Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: bSkfYVsy6xUWql7BzrTuXyzhsbmLt6rqRnJ+vxrUEjw=
Subject key identifier: B2:3A:47:A4:5E:C0:94:29:3D:F3:F8:73:AC:86:73:93:B5:51:83:2B
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 01984A09D103B1359FBE8B6177211F8C2BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 160E
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: KQpxIUmfTtsHkCt/94Nts8wRWilhv04wCEAOxWjKNuM=)
3: y4LRZvQWH9l19-R4kCc6PgUW78w.roa (hash: 2GDs3fd+T8RC8u9/aToLiIMcmZgcmmJt7vgNbq6rFsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d1:03:b1:35:9f:be:8b:61:77:21:1f:8c:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=b23a47a45ec094293df3f873ac867393b551832b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:4d:7c:0e:61:8c:0f:6b:40:2f:0c:6f:a9:
dc:1d:32:31:80:df:e3:6e:8a:a4:94:1d:e0:de:f3:
b0:c5:2b:ca:9a:81:1c:40:59:87:31:2a:7d:dd:2e:
1a:40:0d:cb:ea:5c:93:5a:3b:02:e3:ed:5c:08:f4:
05:be:f7:ad:e9:aa:df:25:42:e2:d2:dd:e6:1c:80:
e0:a6:54:67:71:88:cc:71:10:5b:3c:95:64:be:91:
3f:66:f4:ff:ba:f3:29:b0:7c:cd:d4:62:ea:eb:00:
42:d3:83:b6:a0:cc:3e:cd:40:b2:35:7c:42:16:dc:
fd:25:ce:68:30:f2:45:8f:b3:67:c1:71:f7:bc:2b:
ac:20:cf:6a:bc:b5:1e:0a:ec:c5:37:a1:b1:6e:b7:
a9:60:7b:50:f9:90:60:9e:c1:1d:95:03:de:e7:79:
f5:28:38:a5:71:c6:0c:f1:88:6d:eb:70:6c:3b:fe:
c6:2d:91:d8:30:06:6a:b2:a9:7b:4e:55:5a:7a:d6:
f5:12:6b:2f:f1:20:a6:4b:e9:23:41:f6:b9:ba:d9:
a1:d8:32:cb:57:e7:2c:c0:1f:fa:dd:38:92:54:a6:
8d:75:e5:8f:ef:12:d5:5e:2f:e4:dd:e1:65:2f:7f:
1b:2e:c9:89:98:bc:36:b3:ba:dd:15:8d:c4:d2:cb:
d9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:47:A4:5E:C0:94:29:3D:F3:F8:73:AC:86:73:93:B5:51:83:2B
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e6:4c:4c:06:3f:29:6d:54:f7:43:d8:53:d0:8d:25:b1:20:
7f:91:7e:44:28:3d:9c:37:59:9e:50:74:1c:4d:55:8b:47:67:
91:d3:20:d4:6a:cd:44:fd:74:66:a4:f1:ef:af:65:d4:0e:fa:
bf:82:d1:c5:35:ad:08:9c:cc:92:0d:de:93:64:75:08:f4:91:
06:8e:b4:01:dc:69:ca:f3:3c:09:b7:9c:25:e4:92:cb:9e:2d:
78:e3:c1:af:90:48:f7:a3:74:80:c3:3a:b8:9e:b9:83:ed:74:
52:81:47:d8:e1:c3:5c:54:2e:7b:61:51:a4:c1:d7:0b:7a:40:
b3:f4:e5:f7:97:6a:a9:cb:36:af:eb:d1:37:df:5a:fe:60:11:
72:f9:96:a8:ed:9a:59:2b:9a:9f:17:85:ac:5b:b0:a1:c8:6f:
b0:5f:90:a5:6c:63:43:91:e5:9d:7c:55:dc:72:32:5e:91:c8:
10:78:d0:1a:91:4f:2f:70:c8:1c:c3:09:a0:49:ac:c9:a3:b8:
04:07:63:16:2e:e9:39:cc:59:94:b5:24:35:dd:0d:b2:7e:99:
57:5c:ca:fa:31:a6:85:92:34:c0:4f:ab:93:51:80:05:09:e5:
cd:26:e3:e5:af:c9:c4:f7:35:c2:73:5d:c4:42:29:e9:8d:7b:
c0:c7:25:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:34 2025 by rpki-client