Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
File: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft (raw, json)
Hash identifier: flUzPUQ+PHnBRUrx/YGX3idWwuTNz/JY+n30JuwiNA0=
Subject key identifier: 84:20:CD:05:27:4A:29:EA:5F:34:B1:1F:5D:99:8C:30:52:DA:5D:EF
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 0198D5158491D5E704A0DD398F8C33765C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:13 +0000
Manifest this update: Sat 23 Aug 2025 04:00:13 +0000
Manifest next update: Sun 24 Aug 2025 04:00:13 +0000
Files and hashes: 1: 5e1NxuIhpqcGoJaPew5Kl5__8Lc.roa (hash: SNl+Y4M8n9I3K17PdDkj5othPOFaJvzjGzvPP4WmJSg=)
2: 7ybz4qgk4RPqp8xdPC6X_E4gtbM.roa (hash: ogGugsf7sS6PtDmol4WlYpBYEAXHnn37bVsSaSAg3P8=)
3: pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl (hash: OT7Zo1Dtf2M2JiWzD3HPOLEyrjKzJkMKuw+zJ95a8JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:84:91:d5:e7:04:a0:dd:39:8f:8c:33:76:5c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Aug 23 04:00:13 2025 GMT
Not After : Aug 24 04:00:13 2025 GMT
Subject: CN=8420cd05274a29ea5f34b11f5d998c3052da5def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:67:a0:a3:03:33:fd:97:e3:94:3f:c0:82:
39:ad:ad:6b:03:5c:8f:3f:55:a7:21:db:93:39:27:
90:fb:11:02:bd:b8:d2:f5:8f:1a:f9:51:1e:4c:40:
0e:20:2b:dc:fb:f3:2b:21:23:03:46:4e:00:17:bc:
55:a0:f2:5e:68:48:06:64:29:39:19:ff:37:8f:42:
16:b8:f5:be:0a:f6:6d:1c:9c:08:76:89:41:ee:00:
7b:8d:73:bc:cc:0d:58:d5:6c:67:88:b9:e9:af:57:
50:cd:a9:25:c3:0f:15:52:bb:0e:79:ca:16:fb:20:
c9:45:63:ae:27:42:a7:90:88:bc:eb:54:b3:ef:bc:
b5:18:da:04:8a:a0:95:e0:aa:dc:62:8a:89:81:eb:
94:0d:da:e0:0b:af:df:7a:24:e2:e2:18:47:7e:36:
5b:1e:2d:f1:3f:8d:48:9e:21:69:09:87:c9:5f:1c:
d0:04:4d:b3:6b:a8:f2:67:e8:9a:64:f7:16:54:68:
6f:3a:07:00:99:e9:6d:5a:37:4e:7b:66:61:58:c4:
dd:64:06:7e:35:2e:cd:10:ec:56:77:ea:9a:2f:0f:
be:d2:52:14:d6:1b:ce:e4:df:c9:a2:d4:be:d6:38:
a4:a6:c0:c3:e9:99:31:e2:4f:de:78:97:07:9c:b6:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:20:CD:05:27:4A:29:EA:5F:34:B1:1F:5D:99:8C:30:52:DA:5D:EF
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f6:2b:4c:22:ec:ab:a9:8e:6a:b8:0e:98:c9:32:70:ea:8d:
d6:d6:a1:e8:c7:87:c2:4d:ed:67:d5:fa:d4:63:fb:b4:f9:ac:
94:cb:98:14:9a:78:35:69:1d:f2:fe:14:c6:e1:8b:58:0c:29:
18:72:dd:1d:a8:43:2d:89:d9:2d:6f:02:4d:1b:14:b4:9a:1b:
3a:19:a6:e0:4b:d7:75:4c:cc:92:8c:2f:97:c4:75:3e:9c:81:
e2:6e:bf:01:d5:33:e3:82:4d:19:87:6d:7c:26:7e:f8:e9:c1:
79:4d:3e:7a:75:06:eb:c4:0c:ff:3b:ad:fe:f8:80:ef:38:72:
a6:01:ee:63:a8:1f:12:ff:fb:a5:c1:c4:60:11:71:cb:37:df:
ac:9b:27:ef:f4:e3:bd:c7:c3:5f:c4:58:7c:b8:ee:e1:12:25:
fe:fa:30:fd:c9:77:96:dc:d6:27:5a:7b:eb:83:30:19:f4:0a:
8e:65:51:6a:af:96:4a:00:fd:96:85:fb:fa:77:1e:15:40:e1:
70:32:81:bf:04:f2:bf:7b:b2:0b:8a:c3:4e:dc:ea:07:17:ec:
a8:0d:1b:bc:a5:d0:d6:22:3f:86:1d:ea:8b:34:a8:c8:94:db:
48:26:7b:ae:67:31:98:e8:58:57:11:92:67:34:4a:fc:d3:e2:
15:67:bf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:29 2025 by rpki-client