Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
File: pYQcxzKsc43B4_5nwS5RBL74Y7o.mft (raw, json)
Hash identifier: wzGiX/KJYnSaEKRRRfnb4PFvoobjkQ8aFf7ZDxeY+wg=
Subject key identifier: 57:A1:14:02:AE:4A:56:43:C9:2A:E5:27:EA:C3:40:1B:08:35:D7:E3
Authority key identifier: A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
Certificate issuer: /CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Certificate serial: 01985569DEF02EA56BF295E69E2A79C9EFA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
Manifest number: 0BF0
Signing time: Tue 29 Jul 2025 09:00:58 +0000
Manifest this update: Tue 29 Jul 2025 09:00:58 +0000
Manifest next update: Wed 30 Jul 2025 09:00:58 +0000
Files and hashes: 1: YFmwVrLg1hwmMKXx_Mm4unlp1Pk.roa (hash: k02tWA3CSFWvzMdYPWtnwp3L9wjqBp2dmnRijw+YwuE=)
2: pYQcxzKsc43B4_5nwS5RBL74Y7o.crl (hash: HA4UNKCq+AIE1ZMqOgcU5ZdzGSglBTOc679pwn5Pn5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:de:f0:2e:a5:6b:f2:95:e6:9e:2a:79:c9:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5841cc732ac738dc1e3fe67c12e5104bef863ba
Validity
Not Before: Jul 29 09:00:58 2025 GMT
Not After : Jul 30 09:00:58 2025 GMT
Subject: CN=57a11402ae4a5643c92ae527eac3401b0835d7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:45:cf:ad:48:58:b3:7b:a2:cd:bd:91:da:76:
ac:ee:ee:c0:37:06:64:a7:a4:c2:7b:25:ae:0b:72:
bd:ff:8b:00:4d:62:bc:98:90:b2:0c:c5:ad:c9:78:
49:65:d6:1a:22:12:4b:fa:d6:6f:ac:b9:45:06:1b:
d0:4f:55:51:ab:49:de:eb:4f:05:61:86:3e:df:b5:
a8:e0:f3:ed:ed:60:8d:c1:62:24:77:7e:3c:a6:35:
98:89:95:aa:14:4e:19:4e:e3:3d:56:6e:44:03:c2:
7b:12:0f:ed:a0:34:68:6d:69:46:16:7e:e9:c0:34:
e5:a4:c8:78:85:bf:8b:e2:11:3e:4a:a9:ef:d4:fb:
56:c7:11:11:85:7c:9e:96:91:ca:05:82:5a:39:fc:
30:42:fe:d2:35:07:5e:5b:37:3f:c3:46:de:e5:e8:
5d:e3:d6:21:6d:6b:9c:58:e4:0d:d8:ca:27:05:78:
fb:cf:7f:6b:b7:8a:93:94:9e:2d:98:7e:bb:33:36:
a1:f4:16:d1:da:22:aa:8b:6a:7e:d5:80:87:04:4b:
ec:9b:29:0f:6a:42:03:a6:ad:5b:11:24:60:e2:f6:
65:2b:25:5e:16:26:f1:f2:16:07:da:cc:5e:05:7c:
b7:4c:5a:91:df:00:d2:c5:d8:2f:72:14:d0:96:4c:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A1:14:02:AE:4A:56:43:C9:2A:E5:27:EA:C3:40:1B:08:35:D7:E3
X509v3 Authority Key Identifier:
keyid:A5:84:1C:C7:32:AC:73:8D:C1:E3:FE:67:C1:2E:51:04:BE:F8:63:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYQcxzKsc43B4_5nwS5RBL74Y7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/141a2a-194b-402b-92dd-66660b222fb0/1/pYQcxzKsc43B4_5nwS5RBL74Y7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:8a:90:7a:fb:d6:e1:08:2b:ea:bd:d1:24:a4:40:7a:12:dc:
b1:34:d7:49:a4:88:bf:1a:01:ca:55:a0:50:bf:5f:f3:cb:a6:
78:2f:7b:35:46:92:ce:9d:28:97:3c:d7:a1:54:2e:e7:7f:1b:
4a:33:8b:9e:2e:40:7a:65:ce:63:9c:e1:79:45:af:5d:a7:35:
50:12:4d:7b:16:d9:72:d8:2b:69:a4:9c:8d:67:39:3f:7e:53:
3f:94:29:47:48:82:60:e0:b1:9d:1d:3c:28:2f:bf:f6:8a:4f:
42:bb:b2:1e:03:a3:7b:76:b1:83:cb:bb:e0:63:62:db:df:6f:
d2:a6:14:8e:3c:2f:05:d9:b6:21:ae:17:75:56:97:3a:36:59:
20:37:dc:ef:1e:26:ff:88:cf:b2:87:4e:84:9e:80:e4:cb:ba:
5f:96:01:11:40:83:60:75:9f:bf:64:8e:bb:75:c6:fb:30:b1:
c0:b0:7c:1c:fb:15:04:0f:d9:c8:28:23:a6:45:47:4f:3a:c7:
b6:2c:62:21:c6:78:93:9c:ed:2c:cd:1d:f4:b6:12:58:03:0e:
ca:86:93:f6:9b:59:65:0f:ac:a3:18:8a:c9:9e:98:38:67:67:
c9:f2:88:4b:66:1a:5e:8c:f1:98:d2:01:8a:dc:0e:bf:21:da:
53:a8:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:44:38 2025 by rpki-client