Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: +2+W8FWMhEyEid//yVGWcXmN4aEKTRxHns7HLQk/EeE=
Subject key identifier: 5C:59:4E:B6:D0:30:A8:7F:AB:54:EA:4A:86:E5:9A:F3:DF:84:79:04
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 0198733DC6A7376C21B5032DDD40EE487F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 04:01:25 +0000
Manifest this update: Mon 04 Aug 2025 04:01:25 +0000
Manifest next update: Tue 05 Aug 2025 04:01:25 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: 6SW+0rZSSqY6L/4f0jMSc7ZG0Y6AA+RzQsxpBaPGpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c6:a7:37:6c:21:b5:03:2d:dd:40:ee:48:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Aug 4 04:01:25 2025 GMT
Not After : Aug 5 04:01:25 2025 GMT
Subject: CN=5c594eb6d030a87fab54ea4a86e59af3df847904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:07:af:2a:6d:63:07:a0:3c:8c:92:2e:f0:86:
14:c4:10:14:88:27:9e:a5:b7:a6:ea:0c:a5:0b:10:
2b:9e:22:ec:46:01:43:0c:30:35:60:c3:c3:ca:83:
6d:fa:6a:6c:0f:e0:c3:8d:21:72:98:95:c1:25:23:
75:42:4b:ac:a5:7b:ab:79:a7:b3:0a:0d:d5:03:f6:
21:74:64:ae:d9:fb:16:59:71:dd:e5:4c:d4:46:6e:
5c:ee:4a:54:66:6d:b6:78:5e:4b:98:4c:04:4d:0a:
d3:90:21:9c:1e:1c:c4:fe:1c:9b:e0:d6:34:90:95:
4e:a9:67:a1:28:79:31:72:c5:3c:11:a8:4e:54:b1:
4f:e5:3b:52:bd:b6:7b:9c:37:c0:a2:80:02:8a:47:
cd:bf:a8:ef:5d:01:c6:f9:d5:83:9f:ae:a5:df:89:
5d:6e:8c:48:f3:81:cd:b9:44:97:b7:d6:27:f9:e1:
52:6f:1c:b7:66:21:28:02:4d:48:23:66:f4:32:51:
33:a5:22:19:f0:c1:ec:b1:70:71:6d:43:19:03:ad:
18:c1:78:d9:96:42:bf:cb:a1:7b:72:e1:b6:61:9d:
ce:82:3b:84:a5:29:24:89:f0:3e:98:4a:38:95:ee:
a9:15:e6:64:b5:76:75:89:3e:c5:ad:bc:64:82:29:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:59:4E:B6:D0:30:A8:7F:AB:54:EA:4A:86:E5:9A:F3:DF:84:79:04
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:56:ad:eb:dc:01:d3:99:ae:2e:25:4e:be:07:3f:7b:3b:e9:
76:39:48:19:69:c9:7a:d7:76:00:b6:66:c8:c7:77:25:0b:fb:
a3:f8:8f:91:eb:c7:1e:44:cf:db:b9:1c:ad:78:15:d7:71:ef:
2b:90:89:33:af:cf:d3:8c:9b:03:a5:86:2c:6f:05:a3:2e:b7:
64:d6:c7:38:67:d0:68:72:9f:2f:5b:c2:a2:a0:1d:9a:e4:fb:
19:a4:82:4e:37:88:1e:3d:f9:b0:ea:02:e0:2b:07:eb:ea:01:
e5:d6:0a:00:14:35:7f:cc:4f:d8:de:df:5f:29:32:16:99:47:
84:a4:4f:02:63:6b:f9:a0:99:06:71:32:95:19:35:e6:20:79:
c9:19:8b:8b:92:35:0a:ed:a5:41:08:99:92:8c:1a:73:a3:b7:
14:54:d4:fc:0b:70:89:55:4e:cf:d8:27:43:56:4b:c3:5b:78:
e5:0f:e1:89:b6:ac:79:9d:8e:a6:fd:94:5f:21:1f:6d:68:2d:
5e:24:49:c0:50:08:2a:f6:51:62:3d:8d:63:71:b2:62:65:35:
79:b4:0c:f8:29:ca:e7:3d:45:df:c6:04:be:d0:2b:f0:59:cb:
1a:66:f3:36:2c:67:ed:51:06:d6:ca:67:39:e2:57:36:07:7a:
90:e0:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:18:55 2025 by rpki-client