Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File: pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier: SX2Tmd7nKHObrlTOvK6RHNp/SdHq7HU3ZwMFcPYMQ7o=
Subject key identifier: 5B:50:0F:33:A4:B9:34:67:16:1F:B5:A6:7F:C6:32:A7:DE:2F:20:D4
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer: /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial: 0198D5F1428299C304ED4BC64885091A3017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number: 0D1A
Signing time: Sat 23 Aug 2025 08:00:14 +0000
Manifest this update: Sat 23 Aug 2025 08:00:14 +0000
Manifest next update: Sun 24 Aug 2025 08:00:14 +0000
Files and hashes: 1: c2KmzgC2E8wnyMl3ET7bbXtsl28.roa (hash: iCu/CgeKq6j6xvBOhyPWL0bUM1p4HmortGMzXWFLmpc=)
2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: 9VFR/0QpcfMOsk+rb6rfp2KPb7Cv67CnV+20DTogFqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:42:82:99:c3:04:ed:4b:c6:48:85:09:1a:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Validity
Not Before: Aug 23 08:00:14 2025 GMT
Not After : Aug 24 08:00:14 2025 GMT
Subject: CN=5b500f33a4b93467161fb5a67fc632a7de2f20d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:be:f7:a9:c0:e1:f3:af:5d:32:db:8c:ba:
70:b0:a9:fd:17:fb:a7:2d:e9:36:ae:01:a7:8d:b8:
73:d0:e3:e0:48:73:b2:09:9d:8d:15:00:a5:ba:20:
12:3f:c1:f5:c9:2a:cf:00:11:2c:7a:63:a9:3a:86:
25:b7:14:43:5e:ed:03:9f:d6:bf:7d:75:84:f7:03:
18:17:30:c7:e3:56:d9:e0:4e:81:8c:88:da:3d:88:
d6:41:9d:75:47:7e:3b:c4:23:a7:de:f1:ba:3d:42:
d4:0b:ae:80:26:83:b2:60:89:62:a3:fc:03:9b:ec:
3d:ee:2a:19:e3:c1:49:c7:37:05:f5:c6:c0:dd:6b:
b8:e2:28:cc:9b:b6:39:0c:0f:c7:ad:dd:72:ce:76:
fa:5d:ec:db:dd:30:bd:84:73:cc:c6:bf:e9:27:50:
2a:0b:7c:1d:25:0b:e9:b6:b2:0a:71:75:39:cb:c6:
2a:23:7a:5a:03:c8:6d:55:40:19:3e:d7:09:08:05:
8a:99:51:c9:c2:d0:cf:fb:ed:7c:58:b1:14:ce:cb:
7d:29:01:24:74:93:38:d5:46:8f:26:40:02:1b:cf:
3a:5e:e3:fa:c3:7a:07:01:20:0c:1d:96:15:45:3c:
84:20:bd:40:a3:63:58:73:35:cb:dd:49:4d:35:c5:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:50:0F:33:A4:B9:34:67:16:1F:B5:A6:7F:C6:32:A7:DE:2F:20:D4
X509v3 Authority Key Identifier:
keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:80:3e:11:ae:0b:b9:42:63:c1:f3:64:24:a0:af:a5:45:
52:f1:39:94:33:fd:56:76:13:c1:78:7f:e6:27:fc:d1:cf:6a:
78:84:ee:de:0b:d6:83:2b:b0:89:ed:3a:15:74:39:d4:a4:c8:
ad:82:cf:35:59:e5:53:63:33:9a:4f:a0:91:8c:7e:73:85:25:
d6:de:43:b3:94:3c:4b:f3:15:5c:7e:20:ce:58:59:42:69:67:
b8:a1:0f:44:65:dc:2d:8d:86:ee:df:e9:bd:b7:66:12:a1:0e:
28:5d:1c:e8:49:ae:0a:c5:95:fc:c6:ca:c6:85:01:68:fc:56:
da:24:65:4c:87:a2:63:58:23:8f:18:e1:49:c9:a9:ee:5c:f6:
dc:f7:82:55:f4:96:ed:6f:b5:08:f9:cd:8b:71:69:dc:61:f4:
60:72:19:ff:17:da:97:18:fd:a9:86:30:cf:ce:95:26:a2:d3:
70:d7:cc:a3:51:6c:ac:aa:cd:4b:0c:2b:3f:d5:58:41:89:5c:
d1:6a:ed:49:3d:99:6e:61:b6:04:5c:97:05:23:df:71:a1:f6:
4c:2f:bc:f7:25:cc:06:81:bd:4a:72:3b:22:ea:92:c7:74:6c:
d4:ef:cd:13:4d:89:3d:35:31:a0:7a:fb:41:ca:bb:eb:3f:78:
13:8d:dc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:14 2025 by rpki-client