Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json)
Hash identifier: zXg6ciMTLzxoF25wpat+bTghLt1RpQ6w6sPpNrzGiOQ=
Subject key identifier: 8E:CE:99:74:09:AE:B0:CE:EC:8B:02:4A:B8:EC:B3:FF:AE:87:94:46
Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Certificate serial: 0199221F4A85F133068E67C534E72502B67D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
Manifest number: C3
Signing time: Sun 07 Sep 2025 03:01:39 +0000
Manifest this update: Sun 07 Sep 2025 03:01:39 +0000
Manifest next update: Mon 08 Sep 2025 03:01:39 +0000
Files and hashes: 1: BI83gyIjEGBOS7ZKdoDrSv8devY.roa (hash: jLwvUyWb11PVZ3r8d/OcSHQ4Hzj4d1bbdW3f/BH7o3c=)
2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: w4MHQn/weirJ2Qsrsd2Yiatr2CMm4HUC36Bmwade61Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:4a:85:f1:33:06:8e:67:c5:34:e7:25:02:b6:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211
Validity
Not Before: Sep 7 03:01:39 2025 GMT
Not After : Sep 8 03:01:39 2025 GMT
Subject: CN=8ece997409aeb0ceec8b024ab8ecb3ffae879446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:b6:96:3b:60:9f:94:19:1d:c2:ee:e6:5c:
52:83:ff:61:b5:0d:cd:8f:de:02:fa:8b:16:08:2d:
81:31:6c:4c:af:e4:9c:e9:b7:22:e1:67:b2:f1:11:
55:43:9a:e0:92:e7:21:c1:ff:f7:44:41:4d:f3:2d:
02:1c:b5:0c:58:4a:09:8c:88:9b:90:54:3c:e7:c0:
cc:b8:c1:4b:c0:04:5f:7f:8f:4a:43:75:c2:ed:c3:
82:67:22:0a:fa:ea:04:58:f8:c2:6e:c6:f5:6b:21:
59:61:a2:83:ef:2a:f4:f7:29:34:36:78:74:84:41:
d5:ca:09:c7:c3:aa:32:22:54:66:04:a6:46:32:68:
9f:c5:41:6a:32:43:57:d5:39:0d:ed:39:10:96:28:
c2:7a:9a:c6:62:09:dd:4e:4d:00:e0:ad:72:0e:68:
c3:f6:ce:97:d2:c7:39:c5:87:19:cc:58:4e:13:31:
a4:52:15:6d:d3:4f:39:91:4b:5c:e6:9d:eb:8e:e4:
70:a8:03:39:3d:10:0a:ce:a1:11:dd:53:fa:1a:f3:
94:30:0f:6f:05:45:4b:45:32:5c:0f:ef:fb:7e:bb:
24:0d:24:e0:29:99:ce:92:2d:84:f0:64:9c:ee:a4:
33:33:95:5b:8d:b7:58:05:1c:8d:e5:6a:a7:37:6c:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CE:99:74:09:AE:B0:CE:EC:8B:02:4A:B8:EC:B3:FF:AE:87:94:46
X509v3 Authority Key Identifier:
keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:14:4d:eb:ce:a7:d6:72:4c:d2:27:ea:5b:42:fb:79:f9:36:
c2:c5:15:cd:3d:07:7d:21:05:78:5e:c2:76:27:a9:c9:e8:58:
10:ea:7c:d0:99:a7:09:9a:28:80:4c:d6:e6:6b:3b:14:f1:3f:
b5:04:7d:10:39:51:36:17:23:59:ce:f3:eb:dd:e5:6c:1d:0f:
63:d2:0e:7b:24:99:7c:72:1e:82:90:45:06:b9:5b:19:da:28:
2e:f2:77:7c:93:a9:88:71:e0:f6:d9:6d:bf:22:5f:9f:0c:15:
cc:2d:16:a4:ee:3a:29:03:4a:c1:a1:56:fe:6f:ea:bf:ec:d5:
1b:7b:3b:b4:e8:58:54:f4:73:a5:5e:ac:40:e2:af:97:eb:6a:
5d:51:b3:a1:6b:91:2a:2e:a8:31:7a:35:5c:fa:d4:d2:0e:9b:
aa:f0:c9:82:be:65:91:17:b8:eb:1a:7f:93:5a:eb:d4:08:b5:
93:16:75:53:f3:cd:c5:60:a2:ec:fc:db:e8:d5:4c:f5:63:13:
55:ab:d2:2d:8f:d5:17:0d:6e:14:cf:47:e0:8d:dc:5c:59:66:
bc:ca:49:69:49:f4:64:66:f1:cb:dc:90:21:80:02:74:c4:ee:
2e:f8:b0:72:b1:fb:a6:ef:ca:af:39:30:d4:2d:92:98:de:dd:
05:50:b7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:01 2025 by rpki-client