Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json)
Hash identifier: XWpMq+ArOVNE6FdXxICT7ocdSkVVvQ0/UVK1MaKpGk4=
Subject key identifier: CE:2D:6C:63:05:01:06:5E:8E:F2:6B:83:9E:0D:AD:46:59:D9:BD:2E
Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Certificate serial: 01982AED58CED3DFB486768DA77DFCA8257E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
Manifest number: 43
Signing time: Mon 21 Jul 2025 03:00:54 +0000
Manifest this update: Mon 21 Jul 2025 03:00:54 +0000
Manifest next update: Tue 22 Jul 2025 03:00:54 +0000
Files and hashes: 1: BI83gyIjEGBOS7ZKdoDrSv8devY.roa (hash: jLwvUyWb11PVZ3r8d/OcSHQ4Hzj4d1bbdW3f/BH7o3c=)
2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: 6RW+oiY26mKQuP6UlsWtxIlgXjyhHf+fnfbSbyTIMI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:ed:58:ce:d3:df:b4:86:76:8d:a7:7d:fc:a8:25:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Validity
Not Before: Jul 21 03:00:54 2025 GMT
Not After : Jul 22 03:00:54 2025 GMT
Subject: CN=ce2d6c630501065e8ef26b839e0dad4659d9bd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:0e:68:c4:a1:6e:ed:d1:75:74:33:11:cf:
1a:01:4e:b9:17:66:fe:c2:2a:0b:33:11:42:85:39:
16:83:48:d6:ef:09:31:a5:d4:34:b3:cc:c5:f3:e1:
a9:6d:12:c0:00:df:1a:a6:48:9e:07:d1:0f:9b:b6:
24:f6:72:f0:fb:ab:07:a4:12:07:ca:ac:7d:c9:d4:
92:43:cf:ce:98:a6:3c:6c:9e:7d:cd:c4:1c:b7:f8:
07:d3:2f:0c:48:9b:a1:46:5a:9e:79:1d:47:86:98:
fc:a0:56:fe:5f:d1:c6:d9:2f:d6:a4:63:4e:74:79:
7e:5b:b2:0b:ad:43:de:10:ba:0a:e2:0c:4e:f9:a6:
35:15:54:83:c4:54:33:1d:40:f9:bd:a7:3c:68:79:
6d:b0:cc:0b:4b:97:92:e1:c3:c4:36:82:fd:6d:2d:
f1:d7:e6:fa:3c:b2:d1:44:21:b2:35:3c:81:bf:f5:
ac:50:75:db:cf:f0:1b:e4:49:ab:d1:08:aa:a4:6e:
7a:db:ca:17:fc:3a:c0:9d:2d:40:96:b2:c8:81:34:
1f:19:4d:4c:d6:51:22:4e:2c:9c:d2:fe:9e:e6:e7:
a1:47:cc:a9:1f:ac:2c:3d:10:e6:e8:91:f3:45:50:
89:b8:50:3f:e3:75:ac:6f:18:dd:20:9d:b1:7a:b2:
c6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2D:6C:63:05:01:06:5E:8E:F2:6B:83:9E:0D:AD:46:59:D9:BD:2E
X509v3 Authority Key Identifier:
keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:61:45:6c:52:22:ed:80:66:1c:03:9a:61:82:76:dd:5f:6d:
1f:f5:79:51:0f:ba:4e:51:4a:3b:4b:6c:ff:3c:25:7a:ec:35:
b0:f2:ef:32:23:a0:b0:a2:97:35:2b:8f:ff:b2:d2:1a:3e:b9:
90:c0:98:1e:a2:8f:b5:21:62:b5:0c:bf:53:2b:48:f5:2a:9c:
9f:e7:e0:50:76:5d:6d:95:e5:bc:df:2c:82:22:da:f0:a2:ab:
61:df:6d:a8:77:1e:da:81:78:2e:1d:2b:31:a3:c5:05:7f:51:
6b:57:c6:4e:d0:36:f3:85:83:80:81:15:42:bc:d3:d3:78:91:
91:48:36:1a:4e:f0:21:a4:ed:f5:8c:ec:c8:f5:d4:3d:9a:0d:
90:48:fd:c3:ae:7f:45:cd:e1:a7:d9:e5:27:73:c2:41:9e:b8:
14:34:24:9e:99:16:38:9b:e1:ef:ea:85:76:a8:46:b6:c2:65:
b4:f0:30:c0:81:17:33:26:f0:3a:f1:ed:94:85:68:85:c0:30:
00:96:64:9f:19:7b:4d:7f:17:ff:aa:d9:6f:17:00:2e:1d:c6:
27:bd:50:8e:d8:59:b2:21:e8:3e:d3:42:fc:a4:56:62:42:d2:
e0:63:97:5e:ea:ec:d0:8f:ca:d7:80:db:2f:23:6a:e9:97:de:
3f:c5:ac:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:43:24 2025 by rpki-client