Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: YD8m5kQV8A1pfreknev0iF667WJFiAU6fmEpbPLYHmE=
Subject key identifier: 40:A6:D7:A6:72:E7:A4:7F:25:44:D6:38:0E:D0:1F:C3:C9:9C:5D:FA
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 0197B7451C4A9778451AF0A8D96BAC46B08D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 1386
Signing time: Sat 28 Jun 2025 16:00:48 +0000
Manifest this update: Sat 28 Jun 2025 16:00:48 +0000
Manifest next update: Sun 29 Jun 2025 16:00:48 +0000
Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: Cf/mbRfrQTgU8yNnmiv+d/lf60uq+4s5zvTl/3C7j7A=)
5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1c:4a:97:78:45:1a:f0:a8:d9:6b:ac:46:b0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Jun 28 16:00:48 2025 GMT
Not After : Jun 29 16:00:48 2025 GMT
Subject: CN=40a6d7a672e7a47f2544d6380ed01fc3c99c5dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:08:db:db:54:63:98:72:00:f1:82:53:73:
77:fc:e9:c8:a1:02:25:73:a5:04:ce:17:ae:c0:31:
bc:6c:ac:fe:ef:ea:15:24:8e:1f:d5:80:a0:8c:f3:
01:a0:b7:92:9b:45:fb:87:62:82:c5:b5:94:21:c5:
e5:ab:23:13:00:ed:49:97:3f:81:75:ea:1d:60:aa:
22:a8:17:06:49:4e:7f:80:2b:8b:46:81:fd:3e:cb:
14:ca:48:14:f0:f8:47:08:b3:7e:78:c9:49:3a:7a:
89:03:f2:b3:bc:b6:a6:8e:d9:95:3f:86:0a:1a:64:
71:4a:52:8b:62:e6:fe:06:53:5b:67:ca:a0:21:86:
cd:34:87:fa:0f:fc:73:50:df:00:be:15:71:40:53:
48:3d:cc:00:cf:66:1f:13:d1:32:18:6f:5f:c8:64:
fc:dc:65:17:6d:e1:24:e9:36:4f:fb:1f:ca:36:fc:
46:d8:ab:b2:6e:29:60:d7:29:18:97:ec:f9:0d:10:
60:68:6f:94:28:4e:ce:f4:05:cd:7b:e2:1d:6d:4a:
1d:6e:df:d8:05:93:2d:71:70:bb:9a:76:fa:3f:3a:
20:97:74:7b:70:6a:c5:fa:fa:56:45:fa:c7:46:ed:
ed:06:31:50:b5:e6:68:ab:c8:46:93:cc:f8:34:06:
71:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A6:D7:A6:72:E7:A4:7F:25:44:D6:38:0E:D0:1F:C3:C9:9C:5D:FA
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:e3:60:72:03:5e:3f:62:14:41:f3:9b:a9:21:87:e3:fa:
0e:bc:85:7a:94:51:7a:0a:44:91:31:ac:f3:cd:63:5e:d8:6a:
95:75:56:79:5f:c1:d2:e1:10:c4:b3:b9:8c:f5:ec:9d:cd:49:
48:42:ef:83:69:10:35:1d:db:5e:75:2c:bc:55:20:12:f5:33:
b2:d9:b0:ce:06:ba:ca:d3:64:f8:4d:97:e6:1f:db:67:1e:c5:
2c:f0:ca:0b:ee:a3:3b:40:c8:a8:61:05:61:1e:92:cd:d0:33:
5c:11:bf:7c:ee:da:db:92:c4:cf:87:0d:6d:44:d5:95:a3:89:
aa:49:94:43:56:40:1c:f8:87:1e:cc:32:93:3e:8f:7d:2d:f1:
08:5e:51:b1:02:24:8a:30:82:b3:d1:94:51:3e:00:5b:e5:dd:
62:58:5f:19:d1:3a:40:ab:fa:d7:42:e1:38:e2:5f:f4:82:9b:
09:85:0f:78:32:f9:2c:b9:f7:19:8d:b0:32:41:05:cf:d7:94:
60:83:fe:a0:ed:f8:07:22:a0:0d:e6:8e:4c:25:01:1a:66:cd:
ba:7d:d3:28:a8:5f:9b:86:5d:e8:90:f4:0a:14:89:76:59:a6:
55:4e:9c:05:8e:b2:67:c4:0e:b0:c4:77:8d:2e:5b:f4:40:3d:
e3:df:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client