Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: WQCDgZrFRurAH19r+XzYGpkE7bSNp7nXy+qnzBmexBw=
Subject key identifier: A7:B0:D7:9D:66:D1:A0:EA:3C:85:4E:CD:5A:EF:6B:C8:C6:48:DD:B7
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 019856EBDD2E0044FA33018D109D46582D95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 16:02:34 +0000
Manifest this update: Tue 29 Jul 2025 16:02:34 +0000
Manifest next update: Wed 30 Jul 2025 16:02:34 +0000
Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: mCze5wemhelrESva15T53nTzlEIGHQc/NsS5rfpIreg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:dd:2e:00:44:fa:33:01:8d:10:9d:46:58:2d:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: Jul 29 16:02:34 2025 GMT
Not After : Jul 30 16:02:34 2025 GMT
Subject: CN=a7b0d79d66d1a0ea3c854ecd5aef6bc8c648ddb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:35:91:9f:cf:57:f2:80:ff:ce:c1:14:8d:
be:ce:ba:df:01:97:ff:ac:f2:b9:85:06:f7:25:0c:
a8:ec:ea:26:b3:6b:39:1b:2d:6c:4e:f8:45:b3:09:
42:ec:c4:80:0d:38:d6:71:f5:bb:7a:7f:f0:f1:9a:
36:d6:92:57:c7:70:9b:a7:e3:2c:9c:2a:86:52:13:
0a:a6:07:ba:2c:fb:14:8d:42:a2:ea:f6:fc:06:b3:
1a:2e:38:c7:b4:11:49:d8:b3:23:50:58:72:d2:76:
4b:7d:6d:0f:85:20:e3:ee:3e:3f:4d:1e:1d:f7:3b:
96:4d:d1:a9:94:71:ca:02:23:39:86:5f:25:b9:43:
3b:6c:5a:90:e5:a1:9e:8c:a2:0b:b5:04:04:be:1f:
7d:28:53:fc:e0:25:aa:13:c9:6a:ec:e0:34:91:7b:
dc:f3:35:05:96:f2:05:46:74:85:6d:80:24:ff:ee:
25:8d:e6:fc:44:eb:1e:21:d7:bf:3c:a2:b2:98:97:
5e:14:d2:f9:d0:c1:50:3b:3d:5e:2d:e3:5b:1e:f8:
76:42:a6:9c:ec:c2:ba:f0:71:0c:ac:56:cc:27:66:
c4:ee:e4:12:c8:b5:6a:e0:bf:70:8e:d1:6d:71:d6:
c1:1d:75:c1:4b:7d:b7:c0:54:a0:6d:cb:b5:33:df:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B0:D7:9D:66:D1:A0:EA:3C:85:4E:CD:5A:EF:6B:C8:C6:48:DD:B7
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:4f:e7:de:74:f4:3e:e4:a2:a1:ff:d3:5c:82:c4:79:b7:fb:
e7:34:36:06:53:7b:83:39:cd:f1:2e:5b:97:08:b2:d6:e4:c0:
8a:aa:e3:28:e7:9a:ba:9c:5f:c7:80:63:15:59:36:ce:71:8f:
62:38:8c:c8:c1:e5:51:ae:82:df:cd:18:08:51:25:28:39:dd:
82:e7:a2:84:6d:b2:da:8c:aa:55:26:c0:98:4b:22:9a:6c:b4:
b5:1f:62:e5:9c:58:74:5b:f4:70:85:9b:2a:5d:a8:f8:aa:d9:
39:f1:f4:86:bc:d5:72:c1:63:7d:ed:50:3b:43:cc:7f:2e:2a:
e5:c4:10:ae:eb:4d:9d:b7:b2:b3:e3:3a:61:dc:62:1a:05:59:
29:5f:f9:d1:f8:d2:d1:92:e2:dd:e0:d6:76:0a:e6:df:2a:5d:
63:f0:cd:13:b3:4e:3b:7b:13:08:43:9b:b7:3f:bd:8c:53:fa:
1f:82:86:ec:8c:08:75:b5:ed:18:9c:1e:80:bf:cb:f6:41:6e:
bf:66:ab:c2:cf:e9:98:9b:31:0c:21:c8:f8:ff:79:27:46:6d:
e0:c3:3d:d9:ff:7c:03:4d:da:4d:17:02:80:80:3a:f1:b3:41:
ea:01:c9:44:8c:7f:9d:83:a4:8b:f3:f5:15:ef:b9:d0:87:d9:
6e:eb:85:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:00:37 2025 by rpki-client