Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: 0/nSYEXmCOzXduk9mpoFm8k0t3qW5vYfAs5qfsVh1SM=
Subject key identifier: 38:0B:EB:DF:EB:0F:F0:85:A4:B7:33:27:8E:FC:CC:64:C2:B1:73:76
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 0198D6603AFA3DF029A14A38B96067D5F615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:27 +0000
Manifest this update: Sat 23 Aug 2025 10:01:27 +0000
Manifest next update: Sun 24 Aug 2025 10:01:27 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: EwpRJxgUeitSFJREMbqVXPeBRoFrLpZg0vMbK4FORU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3a:fa:3d:f0:29:a1:4a:38:b9:60:67:d5:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Aug 23 10:01:27 2025 GMT
Not After : Aug 24 10:01:27 2025 GMT
Subject: CN=380bebdfeb0ff085a4b733278efccc64c2b17376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:ec:b1:92:c8:1b:b5:74:98:7d:92:b8:8b:
e8:e8:11:bf:ce:35:60:61:2a:fb:75:f8:38:60:39:
3c:1d:fc:22:08:03:ff:6c:ce:49:2c:dd:07:0d:bd:
e1:a7:a9:4e:d9:fe:cd:c5:d2:b3:19:bb:a5:32:77:
94:62:98:d5:7a:97:80:0b:c6:cb:5b:06:ae:4a:41:
ac:b7:c7:0d:c2:5f:40:cd:2e:d7:58:b6:91:1b:44:
3a:29:9b:6b:fd:49:27:8d:58:7c:93:1b:40:de:bf:
12:e4:49:c0:7d:e9:6c:4b:37:b9:f8:12:5e:c3:de:
57:58:4d:0a:5e:6e:92:9d:8a:33:21:a0:0f:de:be:
8d:cd:ab:86:45:d8:8d:45:ad:ca:d8:c5:b9:0f:68:
5b:79:93:50:d4:f3:7b:61:50:e6:7e:5f:71:ef:e9:
82:f8:83:45:8c:30:ec:21:2f:20:5b:6f:6d:09:ea:
91:30:1b:30:a9:ce:a7:a6:a4:d4:17:ea:a3:9d:f7:
f6:1d:d2:60:2c:ac:53:1b:c8:69:e1:fa:bf:e4:82:
5f:22:e2:46:58:23:58:6a:71:7c:35:18:a5:6b:33:
4e:e9:98:1f:49:bf:12:e9:ae:3a:8e:c4:b8:f5:f6:
05:46:e2:3a:dd:33:f4:cd:0c:20:f3:d0:76:1e:c5:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:0B:EB:DF:EB:0F:F0:85:A4:B7:33:27:8E:FC:CC:64:C2:B1:73:76
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:33:45:83:1f:33:24:4a:02:35:73:79:78:20:99:94:3e:26:
1e:40:d9:2e:5f:06:a6:6c:d6:07:14:c7:4d:e7:21:c9:d9:f0:
54:42:40:8c:22:c0:15:f5:dd:47:86:61:72:6b:fb:e3:36:75:
a6:15:3b:58:34:da:46:fa:17:3e:59:3c:31:54:ff:db:bd:69:
d8:1a:38:f8:9b:09:92:69:be:37:af:6f:b2:34:11:d1:49:d4:
4f:b6:c0:6b:94:20:c1:2c:2a:e0:ff:81:6a:3f:d8:ae:71:1f:
fa:5f:5d:b8:a3:21:01:81:55:47:d3:c8:4f:58:20:64:c8:41:
20:2c:69:70:01:d5:e4:57:8c:e7:4a:fb:f4:5d:3d:0c:4c:6f:
d4:bc:51:58:63:a9:7d:61:1d:a6:7e:cb:9d:d8:6a:63:cc:f8:
f2:a0:1c:21:1a:70:0f:d5:9a:67:af:48:82:45:43:52:29:97:
2f:28:8a:0a:54:38:28:4b:45:39:35:be:ce:ed:78:ec:14:16:
d7:fd:a6:a0:2a:e8:99:2d:8c:87:f1:95:95:b4:64:19:6d:be:
c2:11:a8:3a:cc:dd:30:9a:80:ae:b4:58:3f:20:fd:dc:00:25:
39:51:33:18:92:b5:c8:c1:5a:ea:c7:a1:c3:ae:bb:24:05:56:
ec:18:aa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:06:44 2025 by rpki-client