Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: hCtril2xzG0bcrL0mCj53N4d6w6Gc+asRraT4+B03KY=
Subject key identifier: 4B:45:DF:CF:EF:92:6F:26:4D:1C:08:6E:B6:80:FA:B2:DE:01:19:8D
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 019849668487D2B6715D8166361A3DB4FA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 156F
Signing time: Sun 27 Jul 2025 01:01:51 +0000
Manifest this update: Sun 27 Jul 2025 01:01:51 +0000
Manifest next update: Mon 28 Jul 2025 01:01:51 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: FX6oC3g7mxu4XjsQ3QM79v/ZSa0YHrh/698A3TdeooI=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:84:87:d2:b6:71:5d:81:66:36:1a:3d:b4:fa:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Jul 27 01:01:51 2025 GMT
Not After : Jul 28 01:01:51 2025 GMT
Subject: CN=4b45dfcfef926f264d1c086eb680fab2de01198d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:78:8d:e5:f5:42:5d:8a:2b:2f:e8:06:84:08:
72:85:5a:25:77:75:9c:c7:a2:7f:b1:b7:31:03:d5:
22:55:a2:45:31:f0:60:78:4b:5c:4f:86:50:80:59:
d9:87:c1:ee:f7:de:5d:3c:da:7f:97:ac:f8:0f:0b:
58:fa:72:73:2b:90:1a:8b:22:b3:b1:01:0f:0c:72:
c3:cb:d9:db:f7:64:4b:ec:ac:cb:01:34:81:9c:10:
cf:47:01:bb:c9:4e:c0:60:f8:be:3d:18:52:07:47:
42:d2:78:a9:b4:21:26:a5:fd:17:bb:ce:9d:8d:91:
ce:f9:27:72:ce:c0:76:89:8f:4c:93:34:92:56:dd:
61:5b:91:39:d9:02:48:79:95:ad:1b:54:19:85:1b:
aa:a2:99:e0:c1:87:b8:6c:f7:6a:16:0f:d2:b7:a3:
d8:0f:5f:d3:9b:94:fc:15:ef:56:ba:6f:dc:49:38:
1a:1a:d7:7f:67:32:4d:71:31:15:4d:c9:d1:2d:b5:
8b:63:d2:af:34:b5:bc:2b:e2:0a:f9:38:f6:7a:57:
77:e6:c0:02:fc:ea:a8:52:33:13:20:6d:32:f6:31:
c7:11:64:1c:bf:e3:8c:b0:94:2b:de:00:00:51:66:
b2:81:32:aa:c2:fa:d1:89:33:35:93:f2:80:62:9b:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:45:DF:CF:EF:92:6F:26:4D:1C:08:6E:B6:80:FA:B2:DE:01:19:8D
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:81:83:69:6b:7d:4d:cb:dd:57:cc:00:6e:41:e6:df:a7:4c:
47:3e:2e:d0:77:ea:e2:ec:76:a8:15:70:39:7b:4c:f5:b1:64:
3a:5e:c6:ba:07:3d:a3:02:ef:9e:6d:39:d4:e1:20:4b:47:63:
d0:9f:d1:f0:54:67:c3:4a:a1:1e:7e:ed:ee:9f:33:9e:6d:5b:
b7:3e:d8:4d:4f:02:8e:70:dc:27:88:25:8d:08:ae:85:f2:37:
b3:ab:01:7b:4d:77:6b:f1:e8:55:b8:41:6c:b7:8e:7f:61:b7:
fc:a3:ad:35:cc:43:84:e9:cf:89:ba:f9:4b:48:b5:5e:56:79:
42:e7:1f:01:36:f6:95:31:09:6b:0f:43:e4:fa:3a:89:76:9a:
25:0e:2e:1c:09:bf:8c:9a:0f:7e:81:44:c2:75:79:0b:28:44:
41:b5:19:84:1f:5b:c3:ad:48:ba:61:be:44:7a:6c:1f:63:8c:
a8:88:2e:53:ff:f9:f0:8d:48:ff:03:c6:53:33:05:52:d4:1f:
f3:83:cc:b7:d4:e5:94:8f:36:a6:ea:b1:53:21:79:4b:16:43:
c6:60:1e:56:ae:48:7c:60:d3:fa:4f:30:3b:c8:94:66:39:44:
87:35:ce:99:31:d8:f4:d1:9d:60:9d:b6:d5:78:e9:93:98:a1:
f2:5b:89:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:49 2025 by rpki-client