Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: f9iM7xctC0gx7vetJz5zhgHjyxq5+pV0ITSReCB8p20=
Subject key identifier: 0E:45:33:EB:D4:5A:E0:12:43:EE:1D:F4:29:2D:28:ED:66:F6:41:2D
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 01974F335E88368B2BE00AEF2A6E59FFBFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 11:00:55 +0000
Manifest this update: Sun 08 Jun 2025 11:00:55 +0000
Manifest next update: Mon 09 Jun 2025 11:00:55 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: XksBXP8B8HikrWSW+CwBPcl6weWHX0ibdVkFI1n1um0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:5e:88:36:8b:2b:e0:0a:ef:2a:6e:59:ff:bf:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Jun 8 11:00:55 2025 GMT
Not After : Jun 9 11:00:55 2025 GMT
Subject: CN=0e4533ebd45ae01243ee1df4292d28ed66f6412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:fa:d9:47:a7:0b:48:b2:59:f1:33:bb:a3:
fc:0e:f7:fe:b8:09:45:a8:af:5f:7e:ac:2d:22:64:
1d:69:77:2d:2d:f0:3b:39:b1:36:77:2a:4b:90:8e:
ef:c5:92:b3:25:0d:1b:f3:91:d7:28:fe:93:74:c8:
79:78:6e:a0:98:d7:e2:ab:63:3e:73:1b:05:ee:0e:
8c:0e:af:e0:ea:6b:c2:97:ee:ca:79:e3:16:8e:3a:
59:d8:ef:2c:3a:ad:58:53:3f:94:89:ca:c4:08:ef:
41:10:2f:5d:30:5a:bb:fd:89:10:87:9b:f7:3d:38:
c0:9b:f2:fd:fe:c6:1c:53:b4:32:67:e6:62:40:c7:
c0:4b:1a:57:a2:97:84:f8:0a:7d:cf:f2:72:10:a1:
91:e5:f0:74:75:7c:50:43:af:32:0c:38:9f:fb:e5:
07:82:8a:81:24:6f:50:3a:46:84:db:3e:ee:d9:e7:
09:73:93:a1:99:12:44:a2:14:e1:8f:89:47:dc:43:
07:bb:8b:7f:12:9c:c0:13:b2:f9:a3:06:44:a6:94:
fe:0c:2a:4f:64:0c:d2:eb:83:6e:b3:82:a8:02:67:
8a:67:41:17:47:90:d1:cf:7c:41:97:38:cb:97:e2:
db:67:65:03:38:bb:3d:19:48:3c:d4:63:89:83:60:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:45:33:EB:D4:5A:E0:12:43:EE:1D:F4:29:2D:28:ED:66:F6:41:2D
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e0:5c:94:06:1f:8e:28:0f:0c:71:b3:d1:4e:04:e2:b2:8c:
07:61:72:f0:50:d5:84:7b:c2:3d:78:00:20:77:ef:24:08:99:
13:f8:f8:59:b1:47:29:20:26:2e:d6:38:28:a6:f1:95:3e:4b:
f9:48:ef:20:40:f6:e2:5c:18:d2:77:3a:32:5d:9c:aa:d2:01:
be:e3:95:94:28:90:6a:2e:f0:59:5c:19:b6:bb:df:7e:ee:35:
ff:27:d3:7e:8c:51:84:16:95:37:9b:8b:37:e8:b4:bf:88:42:
e0:2b:2e:d7:a3:d3:0c:d0:9a:91:72:7b:e0:11:c7:d0:43:a5:
4e:38:5d:bb:d3:a5:97:6f:11:e8:03:39:b7:1f:d3:55:5e:8b:
b6:99:66:8e:98:8c:fe:d8:d8:26:52:2b:f2:20:3c:dc:1d:c6:
4c:64:31:3f:f0:c2:de:5d:d5:26:45:90:c5:b3:44:d6:8f:a0:
42:f2:5b:f9:a7:f4:c9:06:d8:92:d7:33:cf:f2:db:29:c6:47:
80:67:c4:1b:e2:14:9f:13:b6:8a:45:49:a3:76:95:04:64:57:
d3:70:3e:10:a2:8b:6c:a2:63:c4:35:15:f4:97:02:e3:75:e6:
24:7a:ff:32:ee:24:ac:0a:57:21:4f:b5:cc:82:ec:6b:76:3a:
92:45:20:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:37:59 2025 by rpki-client