Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
File: pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft (raw, json)
Hash identifier: LZMOth9BIgkp1/6ywx2fZhzbM+I89KqQ/FRXejKEMx8=
Subject key identifier: 0C:5D:9F:0A:13:D7:D3:6D:D1:76:4F:B2:68:5C:13:27:AD:78:A7:5B
Authority key identifier: A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
Certificate issuer: /CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Certificate serial: 0198D515849E14E767561D847F1A72779F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
Manifest number: 1656
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: Clf1O67BMO2Rhs6Zi3d5eqYtS78.roa (hash: gEsGT+BkcxrPL5LEXQ9nd6Eso8OhYDY6ncvwiqyMT9o=)
2: pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl (hash: 2mJP4KXSNflDkxnzY5XMU3FH7uTrSTnsr7ss4dsDm04=)
3: y4LRZvQWH9l19-R4kCc6PgUW78w.roa (hash: 2GDs3fd+T8RC8u9/aToLiIMcmZgcmmJt7vgNbq6rFsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:84:9e:14:e7:67:56:1d:84:7f:1a:72:77:9f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71a2a2db4d7418e9bf4f93c8c046a0161663c62
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=0c5d9f0a13d7d36dd1764fb2685c1327ad78a75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:21:44:9c:c1:80:13:25:ec:b4:0a:62:e1:
03:a1:6c:1a:4e:12:cf:2a:6a:0b:a6:50:1a:32:22:
6f:0f:c0:28:00:fa:26:9d:94:9f:2d:01:ac:fe:93:
85:6b:d5:f8:69:b9:fd:14:bb:99:72:d4:d2:6a:3a:
d7:22:ea:5b:4f:93:d0:e0:90:31:c4:38:a7:11:a8:
18:f2:0a:95:da:c5:59:2b:96:d9:d8:51:1e:0b:0a:
da:d5:2f:b3:27:b4:4f:9a:6d:73:a2:aa:f9:d9:0a:
23:16:8e:0b:75:9d:2e:31:28:90:5e:f5:03:56:50:
a1:dd:9d:13:db:43:84:9c:42:34:73:28:f3:0a:6f:
a7:b9:a5:64:c4:df:db:4f:a2:9c:38:f8:46:93:98:
d3:ec:d1:35:da:01:74:85:47:aa:a9:a4:88:3b:58:
32:3f:a5:ea:32:6f:04:fb:59:9a:e5:86:2c:f4:77:
f6:ce:c2:85:f3:21:a6:87:9c:f2:d1:1e:30:a6:e8:
1a:18:01:78:5b:d9:4f:fc:7f:c7:98:c1:e9:7f:af:
27:92:f2:a0:40:a7:4e:26:06:11:e5:6b:4e:ac:62:
b3:c2:3e:4e:a6:71:80:9b:93:50:f7:22:23:a5:fb:
84:9d:87:f8:a4:9b:52:b7:9a:ee:ad:ca:ac:c3:af:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5D:9F:0A:13:D7:D3:6D:D1:76:4F:B2:68:5C:13:27:AD:78:A7:5B
X509v3 Authority Key Identifier:
keyid:A7:1A:2A:2D:B4:D7:41:8E:9B:F4:F9:3C:8C:04:6A:01:61:66:3C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxoqLbTXQY6b9Pk8jARqAWFmPGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/b7abdf-3be1-4642-9f3e-f1f0b9598f32/1/pxoqLbTXQY6b9Pk8jARqAWFmPGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7d:54:3b:0b:72:f6:0f:94:cd:73:7a:87:5c:f8:83:85:f1:
1b:99:4f:34:c2:f2:be:f0:58:8b:07:8e:0b:8b:1c:bd:e8:83:
c7:91:ab:78:1e:70:bc:50:85:3c:11:d7:a2:4e:8a:24:2d:92:
10:26:c5:48:e0:ee:2b:2a:c8:1f:25:c1:d2:d6:9c:74:34:7c:
f3:4e:f7:f5:87:1c:c1:0c:8f:cd:80:24:3f:27:97:a2:a9:dc:
ce:d0:52:b9:5f:df:46:d9:40:72:1c:28:79:a3:60:71:c3:b1:
75:5e:43:57:49:f4:f2:0e:33:5d:40:bf:de:a6:1b:f1:f5:ca:
bb:d3:cc:21:0e:5d:3b:ea:b9:af:45:3f:b9:3d:76:98:51:dc:
f2:fd:f9:b2:66:83:3a:c1:40:ca:b0:f1:6e:5b:fd:25:64:e3:
75:23:86:8c:9b:e6:49:99:f2:1a:04:8c:43:d1:3d:70:b3:b1:
45:78:59:f1:c5:bc:c9:7b:f1:d8:eb:b6:2f:73:0e:93:e2:d3:
29:62:36:8c:20:54:67:ce:0e:36:3c:8a:7a:c2:a0:dd:76:48:
60:ce:cb:14:06:13:40:a6:e5:d3:93:55:2a:e8:d2:5a:30:ca:
10:81:99:15:57:16:46:f1:87:8c:d2:09:32:f6:42:d0:3a:bd:
82:36:6a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFYSeFOdnVh2Efxpyd590MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MWEyYTJkYjRkNzQxOGU5YmY0ZjkzYzhjMDQ2YTAxNjE2
NjNjNjIwHhcNMjUwODIzMDQwMDEzWhcNMjUwODI0MDQwMDEzWjAzMTEwLwYDVQQD
EygwYzVkOWYwYTEzZDdkMzZkZDE3NjRmYjI2ODVjMTMyN2FkNzhhNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa4hRJzBgBMl7LQKYuEDoWwaThLP
KmoLplAaMiJvD8AoAPomnZSfLQGs/pOFa9X4abn9FLuZctTSajrXIupbT5PQ4JAx
xDinEagY8gqV2sVZK5bZ2FEeCwra1S+zJ7RPmm1zoqr52QojFo4LdZ0uMSiQXvUD
VlCh3Z0T20OEnEI0cyjzCm+nuaVkxN/bT6KcOPhGk5jT7NE12gF0hUeqqaSIO1gy
P6XqMm8E+1ma5YYs9Hf2zsKF8yGmh5zy0R4wpugaGAF4W9lP/H/HmMHpf68nkvKg
QKdOJgYR5WtOrGKzwj5OpnGAm5NQ9yIjpfuEnYf4pJtSt5rurcqsw6/b7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxdnwoT19Nt0XZPsmhcEyeteKdbMB8GA1UdIwQY
MBaAFKcaKi2010GOm/T5PIwEagFhZjxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2Ut
ZjFmMGI5NTk4ZjMyLzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9iN2FiZGYtM2JlMS00NjQyLTlmM2UtZjFmMGI5NTk4ZjMy
LzEvcHhvcUxiVFhRWTZiOVBrOGpBUnFBV0ZtUEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH1UOwty
9g+UzXN6h1z4g4XxG5lPNMLyvvBYiweOC4scveiDx5GreB5wvFCFPBHXok6KJC2S
ECbFSODuKyrIHyXB0tacdDR880739YccwQyPzYAkPyeXoqncztBSuV/fRtlAchwo
eaNgccOxdV5DV0n08g4zXUC/3qYb8fXKu9PMIQ5dO+q5r0U/uT12mFHc8v35smaD
OsFAyrDxblv9JWTjdSOGjJvmSZnyGgSMQ9E9cLOxRXhZ8cW8yXvx2Ou2L3MOk+LT
KWI2jCBUZ84ONjyKesKg3XZIYM7LFAYTQKbl05NVKujSWjDKEIGZFVcWRvGHjNIJ
MvZC0Dq9gjZqiQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:38 2025 by rpki-client