Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: IkIsMXAXzXSgjcUkQZgYuI+ql+dcemv5n8LQx+Q1mek=
Subject key identifier: 96:88:91:5E:74:5E:2D:1E:AB:21:8E:B8:B9:8B:CE:E7:00:FA:78:8D
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0198590FEE9707328F1AB8AA20D62C4CB742
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 1094
Signing time: Wed 30 Jul 2025 02:01:12 +0000
Manifest this update: Wed 30 Jul 2025 02:01:12 +0000
Manifest next update: Thu 31 Jul 2025 02:01:12 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: JKeE/+GnCNa2oYEWmWJzwBagcE/erX64Z3BJem75oDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:0f:ee:97:07:32:8f:1a:b8:aa:20:d6:2c:4c:b7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Jul 30 02:01:12 2025 GMT
Not After : Jul 31 02:01:12 2025 GMT
Subject: CN=9688915e745e2d1eab218eb8b98bcee700fa788d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:59:ee:7e:6f:30:cc:06:62:13:61:91:c5:
69:58:f7:36:60:b7:81:03:e7:9b:e7:ce:c0:52:78:
53:ab:f8:1c:99:90:2b:3f:6c:a9:53:71:62:d8:a0:
6d:f3:db:c3:df:19:aa:83:88:a8:65:88:13:b9:43:
57:0f:65:b7:c9:f1:12:50:94:0e:72:15:39:0f:c3:
94:fa:84:e0:46:77:d6:ce:8f:4d:2b:21:3f:d6:f0:
d6:dd:52:29:35:7d:1b:d4:24:ae:48:74:7e:32:d2:
9f:c8:8c:e2:c5:aa:a7:eb:bd:5f:81:fe:0f:4b:26:
81:9d:e2:31:56:d6:c0:36:e2:ea:08:1e:e3:d4:08:
45:95:f4:71:2c:6f:90:0c:de:4c:a9:1b:3a:0e:85:
bb:92:47:a6:ff:bd:45:18:0b:fd:f2:9e:59:9d:09:
37:8d:31:d2:df:62:18:d6:01:1b:06:31:64:a3:60:
14:aa:85:30:bc:0d:a3:88:99:18:9d:57:40:41:b6:
f7:bc:3c:9c:07:32:75:8a:08:86:f5:4e:e5:f1:f3:
5d:41:20:96:13:6b:60:77:a2:d4:73:56:42:7c:a7:
96:2e:33:ae:d5:b4:ba:14:de:8d:76:92:6f:ab:86:
ac:c1:8b:65:8f:8b:d8:d9:76:87:64:f7:6d:8c:3b:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:91:5E:74:5E:2D:1E:AB:21:8E:B8:B9:8B:CE:E7:00:FA:78:8D
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:75:03:ee:32:4f:ae:53:10:4c:06:f1:51:c4:c5:49:b6:d8:
92:98:b4:b6:4a:72:a1:87:78:d5:1a:f5:e7:d7:da:9a:1d:3a:
82:4c:12:c5:5a:d3:13:89:d0:07:42:90:2b:d6:4a:92:e9:7d:
2e:e8:4b:29:0d:5d:04:60:41:a8:25:06:42:0e:36:d1:a5:c7:
4f:f0:0f:b9:40:28:13:b3:f5:0b:ed:81:6a:4b:1f:79:4a:4f:
80:75:89:3e:7b:89:ae:c0:11:8e:59:18:21:ba:c8:2c:da:22:
5f:4a:5f:9c:52:16:f7:ec:44:58:be:e5:1b:0f:d9:37:af:1b:
a4:2b:e2:89:3d:03:43:d7:21:ea:b8:0d:5a:50:cc:f7:20:79:
ec:b9:ba:84:e8:7b:88:7d:e9:10:06:4c:d5:f1:67:14:f5:fb:
57:f6:4d:0b:d8:ea:c8:e0:42:d8:00:7f:d6:27:97:03:00:03:
ef:4b:81:57:d5:fa:3f:cb:ab:e1:01:23:5c:fb:71:88:8a:48:
8c:cb:63:0f:30:3c:1f:73:63:a9:85:41:dc:3e:01:13:a2:03:
6b:58:b5:c4:f7:3d:2d:35:69:97:2c:f0:07:9a:c8:91:8d:ce:
45:69:17:34:e6:ee:91:dc:65:d0:10:29:a0:e4:aa:df:5a:97:
dc:1c:7b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:28:34 2025 by rpki-client