Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
File: pxzA1YsWrbv3-lwv28Nln5xzx7o.mft (raw, json)
Hash identifier: 3/NgvEjj8DlzDjhAXIosu097Z6aeCQtxe3mbwEFbcDM=
Subject key identifier: A3:CB:AB:65:6D:0B:C8:2E:58:FC:15:75:B1:7E:A8:B0:88:83:C1:10
Authority key identifier: A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
Certificate issuer: /CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Certificate serial: 0198D5158BD630FEACEC96663408F61A9FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
Manifest number: 1420
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: 3nrrtsZJ-IpATR6f6X0fXP8P3Ds.roa (hash: dHLYJp8vBdcpEI62KQkymjAsJXGywGpijB0UQKFJ6p4=)
2: b3rpvlrUc4F3iSwCht-ScFiNdQU.roa (hash: IxL38OMcTHb5h0kfUl/vgqGG9zstz9MS/9BQOovbMEE=)
3: o-IAHNtlfJTe0lrMjkAn3EfKWfQ.roa (hash: 4yZoP16QAdZ03Ygf8PchIKIjGuMurg8hghXjeARQmNw=)
4: pxzA1YsWrbv3-lwv28Nln5xzx7o.crl (hash: 3zMit524mBh6sH4J5dNVLo56XhU0aYedpmxy5nbmAXY=)
5: z9pY0mNZw1275Un36HrGri4KO4o.roa (hash: YWMIyf15z9zL0EObbho/vFT6JF3XUpar4rPteqovYLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8b:d6:30:fe:ac:ec:96:66:34:08:f6:1a:9f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71cc0d58b16adbbf7fa5c2fdbc3659f9c73c7ba
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=a3cbab656d0bc82e58fc1575b17ea8b08883c110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:cb:b4:71:aa:a0:a7:c6:9a:de:bd:57:16:23:
15:d8:f3:7e:64:d3:fd:0f:b8:72:90:14:90:f6:38:
6a:6e:ca:b6:85:92:34:5c:45:79:eb:bc:66:93:3b:
da:e6:79:75:43:09:10:54:11:e2:21:53:4b:2a:57:
6b:5f:80:f2:53:5d:ac:a9:86:2d:7b:24:a7:90:fd:
23:83:46:df:75:f4:2d:a7:b5:2e:34:d1:9e:b0:18:
c6:08:f6:f7:f3:18:aa:53:20:5d:5e:c2:8a:7d:c8:
77:ec:4e:c0:55:e7:37:59:29:87:69:07:05:a3:22:
70:fe:c5:f1:c0:51:d8:2c:a7:3a:44:eb:aa:0b:c0:
c5:53:24:d7:39:a8:56:26:ab:96:1f:aa:90:88:7f:
c2:26:8d:28:74:ba:69:da:20:43:b7:77:27:88:f7:
a8:4a:47:df:2a:0e:f3:56:5c:54:b9:35:65:81:c9:
13:a8:b2:d1:77:c8:5a:94:c2:77:26:3f:8c:3d:ef:
42:17:66:ed:3f:6f:9d:8c:45:48:0a:0e:41:f1:c0:
38:2a:ba:34:7c:41:3c:b1:2f:af:f2:f1:a9:a6:93:
21:93:66:26:36:3b:9b:55:75:a5:f7:ed:f1:fd:07:
f9:ce:07:6e:01:ec:37:72:36:93:4d:41:1c:0f:25:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:AB:65:6D:0B:C8:2E:58:FC:15:75:B1:7E:A8:B0:88:83:C1:10
X509v3 Authority Key Identifier:
keyid:A7:1C:C0:D5:8B:16:AD:BB:F7:FA:5C:2F:DB:C3:65:9F:9C:73:C7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxzA1YsWrbv3-lwv28Nln5xzx7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5f5a60-9026-4b66-baaa-de640d012065/1/pxzA1YsWrbv3-lwv28Nln5xzx7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6d:a6:80:de:d9:a5:2d:42:e2:0e:33:c0:90:1f:cc:27:6b:
af:08:34:76:a4:7b:e9:34:a3:0c:34:40:c4:e2:ac:48:74:fd:
d6:62:d8:f4:12:45:a4:f4:72:48:a5:fe:6a:bf:da:1a:73:6e:
66:43:33:98:cb:9f:a5:41:72:28:2f:85:6a:48:7e:db:2f:77:
13:7f:62:74:05:ef:1e:e7:92:05:12:ff:aa:31:ea:f0:d7:9f:
9f:e3:71:1a:13:97:39:84:e9:0c:6f:5d:2f:ec:dd:11:f8:96:
92:f7:bb:27:cb:28:f9:86:e9:ed:21:be:7f:21:38:70:b2:26:
00:6b:61:35:a1:dd:77:5c:15:a1:19:8c:4c:31:71:d9:a3:c5:
0e:5c:94:61:91:2b:ca:b1:c7:66:10:84:62:e7:00:e8:f0:3d:
05:0c:05:20:27:3d:ae:f1:91:ae:5b:5e:b5:ea:dc:2f:2f:e3:
08:8e:ff:cc:2d:92:de:e5:f1:76:88:bf:b7:bf:22:08:98:72:
55:11:07:6f:f1:28:8e:d0:7f:28:01:41:51:ff:cf:21:dc:b1:
7a:aa:c3:a1:58:33:1a:c1:aa:d9:7e:61:95:42:d4:fc:7d:11:
3d:1e:b4:76:26:62:d2:df:d3:e4:f4:50:fd:a5:76:9f:c4:9f:
6a:92:c4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:55 2025 by rpki-client