Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: ImbXaw4FzsN5HAtT7resUoqzlU3veIRLrM3u56+odRc=
Subject key identifier: 0D:42:CC:56:27:24:F4:C6:56:C6:59:27:8D:23:41:DC:B9:A1:15:AA
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 0197C3132D5BB4EAA4F83F70E1E459B98556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 23:01:43 +0000
Manifest this update: Mon 30 Jun 2025 23:01:43 +0000
Manifest next update: Tue 01 Jul 2025 23:01:43 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: Vs/iQxtMQy3m71NXLIMHa1k0YjxHTFJ+IqvwmRkzDLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:13:2d:5b:b4:ea:a4:f8:3f:70:e1:e4:59:b9:85:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Jun 30 23:01:43 2025 GMT
Not After : Jul 1 23:01:43 2025 GMT
Subject: CN=0d42cc562724f4c656c659278d2341dcb9a115aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:26:bc:22:8f:df:4b:b0:47:a0:13:fb:60:
01:51:07:99:f9:7f:d1:c6:ca:c1:c5:1a:57:b1:ba:
c3:a5:17:2b:1c:50:d9:5c:d7:a2:c5:58:f3:fc:0f:
77:7c:95:bb:a7:b0:85:c7:ae:2c:78:fe:3e:ce:13:
47:e7:e3:00:6b:0b:f6:13:bb:71:88:87:f9:35:37:
1f:db:2a:68:57:10:d4:56:42:dd:47:3c:c4:33:29:
53:51:fd:9c:3f:00:28:ec:75:ba:bf:3b:95:8f:c7:
8a:9d:32:bc:73:cc:4c:bc:db:2b:29:5d:90:0e:cc:
8c:74:21:e6:3a:5f:e2:e4:31:07:d7:f0:90:e6:e4:
75:29:49:99:b6:5b:35:32:74:08:50:cd:91:55:b9:
52:20:2e:65:77:2c:6c:71:6d:fd:5c:8f:81:e2:2a:
b4:58:c6:af:a0:8d:67:a0:7d:09:fd:75:da:02:a4:
64:d0:25:a4:ab:48:79:fb:f4:8f:7d:a4:9f:a5:eb:
29:b6:95:2c:13:41:df:eb:de:3c:6c:75:b4:fe:da:
7d:79:95:7f:f3:b5:e3:25:a6:d9:dc:a1:f4:f0:04:
48:4b:3a:4f:f7:b8:f2:e5:87:d7:f0:62:bb:5f:98:
ec:ca:59:38:8f:d6:66:f4:8c:33:d4:e4:32:ac:08:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:CC:56:27:24:F4:C6:56:C6:59:27:8D:23:41:DC:B9:A1:15:AA
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:88:be:76:29:59:09:63:2a:2b:2f:2f:2d:63:50:52:f1:f7:
01:8a:74:ef:b6:ff:e0:6f:06:d9:48:d0:af:25:54:40:c6:e8:
d6:fc:a3:2d:29:fd:c0:f0:77:7b:cb:76:47:5d:9f:e7:23:0d:
1a:33:31:7c:37:0e:f8:b2:31:a3:7f:86:3a:11:81:a8:de:31:
6e:6d:2b:5d:13:e9:22:f3:61:ee:59:14:92:c9:36:40:99:b8:
12:24:6b:e9:1d:c4:87:61:bd:68:4c:25:0e:17:72:dc:06:74:
ae:cd:30:12:b9:34:a3:a6:f4:5f:16:ab:d4:a2:09:9d:4f:e4:
64:57:16:be:37:81:dd:44:1e:ec:3b:66:27:a6:09:bb:43:ad:
eb:81:fb:d2:58:d5:29:be:72:66:18:e7:72:48:65:cf:f9:5a:
2a:8d:b0:38:be:3b:a2:08:35:6d:e6:2b:d9:8b:56:02:92:a6:
9f:4a:64:10:f1:08:7e:c2:07:21:ce:2d:7d:70:f1:50:cb:98:
21:b5:70:d6:97:61:8e:06:05:54:d7:91:33:36:ce:c4:8e:a8:
f7:88:ac:36:57:8d:6d:21:ac:6d:cf:1d:53:9c:ee:e2:9e:a2:
3d:b1:9e:54:86:c8:01:8a:fe:38:68:17:73:a6:6f:1b:95:f9:
4b:0b:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:48:53 2025 by rpki-client