Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File: pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier: nnE2YmSQyZoqtepNButclCn9QH9W75Pd9pt52D7CJco=
Subject key identifier: 7F:42:5A:5D:40:26:B8:E5:C2:AF:75:90:CE:73:F7:21:6A:A7:67:D9
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer: /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial: 019849D2EFDE7E0411A18FCABAF9D00BC241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 03:00:17 +0000
Manifest this update: Sun 27 Jul 2025 03:00:17 +0000
Manifest next update: Mon 28 Jul 2025 03:00:17 +0000
Files and hashes: 1: iKx7DVcDIp4-3Ht_VZ0qOWxo2fU.roa (hash: zpfuponymK+r2Tkz+w9BOZiVOOpvDfzySSg7CkzrHaM=)
2: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: bDz6w6X1KDw9IR5YiNYLB0IZUgj0Miz+sAgjJ7bipAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:ef:de:7e:04:11:a1:8f:ca:ba:f9:d0:0b:c2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Validity
Not Before: Jul 27 03:00:17 2025 GMT
Not After : Jul 28 03:00:17 2025 GMT
Subject: CN=7f425a5d4026b8e5c2af7590ce73f7216aa767d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:0b:29:cf:66:97:0e:f6:9d:b2:25:81:11:
7f:3a:d3:6f:2a:fb:9a:6e:ea:2a:98:38:ff:1f:55:
d2:78:77:78:57:68:e6:72:88:2c:c6:d2:5e:e5:94:
45:05:b7:ae:33:b8:a3:1d:b6:90:a4:e4:f3:71:6a:
ce:6d:f9:08:e1:7d:7e:0b:12:17:5e:06:ec:f2:ec:
0d:71:0b:a8:41:de:fa:f7:35:7d:6d:3d:35:f8:d8:
85:6b:b1:59:8d:10:bc:37:24:c9:8c:0f:11:6e:b0:
aa:57:97:f4:e7:6e:3e:b4:83:56:00:3e:5c:3e:02:
f9:6d:b0:08:6c:66:bb:36:29:b0:49:8d:73:81:6d:
b2:36:78:9b:d7:bf:56:e1:d7:fc:ad:36:4c:03:f2:
a4:a9:25:cc:7e:74:b1:e7:cf:c9:df:97:93:b3:73:
5c:ce:f9:33:a3:5b:d4:03:51:c6:05:5b:c4:86:57:
1a:81:3e:34:46:e8:c1:8d:e9:5c:45:55:97:88:34:
b7:7f:ad:1a:20:83:8c:e4:13:09:cd:af:7a:40:84:
84:55:0b:7b:d5:b9:8e:d2:e4:f2:a6:58:6b:10:48:
e6:3c:57:e3:e5:ff:b4:82:20:58:23:bb:4c:75:28:
3a:b5:24:85:df:f3:30:e5:cf:39:5f:14:57:66:23:
3a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:5A:5D:40:26:B8:E5:C2:AF:75:90:CE:73:F7:21:6A:A7:67:D9
X509v3 Authority Key Identifier:
keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:38:05:9f:ab:ca:15:fd:e2:d5:58:62:98:5e:c5:6e:a1:20:
87:fc:7c:c9:d6:c9:3a:24:18:f8:99:54:44:79:91:97:04:08:
fc:03:a3:7b:c7:43:0d:8b:0d:59:57:18:f7:7c:b6:f9:1c:17:
44:00:9a:ef:fd:9e:19:aa:8f:83:9f:0c:1c:a0:d7:b2:98:e6:
d8:fd:1c:12:ec:ed:2a:28:42:1a:bf:d6:7e:19:a9:bd:c7:5c:
e7:58:ce:ba:a4:69:95:24:0a:b1:5f:b9:91:65:c5:04:71:4d:
0d:ab:b6:17:2c:8f:85:56:7d:45:08:27:72:32:a6:85:5d:9a:
1a:62:b5:9d:09:ff:b3:ed:de:f2:b2:cf:8a:92:4d:bb:70:f4:
82:41:76:28:b0:49:e4:57:23:c0:f0:7a:47:fe:61:19:ff:e1:
e6:e3:65:e1:c6:b9:31:66:76:6c:1f:39:e9:0f:f3:d9:02:ed:
ea:86:c4:64:21:a1:b5:fe:3e:67:a8:e9:03:bc:04:c4:ac:16:
f9:9f:91:8d:11:09:ec:37:80:70:43:34:5d:2a:a5:40:fa:16:
20:b7:66:ff:f1:e8:b3:9d:70:42:9e:70:04:9b:0f:c5:41:40:
62:3f:95:2a:e6:bc:67:cd:82:07:ee:09:0a:0d:fa:b7:ea:ab:
aa:10:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:55:57 2025 by rpki-client