Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
File: pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft (raw, json)
Hash identifier: b6jPUjCQe4/KzjbfkoFmPAd8fETp3sMNR9EjtiawkM4=
Subject key identifier: 10:8C:7E:7D:E0:15:03:35:D0:EA:CB:24:C8:DC:74:62:9C:6C:88:96
Authority key identifier: A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
Certificate issuer: /CN=a57089c45c55088fe90eb61002f07f0f95862672
Certificate serial: 0197B6A0437757B1EA1D5A4B047E1D2BDB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:00:45 +0000
Manifest this update: Sat 28 Jun 2025 13:00:45 +0000
Manifest next update: Sun 29 Jun 2025 13:00:45 +0000
Files and hashes: 1: GKayJjEpupDXezS7bWkDTRh1Jmw.roa (hash: eS8ptq1DKXKa+SvWnQjPvtWlOO+ME6pmCZKUb+C3VCo=)
2: pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl (hash: mgxvKd3ogANozQWjTqszMPNfKAiA6RY0e8f/2O2+tVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:43:77:57:b1:ea:1d:5a:4b:04:7e:1d:2b:db:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57089c45c55088fe90eb61002f07f0f95862672
Validity
Not Before: Jun 28 13:00:45 2025 GMT
Not After : Jun 29 13:00:45 2025 GMT
Subject: CN=108c7e7de0150335d0eacb24c8dc74629c6c8896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bf:97:4b:75:2b:6a:34:cf:38:81:62:b7:b7:
94:3f:16:0a:c5:62:7b:5a:bc:7c:09:d1:68:bb:16:
9a:d1:b6:30:41:33:4a:de:fb:21:b1:82:66:76:03:
23:9f:2f:6a:d6:13:b3:9f:28:8a:6c:b5:c0:29:9b:
2a:cb:88:79:09:c9:3b:e8:8f:b2:db:c8:48:c8:73:
4b:08:b1:06:26:62:8c:9f:63:d5:a9:c2:ae:16:06:
12:3a:26:57:36:a3:82:e9:eb:31:90:da:2e:30:b6:
14:34:d7:60:8b:64:69:53:92:d2:9b:d1:bc:c2:d0:
85:bd:c6:f2:cd:76:d5:ff:10:cb:f7:94:4c:b7:ca:
29:48:fb:92:24:d8:88:76:c2:28:ce:33:a6:d8:ed:
ed:5f:57:e6:6c:45:85:8e:e5:2e:d4:64:da:f0:2e:
4d:bb:0f:ba:03:70:6a:7d:b2:0d:a7:c8:ed:39:66:
fb:fc:10:da:33:4a:44:f7:2b:ce:91:7c:b3:48:af:
c6:e0:b3:9c:d5:bc:fb:ee:15:4c:db:e9:c1:86:9a:
e9:af:ae:62:87:48:8b:db:8c:f9:e6:91:83:e0:47:
b3:92:fb:07:5e:d1:ef:33:f5:23:d2:eb:1f:3b:fc:
02:24:07:07:df:19:89:15:9d:76:bc:65:eb:f9:12:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:7E:7D:E0:15:03:35:D0:EA:CB:24:C8:DC:74:62:9C:6C:88:96
X509v3 Authority Key Identifier:
keyid:A5:70:89:C4:5C:55:08:8F:E9:0E:B6:10:02:F0:7F:0F:95:86:26:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXCJxFxVCI_pDrYQAvB_D5WGJnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c3f4a2-8b8e-49a3-aa9f-d92d64b9f801/1/pXCJxFxVCI_pDrYQAvB_D5WGJnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4f:8f:01:20:e3:09:87:1d:f6:b0:74:a7:47:28:f9:e5:98:
cb:35:66:59:40:0c:64:a0:d8:26:4d:1b:e3:2d:08:b4:cf:43:
ac:c3:53:a6:7f:76:d8:4e:b1:cc:05:f8:4e:be:7f:88:0f:8a:
b8:4d:84:a2:5f:b8:c5:28:bf:13:0b:86:cb:23:58:ce:a6:63:
29:31:bb:d4:15:c0:a7:0a:af:f6:ec:9b:c5:f8:33:b9:9a:3b:
df:de:69:51:c0:0f:2e:75:80:d2:e7:36:90:b3:65:7f:ec:fd:
50:1b:cc:98:84:d9:cc:93:e0:70:9f:22:c9:94:5b:38:ed:00:
ac:2f:ea:3e:96:88:d1:b8:97:69:08:dc:de:83:26:a4:74:a5:
7b:3f:41:5a:94:32:3c:73:24:06:0f:40:ee:70:39:cb:70:74:
54:3f:5d:e9:f3:ef:7d:cf:2f:75:eb:5e:c9:59:fa:ce:6f:41:
00:d4:52:29:2b:29:63:8a:2e:7b:3d:94:5c:3c:15:6c:1b:62:
0a:f5:e5:63:ad:5c:b0:40:aa:c4:ea:e0:f5:9c:91:e8:01:41:
75:ec:8c:3f:3a:6e:82:79:f3:13:0b:5e:41:ac:58:f3:e7:08:
69:cf:1e:37:60:0d:27:4c:e8:3b:9f:df:7b:f2:de:47:0e:df:
46:79:f4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:03 2025 by rpki-client