Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: ZSWJTB2huz0cD6BX8OEDeILuHoBlpov1GiC8y9MCjIQ=
Subject key identifier: 99:F8:48:3F:76:6A:B4:1B:29:21:3A:DC:40:76:22:A9:5C:D0:D6:C3
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 019921B20D0EB8547A39E3498B28B8B899B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:02:20 +0000
Manifest this update: Sun 07 Sep 2025 01:02:20 +0000
Manifest next update: Mon 08 Sep 2025 01:02:20 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: nyt9T6OfyLtbHJT32UWU3jJxJTu0kMQLQoQ0k97IeiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:0d:0e:b8:54:7a:39:e3:49:8b:28:b8:b8:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Sep 7 01:02:20 2025 GMT
Not After : Sep 8 01:02:20 2025 GMT
Subject: CN=99f8483f766ab41b29213adc407622a95cd0d6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:18:a7:74:32:48:9f:d8:95:bb:40:53:e6:
26:9c:49:64:26:cb:64:dd:41:c9:04:55:54:a5:a9:
8b:e1:93:0c:00:a3:cc:06:d2:f4:d5:0c:f3:12:9f:
86:0e:28:90:82:85:83:50:6a:04:74:23:c6:04:cb:
f4:8d:97:47:b4:7d:b3:22:47:c3:85:43:b6:1a:64:
8a:9c:d9:e2:a5:09:aa:80:d3:74:29:a2:68:94:6b:
98:39:0b:8e:77:b4:cf:30:c6:52:d8:49:52:97:6e:
e0:e2:cf:bc:4f:fc:2d:36:bd:a8:12:52:ac:29:6d:
56:f1:cb:95:6a:23:d9:96:06:38:76:31:8c:9a:0f:
52:1c:bb:08:a2:7b:e1:bc:96:5b:c9:23:a0:6d:8f:
97:b6:0d:3f:e2:c8:6f:34:01:fe:fc:e7:bc:dc:17:
e1:60:eb:be:b9:90:f6:f4:fa:31:ac:64:bd:b5:c4:
1f:96:ab:c0:da:b6:68:af:d5:13:be:03:29:0a:af:
d3:39:98:ed:19:36:73:bd:2c:38:28:1e:44:76:60:
91:e7:bb:37:9f:25:58:d9:df:fd:95:f4:fb:42:36:
9e:3d:5a:94:87:d6:2f:87:29:88:dd:ae:74:96:3a:
04:f5:18:59:8a:03:09:2a:12:70:d0:86:44:a6:5f:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F8:48:3F:76:6A:B4:1B:29:21:3A:DC:40:76:22:A9:5C:D0:D6:C3
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:17:92:8f:ce:46:2d:82:f4:a1:52:17:8d:12:f1:3c:cf:
83:fc:89:50:73:05:14:d3:ed:b4:35:33:c0:0a:da:3d:68:e2:
11:30:37:2d:87:90:2c:ff:16:bc:76:6b:95:85:d4:b5:cd:37:
26:3a:4b:b2:d6:e7:21:ae:e1:40:94:cd:f5:2f:34:6f:55:b5:
58:2d:27:d8:3c:05:77:8d:de:22:a8:8c:bf:ee:03:67:00:35:
16:a9:7f:aa:fe:71:61:f4:f6:47:47:b4:c7:ac:00:28:9a:09:
b6:8d:97:b4:a4:20:2b:20:e6:13:41:db:ed:d8:c8:47:d8:4c:
ab:a8:80:0a:6c:cc:f1:ac:85:c4:a5:ee:68:97:06:d6:61:f7:
71:12:7e:e7:c1:ad:db:94:d0:7d:1d:3e:82:7e:2f:19:48:c2:
4b:e5:fd:f1:2a:f6:13:f6:61:ef:70:ff:db:8e:00:10:5c:bc:
c6:f8:84:00:01:90:e5:06:05:fd:88:ff:d5:1a:78:01:f6:f6:
45:36:e2:66:02:39:f3:e3:3d:af:3f:84:c2:51:90:f5:7b:57:
d6:26:70:36:38:af:34:bb:2a:44:32:b1:98:1b:05:2b:ab:77:
e3:4d:15:c7:0c:13:98:80:dd:74:ca:7a:1e:d9:ed:96:ce:e7:
70:88:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:15:06 2025 by rpki-client