Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: u+hgYBoAqR4zz+EV15KFtodrk4Lkk931cmRD6Q3Ysho=
Subject key identifier: 39:24:5D:49:7E:A5:93:AD:C2:FC:72:FF:4A:D3:DF:9F:17:76:82:58
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 019916F68718A770DA39F817A78AE65F3F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 166C
Signing time: Thu 04 Sep 2025 23:01:18 +0000
Manifest this update: Thu 04 Sep 2025 23:01:18 +0000
Manifest next update: Fri 05 Sep 2025 23:01:18 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: E3xqSXSNSEJRYfcxz3Sh+R0pmGimaHNpuGumbPIbruY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:87:18:a7:70:da:39:f8:17:a7:8a:e6:5f:3f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Sep 4 23:01:18 2025 GMT
Not After : Sep 5 23:01:18 2025 GMT
Subject: CN=39245d497ea593adc2fc72ff4ad3df9f17768258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:6b:ec:ec:31:86:06:34:1f:bd:c3:97:a9:
20:5f:1d:21:ff:24:4d:c2:5f:bb:cd:91:bc:a4:6b:
7c:2f:be:0c:0b:60:34:57:f7:94:24:9b:8b:29:ab:
0d:23:74:a1:4f:d4:3b:70:30:d9:1b:cf:6a:4f:87:
94:a6:04:dd:f6:46:b2:11:ff:c2:b9:90:8e:5d:25:
c0:a6:4b:8b:f7:51:b1:48:fa:2e:4c:dc:06:87:b3:
6f:c8:94:4d:b0:11:b2:eb:0b:f5:f1:32:b5:bf:08:
9c:99:6f:ff:76:48:f8:ae:52:2d:d5:03:6c:23:a3:
1b:49:25:ef:41:29:fa:02:2f:72:36:e7:6e:f4:5e:
f9:d1:48:d0:4e:aa:a6:84:c5:a6:03:48:1b:3c:b6:
89:57:21:03:ea:bb:72:b6:f8:1b:00:49:3e:ab:a9:
0d:90:43:d4:dd:4f:d7:09:99:ac:43:3a:1d:4c:dc:
f2:9e:f1:8f:7d:0b:f0:29:4e:4b:67:80:3d:b2:eb:
e2:71:e7:77:ed:88:10:b7:64:84:34:dc:ee:8f:f9:
e6:30:78:c1:ef:6a:92:90:03:f7:c9:86:ed:f9:3f:
c5:42:a2:59:f9:ea:96:a7:e8:ab:b3:2b:c1:20:24:
20:be:22:1f:83:f6:c4:60:3c:df:98:09:86:ea:3e:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:24:5D:49:7E:A5:93:AD:C2:FC:72:FF:4A:D3:DF:9F:17:76:82:58
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1b:f2:3d:49:e4:df:5a:5f:f6:2f:aa:f4:83:ab:9a:91:16:
d9:77:a8:59:35:a0:6d:10:2e:d3:82:26:44:68:e3:1d:46:ae:
73:62:5a:d2:44:18:8c:7a:64:c9:95:f9:b3:3d:cd:05:3f:38:
79:e9:c6:b9:46:67:58:b2:dd:d0:17:fb:8b:0a:7d:84:13:11:
ac:6f:19:4b:67:3c:a2:43:f0:9e:11:13:cc:c3:bd:aa:f7:ba:
ab:0e:54:64:bb:5f:53:0f:8c:27:32:0a:58:e5:7d:95:0a:f7:
14:31:85:cd:b3:94:79:86:c4:b9:18:8a:5e:71:53:96:6c:be:
67:66:af:49:cd:e3:8e:c5:ce:d3:4b:c1:0a:93:05:58:47:ea:
90:e1:ac:fd:36:40:4e:34:78:18:9e:2a:ec:61:24:84:66:7c:
f2:96:fe:7b:fe:29:d1:07:2a:23:ea:a3:33:05:28:dc:11:c8:
35:3a:d2:ef:5f:c1:63:44:6a:79:70:3b:15:de:5c:47:88:f1:
2b:62:a6:7e:a8:bb:88:1e:18:e0:02:18:7d:b4:bc:ac:9e:c5:
96:36:cb:ef:42:4e:f2:39:17:e1:b3:25:5e:dd:ca:9a:9f:38:
20:4b:4d:7c:a7:97:a9:cb:c0:ed:b4:ec:6b:d0:70:65:45:88:
9a:32:77:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:17 2025 by rpki-client