Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
File: pXtgj8zzIw5EXJg_nja1DhH3LPI.mft (raw, json)
Hash identifier: ROXHR3MpPg1ivHAAUB+dXO8JGWoJh/keTPJB5c+nm5Y=
Subject key identifier: D1:9A:F2:77:8B:EC:98:B2:1C:42:56:8C:9D:B2:8C:7A:10:F1:D5:97
Authority key identifier: A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
Certificate issuer: /CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Certificate serial: 0198D4A81FBE9304328F3CC7F2EF0296412C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
Manifest number: 10D4
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: NhJBxI5W8KC_WePH5ss0tv9aU5U.roa (hash: /CWlrfID9lQOxgVeBTFIGSk2eqixT2ZM3bIGkRsAuOA=)
2: pXtgj8zzIw5EXJg_nja1DhH3LPI.crl (hash: ZSxuk7ZNdM+Pt5MiGXn1ItpUTN8keBrTrNXjtgNn+tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1f:be:93:04:32:8f:3c:c7:f2:ef:02:96:41:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57b608fccf3230e445c983f9e36b50e11f72cf2
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=d19af2778bec98b21c42568c9db28c7a10f1d597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:7d:6a:86:d9:22:c4:72:ba:f6:ab:6d:c0:
20:41:17:e6:b9:c0:3a:d8:60:15:c3:66:23:06:3c:
7c:a0:a0:2f:dd:84:9a:67:bf:b1:bc:95:ac:44:9a:
45:c1:7f:bd:20:1b:70:1c:06:76:83:e0:5d:e7:b0:
b8:1b:67:1c:f7:40:62:1b:57:90:21:44:5a:91:50:
9f:52:2f:c8:50:09:0a:80:5a:01:0d:1a:d8:d7:a9:
ae:ac:43:a5:8a:40:1b:61:7d:bd:d8:43:0a:35:83:
13:c8:1e:de:96:9e:80:a4:c0:49:04:16:f0:26:0d:
4a:a3:3a:ef:58:5c:8b:f9:3b:78:53:0b:6b:71:8e:
91:ca:ec:0b:ed:d2:90:6a:59:fd:1d:a5:3c:6f:b8:
ee:e9:59:b2:09:7a:d0:79:04:85:ed:2b:0c:b1:d4:
70:0d:bc:21:92:24:dd:00:2e:58:7a:23:b4:f3:ae:
3e:16:f3:71:8b:5f:ce:56:be:7d:52:96:2c:34:1d:
ed:b8:f2:af:92:96:06:51:e5:bd:c6:9a:14:23:c8:
bf:20:10:79:f1:fa:f1:88:dd:6e:ff:7e:ca:03:b8:
4a:2b:e8:1e:15:de:75:11:cc:55:85:49:f8:c8:d9:
d8:00:5f:48:3d:a8:97:1a:a5:71:24:41:cf:49:a3:
2b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9A:F2:77:8B:EC:98:B2:1C:42:56:8C:9D:B2:8C:7A:10:F1:D5:97
X509v3 Authority Key Identifier:
keyid:A5:7B:60:8F:CC:F3:23:0E:44:5C:98:3F:9E:36:B5:0E:11:F7:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXtgj8zzIw5EXJg_nja1DhH3LPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/621629-ed3d-49af-bf39-85a37cf1b2ea/1/pXtgj8zzIw5EXJg_nja1DhH3LPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:29:b4:c6:e4:5b:e6:bb:a1:1e:5d:c3:7f:72:78:dc:6e:85:
b5:6d:a7:f5:fb:48:78:f6:44:e9:ff:09:ba:dc:5f:fe:be:e0:
52:b9:1c:f1:92:0f:d2:86:6f:2a:2b:33:e3:16:16:3a:01:a7:
be:7a:fa:dd:c5:4d:f6:c5:90:f9:0a:cf:28:8b:65:60:aa:06:
13:4a:0e:d0:ba:fe:6e:c3:4f:5f:6e:e9:bd:15:86:99:56:16:
b9:e7:ae:16:5e:35:8d:98:18:1f:ba:6c:04:83:bd:ea:5c:1f:
23:1b:f3:51:d2:14:e8:d2:cd:bc:54:f5:d3:3b:20:89:02:a3:
9a:74:44:eb:45:6a:51:ab:d8:ee:8b:49:d1:a8:df:67:31:ca:
c8:f5:1d:3f:42:7a:cf:48:cf:ce:72:43:e4:22:ac:16:67:0c:
9b:14:07:e4:22:ba:b8:10:bc:30:ed:4e:a4:07:e3:ce:4c:75:
cc:3c:3d:0c:8e:b4:c7:29:a0:b6:3d:83:77:12:0a:43:71:98:
48:26:2e:b6:d3:bc:ba:e1:d7:9e:ff:80:f7:aa:5a:4f:9c:c9:
70:d2:0c:94:ad:c4:ad:32:06:11:fd:c9:3d:25:c9:da:de:83:
06:2b:73:6f:53:97:48:96:b3:58:d9:08:a5:0e:be:02:ac:e5:
4f:b7:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:02 2025 by rpki-client