:52:
8b:da:cc:e8:ba:f5:ac:5e:18:16:de:1f:82:c5:1f:db:07:de:
d3:6f:53:60:b1:02:71:c5:a7:c1:84:f1:21:83:9a:46:03:92:
a2:e4:95:2b:90:29:07:72:46:15:c7:ce:ba:24:db:f8:b0:9f:
41:ec:a7:95:02:16:d8:82:52:a1:8b:82:d4:2e:d3:8a:ee:c1:
ae:04:e0:a8:d1:e6:21:5e:86:d6:a6:81:30:06:86:f7:5f:ba:
91:04:7a:33:7e:f5:d0:63:19:61:92:79:16:ac:bb:95:6b:4b:
d2:f7:58:ec:b2:b3:2f:d2:d6:00:c1:9c:bb:5a:b2:5e:df:d4:
cc:93:7b:be:32:70:3e:c5:07:96:5a:a1:ec:5d:2f:9f:7c:2a:
e4:d5:00:4f:ea:c6:df:7a:c6:9f:f5:23:9a:84:7b:0f:8f:cd:
76:ba:5b:8b:38:96:f0:d1:f8:e9:dd:4a:59:7c:18:1e:67:79:
71:e6:b7:fa:ad:fb:61:1e:66:71:a1:cb:67:20:5b:cd:52:ae:
54:c3:4f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:18 2025 by rpki-client