Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
File: pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft (raw, json)
Hash identifier: p20Ig0WX5oMkiUSiVUGlJQvBiwqv3/Vs5Q+OAihvfRs=
Subject key identifier: B9:AF:08:C1:C5:F6:EA:CA:CB:DC:80:BC:EE:32:0C:50:E5:E9:7C:32
Authority key identifier: A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
Certificate issuer: /CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Certificate serial: 0199228CF5549C1341806E16D55241BDEA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
Manifest number: 0A7F
Signing time: Sun 07 Sep 2025 05:01:27 +0000
Manifest this update: Sun 07 Sep 2025 05:01:27 +0000
Manifest next update: Mon 08 Sep 2025 05:01:27 +0000
Files and hashes: 1: Zul1tgj5h7XyL00R81W1mi6g1V0.roa (hash: JA2Lp3OQPetYYVSiRbEJs9OwBpQrX9gJ6sScomlZ4Xo=)
2: pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl (hash: yfz5aIXomWxScR7yaWj0pp778NP8qBHUaO1iyozkm24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:f5:54:9c:13:41:80:6e:16:d5:52:41:bd:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4057bd139c9fd2d0518b72039c3defcd101a55b
Validity
Not Before: Sep 7 05:01:27 2025 GMT
Not After : Sep 8 05:01:27 2025 GMT
Subject: CN=b9af08c1c5f6eacacbdc80bcee320c50e5e97c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a8:85:71:df:95:0b:94:94:83:5b:92:ba:5f:
6a:e6:cf:19:9f:71:a0:fd:91:d2:4a:ee:e2:38:cd:
85:d5:1b:9e:4f:f7:03:cf:05:d4:56:60:03:1b:27:
32:75:ca:bd:8f:73:6c:68:b5:c1:de:f8:09:95:67:
2e:4b:e4:d2:3b:37:6f:97:47:84:33:92:c4:7b:fd:
c2:05:40:2c:1e:f6:87:47:0e:5e:da:a6:ce:fb:02:
53:fb:19:b3:5b:c5:a3:af:41:40:2b:46:cf:a7:67:
79:df:85:78:a6:a8:53:d5:e7:3d:8a:60:83:09:2b:
0a:1a:c8:86:20:41:f9:1f:af:b0:af:a5:80:fd:7b:
19:7f:e2:ea:04:5d:8d:b1:df:3a:f4:9e:69:66:b3:
9d:ea:c5:69:90:60:c1:9f:ea:72:1d:01:b4:d7:95:
99:b3:bd:a1:04:d9:0d:81:87:e6:6b:f9:bb:fc:3b:
b6:2e:c2:81:e4:08:35:44:5b:2a:30:cd:e6:4e:63:
c0:06:38:23:d2:8e:8e:76:97:02:0a:b5:1c:59:80:
4a:39:7b:72:8e:81:3d:5f:0b:5a:ec:01:50:b7:36:
bb:eb:63:1e:67:f1:51:b1:57:35:e9:b6:2a:51:ab:
13:16:fc:1f:a3:0c:7d:9a:4e:c3:0e:50:b5:60:64:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AF:08:C1:C5:F6:EA:CA:CB:DC:80:BC:EE:32:0C:50:E5:E9:7C:32
X509v3 Authority Key Identifier:
keyid:A4:05:7B:D1:39:C9:FD:2D:05:18:B7:20:39:C3:DE:FC:D1:01:A5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAV70TnJ_S0FGLcgOcPe_NEBpVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63eb50-150f-401d-92cd-162d723b510a/1/pAV70TnJ_S0FGLcgOcPe_NEBpVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:5f:aa:22:04:cf:70:f4:9d:ae:3e:95:8f:9d:5b:37:8e:
20:2a:eb:ed:2d:5d:54:f5:c3:4b:19:a2:5c:d7:9e:52:2d:1f:
b9:65:0b:a4:8b:5e:68:1a:4d:5d:6c:f5:a4:e5:25:16:4a:11:
6a:a7:20:41:37:38:9a:2d:2d:0b:08:f0:5e:e7:ed:bb:fe:c8:
2e:f6:cc:8c:0e:95:97:d6:49:63:fd:4d:9d:b5:43:b4:6d:17:
fc:df:a2:de:18:3a:64:96:60:f5:21:b4:bb:29:91:22:56:3a:
c9:ff:09:0d:89:19:c1:39:84:e8:a0:0a:58:49:a9:6e:47:1d:
1e:6e:7a:e3:22:18:5f:0f:f5:ac:53:d9:19:67:47:06:11:bf:
f3:27:e7:74:ba:dd:cb:d0:89:fb:3e:c0:24:a3:2b:7e:5e:12:
12:74:2c:86:25:b2:f1:97:35:f9:f9:49:1a:bd:27:9b:82:09:
46:e2:7b:21:f6:fa:ee:b6:57:dc:78:76:ed:f9:1b:60:13:be:
9c:b8:d0:3e:ea:19:80:d9:96:a7:bc:d8:25:f2:fa:7f:d7:91:
66:81:38:60:35:f7:a7:c8:a9:94:22:05:77:a3:b0:8f:b0:be:
6f:bd:25:ea:86:80:da:3e:70:76:75:f9:ec:fe:52:8a:e2:98:
03:9e:e9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:04 2025 by rpki-client