Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: udGIcWeK9U7jE3DZAQzLM9cMLTrDBVeb3n1PxjHyn6k=
Subject key identifier: C7:DA:1F:68:EC:A7:C1:15:28:4D:2F:66:3D:20:F0:63:E5:B7:AB:6A
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 0198D47446C30DA3DDED1A8F68EF28367D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 15B7
Signing time: Sat 23 Aug 2025 01:04:06 +0000
Manifest this update: Sat 23 Aug 2025 01:04:06 +0000
Manifest next update: Sun 24 Aug 2025 01:04:06 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: S1L6AwkcbLkIx7V8Ux4od/O9N2aJqYv8wZ05L+vEe5w=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:46:c3:0d:a3:dd:ed:1a:8f:68:ef:28:36:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Aug 23 01:04:06 2025 GMT
Not After : Aug 24 01:04:06 2025 GMT
Subject: CN=c7da1f68eca7c115284d2f663d20f063e5b7ab6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:20:9b:d7:ee:1d:c9:0c:a7:e7:08:bb:d8:
f0:3d:dc:cc:7c:29:24:32:cd:8b:67:cd:10:08:d0:
fc:a4:c2:e9:e1:88:01:a5:09:e3:69:9f:97:f1:8d:
19:f4:39:22:85:bb:74:35:5b:23:b4:59:20:1a:e2:
1e:cf:1f:6f:d6:de:a2:9d:3b:33:1d:0a:09:53:b1:
6f:ad:46:5e:ca:11:e3:26:ee:76:b4:50:fa:67:39:
66:a4:af:8d:15:bc:1f:08:be:eb:73:86:93:62:34:
a5:b9:fa:a6:85:ea:eb:94:58:7a:de:ca:41:03:55:
8f:0f:32:57:e0:15:3c:c1:e9:52:5f:f8:a3:64:63:
30:cc:47:72:9e:07:56:3e:aa:cd:44:ca:10:d9:78:
27:cc:e0:4f:53:db:e7:47:91:43:5f:0c:af:66:d0:
30:6f:06:7b:0c:f7:b1:44:75:ec:30:a5:a9:e4:8f:
da:c5:07:6e:6e:82:91:2e:2a:9a:fa:92:04:9b:c0:
d9:b4:b1:84:d3:03:7d:4b:42:d0:30:ca:2c:a5:c8:
72:cb:c8:9a:0e:ca:c8:53:c3:5c:f0:6c:d3:06:04:
07:61:fe:56:1b:a0:88:51:ea:fe:92:3e:5a:33:6c:
0f:6c:ef:78:ae:0b:56:fe:d9:a9:81:4f:c4:5d:a7:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DA:1F:68:EC:A7:C1:15:28:4D:2F:66:3D:20:F0:63:E5:B7:AB:6A
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4c:65:20:df:04:9c:70:b5:3f:ce:53:74:91:c5:be:c1:c4:
7e:c9:64:75:c4:ab:13:55:b2:5d:5f:a4:57:42:e8:f5:7a:6d:
e6:b3:ca:0b:30:47:0e:dd:23:6f:84:3e:69:bb:7f:0f:14:d2:
38:f7:ea:e5:38:ae:11:23:67:9f:89:51:83:fb:e7:d7:9d:6b:
d4:36:bc:29:32:20:18:84:da:49:e3:a5:8a:c3:bd:54:dd:38:
a7:37:bd:35:61:65:d1:31:eb:8d:ac:38:be:ef:41:4b:f7:0f:
5c:98:66:82:ad:ba:09:b6:49:49:20:66:74:05:40:7a:f1:b9:
29:9c:31:55:ea:31:c5:00:c9:ba:ff:13:d0:c8:2e:57:4e:40:
cf:03:c0:bc:4a:0d:f8:31:b4:0c:ef:af:4e:0a:da:25:65:ac:
68:f3:bd:6f:f1:d9:b3:63:6c:4f:1d:e9:82:46:19:89:26:56:
df:69:80:fb:39:11:0c:46:2e:71:c5:05:b9:3b:b6:e6:65:ea:
09:5f:d4:fd:75:26:5b:65:12:f9:8a:85:ad:6d:54:e2:f8:43:
6c:25:ea:bb:fa:9e:8d:f6:d7:18:ef:8a:bb:02:76:90:f0:f4:
a8:c9:23:0d:9a:bf:a5:d6:77:74:67:00:18:b0:9e:9b:48:86:
27:0e:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:08:42 2025 by rpki-client