Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File: PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier: /6kBawqGTKciBxTZ1x3qZPMvpbYcazI6TK+R0r/HIog=
Subject key identifier: F2:AB:FD:52:62:3E:C4:12:60:A5:D0:69:15:BE:6E:E2:42:54:F0:E9
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0198D4E0BB8A238B332DAF7F828A6110111B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number: 0292
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: 7MAR8ldskj16F5kzBhniowMVmU4.roa (hash: mAbacv2iYcdMB2GMEDPPh1FDDClOu0PIdLu6x7Tl3MY=)
2: FmkKEcHCN4SKkKjvm4wbiP2rqGc.roa (hash: BxDXl5Xd1DRGy1evvpUKKCLNhtBpKlkHYmd1XWHZ6n8=)
3: O3Tnl_hQ-xazPyPalSQiMw8uws4.roa (hash: on+ud1ImXk9PCKeavsxsVmZkBwEQpMfUP3g2Be5WDiE=)
4: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: EzzEy9sjjOVxMfuAp9RnYxclUMGj2l3xNcuERiV+aTw=)
5: k4yKqIR7cQItxrDu_gDWC-myYX0.roa (hash: xhdvsy13/3L8cbu2Dvi5ab7FoTe57YZRZZmouEau4sA=)
6: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)
7: pWtbtMqs_9aJQ0KT8UAl4XExZLI.roa (hash: WNvv2z5ka9H0FOvY11NFaV4Er6oN7s2ejAsfJawgadw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bb:8a:23:8b:33:2d:af:7f:82:8a:61:10:11:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=f2abfd52623ec41260a5d06915be6ee24254f0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:bc:f2:93:d6:b4:56:8d:d0:6d:39:76:07:
e7:69:ec:0f:92:ba:c2:28:d2:db:39:bf:1f:bb:ca:
30:c0:17:c4:da:a9:4c:ea:59:1e:d3:34:a1:9f:aa:
d4:b3:6f:04:54:e1:4e:a6:35:e6:2a:d2:8e:eb:81:
71:41:ed:24:93:26:67:3c:5f:3e:5c:1d:f5:5f:7a:
fc:e6:4a:c0:25:38:8e:00:13:2b:25:64:5d:c4:15:
0f:1a:a4:e5:39:a4:92:3b:a4:aa:6d:71:b9:c9:cf:
21:c7:64:c7:fc:08:e3:46:fa:5d:df:56:c5:59:d3:
d4:8d:b3:07:77:4a:03:ec:16:27:dd:3a:64:1f:1e:
d0:12:fe:84:b8:64:09:0b:ba:83:0d:91:af:1f:38:
cf:8a:50:69:02:50:3e:03:10:19:30:4a:d6:3c:3f:
12:2a:43:0c:cb:35:30:51:9f:a6:d1:42:ea:6a:16:
0b:d7:c5:7a:49:66:60:cb:b7:4e:d1:26:2b:46:24:
8a:99:36:7a:f4:84:8c:5b:28:2f:2b:d8:c4:f0:d1:
90:bb:a9:ef:e0:30:5e:f7:63:80:81:d8:6a:0e:3f:
93:45:a3:16:05:7c:ca:ba:f3:fd:24:6e:e8:a8:1c:
1c:6f:8b:d3:7f:5a:ec:f7:ad:66:96:50:d2:e8:de:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:AB:FD:52:62:3E:C4:12:60:A5:D0:69:15:BE:6E:E2:42:54:F0:E9
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:40:ea:8a:c0:c8:45:57:c8:8e:7f:b7:1a:09:d6:81:4e:f3:
9a:9e:5b:4a:77:76:40:19:aa:5f:f8:46:37:c6:cb:d9:6f:18:
91:f8:26:d8:18:5f:43:80:bb:6c:3f:db:59:e0:77:9a:22:b9:
41:95:49:eb:fa:cc:14:4c:a1:4a:ef:64:da:cb:bd:54:eb:94:
f6:53:4a:3d:d0:af:45:ad:76:e1:98:74:b7:30:18:69:53:e6:
5f:ee:8e:50:16:2a:61:a2:44:1e:60:b1:6b:92:b9:53:c3:e8:
e5:4c:8f:5b:a5:42:05:e4:66:c9:62:e8:b4:42:e5:a1:ca:0f:
85:c7:ca:42:2e:38:70:28:87:23:08:23:f0:e7:b0:24:6c:6b:
b9:11:a0:78:cb:58:b2:1a:d6:38:80:52:3e:97:78:3f:75:3f:
38:e5:d5:82:ba:da:93:94:15:f0:fc:4b:15:bf:60:b3:f1:d3:
65:5a:12:b4:61:3a:e8:c8:59:89:41:f3:f6:6e:f1:45:d5:0f:
a7:bd:54:d8:6b:f3:be:49:3a:f2:d3:01:69:63:35:1e:b5:18:
f0:44:6c:ae:d9:16:5f:7b:7e:04:3c:7f:e9:95:2a:cd:d4:2d:
f1:79:3d:96:8a:0e:c6:01:f8:52:cf:24:a5:02:8a:78:50:73:
31:1d:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:54 2025 by rpki-client