Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: /EsCzHWYo60BjMTm8LofpuSUImeDl2dbEYb29olBg3E=
Subject key identifier: 2C:DF:DE:43:F1:02:E5:86:BD:4D:A6:F4:CB:04:A8:DA:C3:12:A8:63
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 0197488CB45720B1C94BE9C08D7B96D76A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:10 +0000
Manifest this update: Sat 07 Jun 2025 04:01:10 +0000
Manifest next update: Sun 08 Jun 2025 04:01:10 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: MoEzx1wJPbX5voCQHl6eDOScxcT9rIJ3qn8ykHShlkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:b4:57:20:b1:c9:4b:e9:c0:8d:7b:96:d7:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Jun 7 04:01:10 2025 GMT
Not After : Jun 8 04:01:10 2025 GMT
Subject: CN=2cdfde43f102e586bd4da6f4cb04a8dac312a863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:83:77:88:d1:ce:a7:f5:5f:ce:39:7c:56:
ab:b7:d2:c1:20:ea:54:74:60:d2:8c:d8:b7:95:8d:
b6:a5:4e:55:18:4d:bb:2f:c2:a7:be:d9:79:a2:04:
3a:a1:1c:c3:1e:f4:1c:89:05:e1:80:4d:29:4d:ae:
fb:dd:ef:c8:ab:ff:5b:48:03:e0:03:2d:af:d4:a0:
42:95:c2:a8:54:40:77:8f:9d:f9:af:ce:64:8e:2d:
0c:e5:13:1e:78:be:88:d0:d6:fd:9d:85:60:5b:03:
71:0f:65:52:e7:22:9b:70:7a:b8:ab:8e:fd:46:25:
71:1f:1d:88:48:16:4e:10:dc:98:10:6f:a4:84:03:
a8:b1:b9:93:35:e9:e6:c1:88:28:53:dd:68:58:7b:
19:34:b8:24:cc:d3:8e:49:6b:f7:53:06:16:7e:8f:
38:65:5a:2a:45:00:9b:ae:bd:a6:51:62:25:17:af:
f3:45:63:26:e7:aa:cf:11:c3:fb:a6:cb:e2:76:20:
6a:17:2b:ad:ea:be:3a:d8:a4:c6:23:f9:ef:43:57:
bd:bf:3f:53:86:d5:e5:a6:83:ef:d9:a3:fb:d6:2a:
8f:52:e5:7b:0c:60:f9:cd:c3:c7:28:5c:0b:9a:93:
7c:b4:46:65:e6:88:39:71:c6:a8:4e:33:fb:b6:d3:
15:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:DE:43:F1:02:E5:86:BD:4D:A6:F4:CB:04:A8:DA:C3:12:A8:63
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:b5:e2:24:49:cd:87:2c:ab:b7:53:0a:d8:91:b6:70:a8:
db:70:c5:3c:d4:1d:3f:8c:59:ca:58:68:b6:4f:c6:60:b4:b7:
1a:af:a8:38:d6:d0:e6:b9:6c:81:b4:6b:f9:2a:2a:91:ba:33:
25:77:fe:79:88:83:66:ba:37:34:cc:78:7e:bf:f2:76:93:25:
0e:e3:99:2a:81:e1:1f:a0:6d:da:8a:bc:73:52:c0:dc:7a:f9:
0f:da:0b:21:63:35:7b:3a:cd:c7:58:3d:20:71:2f:51:fb:ae:
80:55:aa:10:43:ba:f9:86:37:0e:3c:16:2f:15:82:2b:b1:60:
e0:0b:8b:dd:95:4f:03:18:be:86:56:9b:5e:85:45:30:3d:99:
ff:42:da:89:12:12:28:cd:3a:75:d5:d6:e0:48:fa:b5:a9:b9:
78:4d:36:cf:6f:7c:12:98:06:f8:ac:88:78:cb:47:a8:27:6f:
99:7c:59:43:45:c3:95:62:f7:85:7b:74:91:2d:a4:8c:63:10:
16:b8:c5:18:09:58:91:ab:4e:93:82:02:0d:0f:29:d9:a4:8b:
57:20:f7:c3:33:c2:e1:2b:59:1b:d0:1a:d2:e5:3f:58:03:c5:
22:f7:65:c9:f0:a0:98:fd:96:03:8c:70:24:7b:36:ad:ac:b6:
6c:60:4e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:02:57 2025 by rpki-client