Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: pE33V/Ck1oNdA9w7VHRORc/35/eOOvh3bmrwlQe6fkc=
Subject key identifier: 5F:1A:2A:66:9B:3F:38:37:0A:76:84:ED:6A:2B:FD:10:0F:03:85:B8
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 0198D5BC6486165400896E3FEC5C68E2615A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:30 +0000
Manifest this update: Sat 23 Aug 2025 07:02:30 +0000
Manifest next update: Sun 24 Aug 2025 07:02:30 +0000
Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: 17utWry4k4X2mNy+Wd2K9WJui/bpsAk1I3Uu1pMrYiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:64:86:16:54:00:89:6e:3f:ec:5c:68:e2:61:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: Aug 23 07:02:30 2025 GMT
Not After : Aug 24 07:02:30 2025 GMT
Subject: CN=5f1a2a669b3f38370a7684ed6a2bfd100f0385b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:51:e7:79:35:17:4c:12:c9:7f:90:b0:10:
ac:9e:73:37:78:58:47:58:35:dd:85:05:e8:80:03:
c4:5e:c8:b3:0f:83:1d:bd:f2:9d:8e:dd:89:67:e7:
e4:04:29:9b:8a:04:1d:6e:0a:ea:8f:0e:7e:b5:18:
09:71:6c:30:14:f3:4a:b9:dc:8d:cf:82:73:4c:11:
1e:7a:70:05:51:dd:e1:5a:90:32:df:5f:8f:a4:47:
23:b7:b6:54:d5:b5:c3:1e:9d:aa:e7:bd:fd:72:14:
cd:75:c9:f1:ca:e5:b9:39:69:99:dc:0a:cb:17:c4:
fd:7e:7f:26:33:1d:85:3e:17:95:cb:9f:d0:03:19:
e0:96:4b:42:82:5b:ae:a5:86:a9:f9:5f:46:f4:99:
8c:75:0d:78:29:0c:e1:4a:8b:28:98:c2:d2:0f:67:
43:01:af:7f:56:14:63:e5:1b:82:a0:39:0d:9d:5e:
72:49:74:ce:13:c9:92:63:f8:6a:cc:d4:7a:99:df:
ad:62:33:51:b0:9c:49:e2:55:ec:26:8b:83:58:58:
a5:c6:1d:d5:6e:66:0e:03:da:34:49:4d:3d:d5:69:
b7:6b:43:f9:83:cb:60:6a:5b:44:29:d8:b0:7e:f3:
1c:d4:d9:e2:7e:09:b1:f7:87:2f:37:03:73:ab:66:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1A:2A:66:9B:3F:38:37:0A:76:84:ED:6A:2B:FD:10:0F:03:85:B8
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:dc:0b:ef:07:83:cb:f3:28:dd:31:ed:78:54:27:75:e3:64:
07:29:09:0c:67:29:c7:75:43:5b:38:64:c4:b2:f2:ea:59:9f:
f6:3f:e2:f5:25:b4:d5:a2:d4:e8:d3:b1:bc:d3:57:f4:0e:1c:
11:e8:65:2e:34:9a:89:b9:c5:9d:b3:6e:68:f7:1a:1a:0d:60:
54:05:cf:a9:46:79:5f:40:d6:04:88:c9:1a:f4:5a:dc:67:9b:
de:f5:9c:a7:e4:d6:0b:9d:43:a3:a6:03:38:b5:04:4c:6b:8a:
07:ef:c6:7c:a1:35:7e:4c:4d:aa:7c:3d:23:27:b6:a9:6c:4f:
f1:69:f2:b7:8b:eb:6e:6b:dd:57:cb:3c:fa:15:9e:92:7f:3a:
72:20:65:51:84:be:8c:f6:8d:6b:34:d2:f8:76:e7:90:c6:c5:
df:79:89:a3:99:bc:fe:b0:45:e0:67:74:4e:f5:ca:3a:63:bf:
95:99:3c:65:c6:bd:8a:58:fe:f3:8b:e6:d4:ae:7f:1d:62:a4:
f7:06:68:b0:fb:ad:c5:f9:eb:ae:9f:4f:82:7d:0f:a6:c0:dd:
c3:1d:d9:da:bc:66:b8:69:cd:0e:89:87:63:90:30:4e:48:42:
91:55:d1:c7:c0:2f:cd:bf:97:18:d9:fe:fe:23:ed:d6:32:98:
ba:4f:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:04 2025 by rpki-client