Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
File: Pv3irXEjs6hgCAWIBbsQFva3P7A.mft (raw, json)
Hash identifier: /pgtVuLU8CsMVLtAVeo+TjywhSHsNdV34dkKqzIWLmA=
Subject key identifier: 1C:2A:15:D9:05:DC:E7:12:C0:A5:2C:72:26:AB:13:CD:17:9A:A5:D6
Authority key identifier: 3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
Certificate issuer: /CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Certificate serial: 0197B70E7A6CABF9AD697EE1710B98D9F88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
Manifest number: 113E
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: CaL9jYSTc-IdChBXaiMWMez9mXg.roa (hash: KSdlQjcVUmbuNppz/t/DKjZyc/L+OBaFoRGPDIpwznQ=)
2: Pv3irXEjs6hgCAWIBbsQFva3P7A.crl (hash: ussVvp15tgI44U4tWWtwXXbHWpBaixicrbtAyvbGSGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7a:6c:ab:f9:ad:69:7e:e1:71:0b:98:d9:f8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3efde2ad7123b3a86008058805bb1016f6b73fb0
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=1c2a15d905dce712c0a52c7226ab13cd179aa5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:f7:6d:75:43:78:1c:9f:07:3f:23:86:98:
ff:7c:10:32:d7:40:3c:b4:93:28:72:e0:e5:57:7d:
39:fe:97:22:22:34:db:21:eb:96:74:5a:5b:82:84:
ad:fc:73:48:f4:06:c8:39:3b:2b:cb:33:b6:bd:df:
e9:90:68:1b:80:f2:8d:e4:e4:07:bf:f1:df:8d:88:
56:75:9f:3a:79:ef:67:91:fc:09:66:31:8d:c1:3e:
0c:88:45:b6:7e:68:b1:b9:86:f1:8d:dd:dc:b0:9e:
74:bd:70:47:b7:e1:21:23:19:79:03:47:fd:8d:db:
3d:da:cc:60:2e:b0:ee:ac:57:8c:1a:70:04:1f:dd:
10:18:30:05:0e:15:58:f0:44:67:24:03:0d:ac:e6:
b1:46:d3:79:06:2f:0e:60:5f:0d:a2:94:be:12:98:
48:af:b7:28:12:1c:7a:03:ba:e1:69:29:9d:51:d7:
39:b0:a1:c5:bb:0d:3f:7e:3e:f5:c8:22:13:0d:a9:
4c:1f:90:ac:e3:a3:bc:18:b8:f7:0e:84:d5:09:8d:
dd:e1:ae:97:4d:24:34:23:7a:bd:31:9e:f2:73:b6:
79:85:df:d6:97:b7:70:b5:fe:8c:9c:01:ed:b5:05:
67:3c:31:6e:4a:31:b5:ae:0e:e1:04:a3:b2:3b:8f:
50:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:15:D9:05:DC:E7:12:C0:A5:2C:72:26:AB:13:CD:17:9A:A5:D6
X509v3 Authority Key Identifier:
keyid:3E:FD:E2:AD:71:23:B3:A8:60:08:05:88:05:BB:10:16:F6:B7:3F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pv3irXEjs6hgCAWIBbsQFva3P7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d6179f-4bda-4871-8977-c80d33a26535/1/Pv3irXEjs6hgCAWIBbsQFva3P7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fe:47:a7:9c:f1:fd:84:ca:dc:6c:67:15:03:27:d5:41:6a:
a5:c3:ec:d0:72:cc:15:c1:05:a1:fc:cc:58:3d:12:24:cf:9d:
a7:d5:c3:de:17:02:69:1c:8d:6d:b3:13:0b:6c:dd:a6:b4:13:
7e:52:6a:ec:01:57:f5:a4:24:43:10:ac:cc:fe:23:1d:c8:35:
01:c6:27:87:1d:92:52:c9:66:9a:bc:fa:35:ce:4a:8c:9d:ec:
a7:7d:dd:24:7a:4c:4d:6f:5e:51:0b:3b:f2:de:9e:90:8c:f4:
a4:c3:7c:41:13:b3:9a:42:66:5c:6f:8e:85:e3:51:1c:18:e1:
bf:9c:43:5d:21:80:28:e8:5c:94:24:f2:3e:c9:36:92:e0:ff:
12:03:31:a8:59:49:cd:21:e8:c8:9c:ea:50:dd:b9:dd:55:bb:
49:8b:55:2c:94:1d:86:ab:35:3c:76:d8:72:02:b9:a9:c3:69:
6c:84:b1:fb:92:3f:ee:11:c1:49:02:2d:a7:c6:ec:e8:3b:bd:
2c:a5:96:52:99:a1:fb:93:97:16:43:41:44:cb:76:e8:aa:a2:
c7:b7:50:80:d6:bc:97:d8:67:b7:b4:19:eb:f1:b7:c2:a0:38:
ff:3a:78:22:bc:58:e4:43:6d:61:1a:98:6f:c7:70:14:e9:b7:
9b:1d:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:30 2025 by rpki-client