Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
File: pZrIMj67a-IPronQmMokE4-MkAU.mft (raw, json)
Hash identifier: BQVPnT3JRjsqFECQVn3BR+dohT/BHkr4bJG5teHGbWA=
Subject key identifier: CA:8A:0F:02:A7:B8:DB:D1:1E:3D:E8:3E:1C:10:22:74:A6:24:94:95
Authority key identifier: A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
Certificate issuer: /CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Certificate serial: 01984E548F77FA11A2044FE5C7EF716F9494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 00:00:21 +0000
Manifest this update: Mon 28 Jul 2025 00:00:21 +0000
Manifest next update: Tue 29 Jul 2025 00:00:21 +0000
Files and hashes: 1: W2MvJBZ0wxtLqJdYlYA_0d8K8JQ.roa (hash: FE4tThC8aEaRa276a1uqrtHjLbN4YSEI6M3SskM13qQ=)
2: haFD9cLDeKJLdXFJ_FlWsDWQa1Y.roa (hash: suCkhBPt7Sy5Urm3257mrhUG7HADlPxpmTzTdnyQTPQ=)
3: pZrIMj67a-IPronQmMokE4-MkAU.crl (hash: tYITjLOMUSOdzOvFJvMcufE0wrMYxJqv79eT6NLxOMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:54:8f:77:fa:11:a2:04:4f:e5:c7:ef:71:6f:94:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59ac8323ebb6be20fae89d098ca24138f8c9005
Validity
Not Before: Jul 28 00:00:21 2025 GMT
Not After : Jul 29 00:00:21 2025 GMT
Subject: CN=ca8a0f02a7b8dbd11e3de83e1c102274a6249495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ff:00:ad:f9:b9:c6:9f:52:e5:88:2c:11:ac:
98:f4:01:7c:00:31:a4:1e:d6:e3:00:e8:b9:cc:75:
47:e6:33:87:0e:f2:95:30:99:22:fb:27:b4:c1:5b:
36:2b:3f:22:7b:c6:e6:a3:2e:b9:df:cc:46:f9:ec:
f8:a6:06:0c:e3:52:7f:73:a4:7b:da:b8:8e:cc:22:
a8:d3:bc:30:7c:a7:1a:34:1b:c7:b0:ee:4a:33:40:
9a:fe:ca:e0:21:a7:e9:58:dd:98:44:df:6e:3a:53:
05:29:69:b4:55:15:93:62:06:87:3d:d7:7b:53:d8:
71:db:a7:75:78:d9:22:5d:d2:75:3f:dc:35:a7:b0:
43:c7:d9:9a:e4:87:25:31:51:67:6c:89:45:94:3a:
db:22:e7:4f:33:95:55:97:6d:35:b5:23:b6:17:ea:
2c:73:87:6e:b5:2b:63:63:93:72:eb:1d:3e:f5:0a:
44:1b:e6:41:67:af:73:34:d5:c2:99:f8:15:e2:9a:
49:b9:69:27:62:14:27:33:7c:4a:e5:01:34:7a:43:
b9:a0:7d:03:af:f8:ce:cc:f3:1d:a7:f4:d5:b6:bf:
e3:d8:aa:2b:e6:1b:82:71:3e:22:79:e9:0d:b3:79:
89:97:5a:8b:12:1c:1f:7e:ab:57:62:a9:d2:b2:dd:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8A:0F:02:A7:B8:DB:D1:1E:3D:E8:3E:1C:10:22:74:A6:24:94:95
X509v3 Authority Key Identifier:
keyid:A5:9A:C8:32:3E:BB:6B:E2:0F:AE:89:D0:98:CA:24:13:8F:8C:90:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZrIMj67a-IPronQmMokE4-MkAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a01f82-9193-4199-95a8-83ae5d9c832f/1/pZrIMj67a-IPronQmMokE4-MkAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1c:7c:30:77:7c:ff:03:8c:16:39:86:69:83:fd:49:55:56:
15:b4:b0:32:81:f5:5e:ad:85:23:71:57:ca:1a:3b:b7:9f:a2:
ba:c5:d7:4c:f1:88:6f:a9:88:21:e3:90:36:0e:1b:53:5d:54:
15:b6:4b:6b:d7:60:93:8c:f0:28:d7:09:f1:ae:d1:9b:f2:91:
6b:cc:5c:d9:86:44:fb:a7:0f:9c:f8:38:7c:21:ba:e4:dd:8a:
39:aa:33:93:16:65:23:8a:b7:45:ee:59:f2:b1:76:3e:45:7b:
12:b7:40:92:2e:47:40:c0:c8:96:c9:a9:47:ef:09:a7:6a:df:
52:4c:cb:fd:58:0b:2c:35:0b:e7:34:9f:0f:ab:06:e5:62:53:
fa:b0:7b:4e:24:90:6e:2c:3f:f6:40:a1:9a:95:03:eb:e6:28:
86:ce:84:03:ad:f9:f5:42:44:ff:bf:9c:71:f1:7c:da:fc:73:
9d:23:e9:77:10:1b:e9:99:b3:3f:e3:01:0e:e4:b5:04:42:a7:
50:8f:c2:80:aa:29:73:37:67:d4:89:02:82:55:9d:b8:2b:48:
ce:ea:73:a0:b7:5b:a5:ab:65:00:d6:ef:db:9a:92:7d:e5:66:
f5:62:92:f8:a6:21:04:15:57:d0:37:69:8e:06:7f:cd:16:d4:
89:45:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:57:50 2025 by rpki-client