Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
File: PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json)
Hash identifier: 0ArnAwhwOi5H9xyvISsnocP+ny7mF2ylZ2ICA+L2CwE=
Subject key identifier: EC:2A:E8:F2:98:D7:8E:BD:49:D3:41:66:3A:51:B7:09:C1:78:66:A2
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Certificate issuer: /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial: 0197B5C48605BAE4D4C80EA03EE8DF3C6200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
Manifest number: 0E3B
Signing time: Sat 28 Jun 2025 09:00:44 +0000
Manifest this update: Sat 28 Jun 2025 09:00:44 +0000
Manifest next update: Sun 29 Jun 2025 09:00:44 +0000
Files and hashes: 1: J60Pw4hyKKjQhqi1eSTzFtauoi0.roa (hash: Pts66hPVy/S0JFZfVc88DLunALgdL+k1upaL/I3M97g=)
2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: oQFe8xxLeNiFOdvk+5HXMjjHvsplHfa1b4uWHDWlOAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:86:05:ba:e4:d4:c8:0e:a0:3e:e8:df:3c:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Validity
Not Before: Jun 28 09:00:44 2025 GMT
Not After : Jun 29 09:00:44 2025 GMT
Subject: CN=ec2ae8f298d78ebd49d341663a51b709c17866a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:fe:88:6e:83:99:ee:e7:94:37:79:ea:88:
f6:ae:78:a3:5e:f5:f5:bb:1d:93:c0:3f:5a:37:76:
01:9c:7a:01:07:cd:d7:1b:80:3b:eb:ed:cf:d5:c8:
9c:22:5c:26:2b:99:bd:14:10:90:41:c4:3e:72:59:
98:02:cd:f6:e6:d3:57:74:e0:32:92:3f:4d:76:58:
da:ed:13:f9:01:5c:0e:64:37:f6:29:21:86:92:5a:
5f:ef:a7:6a:a0:41:b2:6c:de:88:94:0f:8c:6b:32:
7d:0a:db:64:2f:0b:a5:45:6e:5d:cf:d5:90:1d:39:
1e:b0:88:83:b2:32:2f:21:ab:43:e4:c9:3f:1c:9b:
cf:bd:47:05:e2:ea:1c:dd:ae:91:54:aa:ce:74:1e:
45:61:f8:eb:95:11:79:ea:fe:bc:a2:f6:b4:64:69:
5a:39:df:a2:18:2f:c2:18:a6:ce:06:51:8e:a9:7e:
86:69:09:58:93:b1:a8:68:23:b5:c1:3c:98:16:95:
d0:6d:c2:ba:be:9e:26:92:f9:20:bc:b4:bb:75:05:
8b:0b:5b:83:74:50:a4:1e:8a:ad:93:e6:18:c5:8c:
86:fa:81:8e:79:10:d8:72:21:75:ec:37:40:c6:6d:
7c:e2:45:22:e2:48:43:af:28:00:a6:e0:ed:02:42:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2A:E8:F2:98:D7:8E:BD:49:D3:41:66:3A:51:B7:09:C1:78:66:A2
X509v3 Authority Key Identifier:
keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a6:05:75:e9:12:f3:c5:4d:7b:54:44:33:99:7c:e5:9a:b4:
e9:80:9c:3d:07:3a:d7:69:f5:d8:f6:76:54:de:c8:b7:91:84:
6b:38:d5:dd:e3:bb:80:24:54:36:76:0d:09:83:46:62:1c:85:
bb:ed:9c:d5:d5:a4:05:b8:56:01:9f:f4:f2:a3:1d:86:96:ee:
45:a5:ee:bb:d1:96:a0:f6:62:f8:a4:c6:30:4e:ec:d1:92:ab:
af:58:b6:ee:dc:9a:da:70:be:38:f3:04:33:77:4b:71:d8:c6:
b2:14:00:7a:be:9c:38:d4:68:be:d5:21:ca:24:e8:1c:03:48:
99:a9:8f:fc:66:a9:4a:e6:7c:ad:d4:13:96:8a:3b:ec:b1:4a:
5e:90:c9:42:09:b3:70:d2:c9:89:84:96:15:da:e2:55:ec:82:
8b:a2:2b:78:2e:f0:49:d6:0f:8f:e9:13:38:5b:cd:9f:30:ec:
3d:18:03:6f:95:29:66:8c:39:08:90:e0:17:66:82:0e:18:44:
c1:ff:0b:bc:f5:ba:a5:d1:e0:ef:cf:83:43:ae:50:c2:f6:ea:
2f:5d:03:ec:f3:ff:d6:fa:ea:61:8e:84:b0:c9:93:27:0b:96:
a4:26:be:80:0d:3d:03:4e:a4:5d:88:a3:9a:03:5b:70:4a:f8:
9a:bf:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:01 2025 by rpki-client