Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: PH97IKuvaGnk3ac9ywSWQnDNY+5jQJkR8C0Hg7/uNQ8=
Subject key identifier: 6D:BD:7B:DD:EB:65:A9:62:1A:6A:3D:8A:28:BE:2B:D6:FB:D8:C3:0F
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 0197B9D8F259BA68FFA785D0B069744F0802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 04:01:32 +0000
Manifest this update: Sun 29 Jun 2025 04:01:32 +0000
Manifest next update: Mon 30 Jun 2025 04:01:32 +0000
Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: 5XPMAzMObvvVzeM85CnBWIlwGBobIivybLxpTDDTm4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:f2:59:ba:68:ff:a7:85:d0:b0:69:74:4f:08:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Jun 29 04:01:32 2025 GMT
Not After : Jun 30 04:01:32 2025 GMT
Subject: CN=6dbd7bddeb65a9621a6a3d8a28be2bd6fbd8c30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:81:32:2f:1c:04:43:23:e7:0b:43:e6:68:85:
ab:c7:35:d2:26:66:df:d2:a7:88:bf:c0:86:6c:c3:
46:fc:f7:a7:14:a9:ba:84:71:95:55:d9:5d:32:5c:
d1:12:43:dc:2c:d5:76:c9:12:55:e1:f7:0b:35:ae:
a8:d5:f8:4d:17:df:80:1c:9f:41:26:47:73:db:ae:
83:8a:01:b1:87:48:d6:eb:c2:79:e5:02:b9:9c:cb:
b2:2a:a1:21:ff:2f:f9:96:13:76:e3:1f:31:b4:d3:
a1:23:d9:2b:ad:87:52:c3:c4:85:e9:53:3a:fc:52:
66:8a:d0:e2:19:94:88:7a:fe:c7:e3:ec:b6:9a:1a:
e9:86:05:28:b6:4f:16:69:0f:7e:01:fc:59:a8:a5:
16:cd:23:45:86:50:c3:ca:dc:80:54:b5:26:67:5a:
db:e2:3e:28:24:73:a5:0f:43:ca:11:1e:5f:3c:e9:
a0:01:66:ce:1b:e3:b7:6a:63:c8:94:5f:5c:22:1f:
3d:7d:bb:c8:c2:bc:2e:85:05:6c:f1:cf:55:2b:51:
94:8d:27:8b:22:53:bf:30:4e:11:19:fe:77:17:1e:
c3:7a:53:a7:5e:63:78:bb:b1:d0:67:1a:69:96:7c:
cf:97:3b:89:46:b9:d3:06:85:d8:af:c2:20:2d:21:
74:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BD:7B:DD:EB:65:A9:62:1A:6A:3D:8A:28:BE:2B:D6:FB:D8:C3:0F
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:fa:f3:bf:5c:22:8e:da:54:12:b4:1d:18:0b:eb:c9:38:18:
cd:87:91:20:91:92:4a:36:5a:17:0b:5e:cc:47:9d:2b:66:80:
b8:10:0d:8f:bc:af:68:74:97:51:c1:6b:e1:8d:3e:31:3f:73:
c1:2e:31:ba:68:f5:e9:53:60:2a:b3:15:24:fa:7a:74:a5:f1:
6d:c9:2b:93:fc:17:50:90:53:3e:5a:0f:1c:55:43:f8:c7:69:
39:ed:6c:2c:80:dd:02:44:05:f2:f1:17:c9:8a:24:b8:9b:be:
9d:c2:70:81:b7:24:a6:8a:ea:88:55:da:30:c5:05:6e:f8:fb:
a4:46:73:47:9d:e0:af:5e:78:4e:6b:bc:ba:33:3e:18:15:42:
c9:2b:ef:35:1b:4b:57:9f:61:ce:71:8e:ad:76:1a:ec:ed:8f:
94:7b:29:e5:94:73:b4:54:15:74:49:82:46:64:d4:4c:3b:b4:
84:06:ae:36:1c:af:a3:12:92:25:3b:c5:56:bc:5a:7e:86:8a:
8a:8e:d4:f1:df:5b:48:a3:bd:35:16:01:05:f3:4a:f0:30:86:
62:49:28:15:42:69:7d:c1:0a:38:94:37:a9:47:9e:73:39:9f:
1c:3c:23:86:2e:0e:63:74:db:6d:57:1b:93:68:68:aa:5f:63:
c8:77:99:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:20:20 2025 by rpki-client