Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
File: pCAAxPTsSgPNTTZX4BtwA07CO5c.mft (raw, json)
Hash identifier: jzAlhSejReF8APxRzTkG3hIYrFh/4Q5JE7q9+vxJUY8=
Subject key identifier: 01:5F:02:2D:91:E1:E0:71:6E:FC:5E:FB:30:28:86:66:1E:81:06:0D
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Certificate issuer: /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial: 019846D28C5DF946179EDBAF17C95EAC9E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 13:01:00 +0000
Manifest this update: Sat 26 Jul 2025 13:01:00 +0000
Manifest next update: Sun 27 Jul 2025 13:01:00 +0000
Files and hashes: 1: 41_o2BIwv76TF64VP1DAdfjTxPo.roa (hash: ZsvXvwGlxNqhMT0bqp079C/5ezKY6fiYSiOoxT1NO2o=)
2: 4mRSyOWbS8hQScfHLulGf4Y6ZgQ.roa (hash: o3JSSVtXNFoFrqvnt6XhA+Y0uItKhtMcyPKqriXcd08=)
3: Qw_MgL0jZxAEcUaQV1xqF4PVe2w.roa (hash: K6DZu82eoM3254ECuNlV9U+0ldDohrzL2NCBM61LLzM=)
4: Zl3HHM0URwuJSk9LlxkNHY3QJSA.roa (hash: Ael3rTKnV/t1wOUc5dyvS7YOaqG/u0QZHukcBegGERg=)
5: pCAAxPTsSgPNTTZX4BtwA07CO5c.crl (hash: cK70iXs1w34dL3ep/TgXZx9zSZIqTBnnFFE4PF1ogEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:8c:5d:f9:46:17:9e:db:af:17:c9:5e:ac:9e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Validity
Not Before: Jul 26 13:01:00 2025 GMT
Not After : Jul 27 13:01:00 2025 GMT
Subject: CN=015f022d91e1e0716efc5efb302886661e81060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:77:4b:40:65:fb:1c:40:af:1f:b3:b9:94:a1:
84:42:cc:f2:8d:ea:10:53:51:de:39:af:ab:1d:47:
34:e9:a2:54:f4:53:ff:1a:74:1d:d7:55:af:58:96:
3c:76:2d:fd:62:4a:e2:a9:53:83:0c:6e:e9:73:d2:
8e:11:1e:6c:1e:04:78:16:e3:5d:5e:85:79:a3:de:
d3:8b:b4:f5:ad:d7:e6:55:07:93:b0:e0:fc:db:f2:
8b:20:15:5b:e2:fd:29:0a:6f:c2:52:f8:ab:38:af:
5b:23:59:24:95:9b:85:b6:d8:19:ba:16:6e:02:51:
8e:89:66:88:bb:45:9c:bb:09:2f:99:c8:a2:d7:c2:
13:ee:79:96:ae:62:4a:eb:75:14:ac:ae:de:a9:ad:
b7:e8:93:f0:d2:b1:ff:5c:be:76:15:35:28:81:1e:
b8:9b:d1:7b:84:a8:56:0b:0c:10:62:a7:72:2b:76:
cb:d4:44:e4:6f:42:f5:0c:ce:0f:09:8d:65:eb:4a:
11:13:95:6a:80:08:66:9a:9e:ff:b9:4b:9e:ab:84:
66:33:2e:0c:2b:d7:36:92:03:e1:15:07:42:84:75:
b6:a4:55:7c:13:76:f0:a8:ba:3f:97:a8:8f:b7:ba:
b2:f9:a1:0c:6c:02:f7:91:52:ae:52:fe:cc:cd:7a:
de:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5F:02:2D:91:E1:E0:71:6E:FC:5E:FB:30:28:86:66:1E:81:06:0D
X509v3 Authority Key Identifier:
keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3b:46:f7:ff:0e:59:4f:13:0d:d6:96:a4:27:91:1a:68:86:
59:fd:cc:81:8e:e9:c3:c6:4f:d1:2f:d8:5f:0d:a3:c0:c8:97:
2c:8f:99:35:0a:eb:b5:66:6c:d5:82:84:78:fd:21:4a:ff:8a:
09:e5:bd:ee:29:4f:79:53:39:96:cd:93:4d:23:df:e3:52:13:
38:0e:33:5a:48:83:8b:6e:b1:32:6a:16:e1:75:a8:f2:96:79:
8b:eb:72:0b:a4:09:97:0f:25:a3:40:0c:b1:d7:4e:74:f9:10:
7c:65:3c:cf:d2:93:6b:b5:e4:c5:ae:0b:82:3f:c1:a4:7f:c5:
0c:73:8c:44:16:ba:2e:94:5a:19:37:97:49:0f:c0:80:82:ec:
01:ae:9d:32:c4:95:66:60:bc:d7:58:b8:eb:13:c0:8c:3b:55:
a6:ef:23:30:55:64:5e:68:5f:96:fa:49:c3:0d:9f:b8:dc:5f:
5a:3c:50:84:17:01:40:71:39:dd:e0:8d:5b:e9:d4:ea:5c:b0:
72:2d:2f:6c:c7:58:f4:4d:44:f3:66:25:ef:cb:2c:13:b6:60:
6e:fd:98:84:8a:fb:11:bd:bb:ca:e2:4d:ba:15:6f:e3:3c:f4:
36:36:6f:49:85:98:e4:ab:37:5d:54:8a:e4:c7:ff:5d:13:1f:
0c:46:24:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:47:42 2025 by rpki-client