Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
File: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json)
Hash identifier: T3PbFMcfjbeyMEJ9mLmd+5gg72gUGyhuyycdUjhNBq4=
Subject key identifier: F3:E3:5A:43:47:0D:7E:E5:E8:02:1A:CF:2B:19:F4:D9:64:C9:6D:07
Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
Certificate issuer: /CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Certificate serial: 0197B74575C36CDC915D465460C7D55D3BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
Manifest number: 7E
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: H1o_SCjiFLHrkWrzG2YBUqyvibU.roa (hash: wUnzCOO08Zj5zj+Xms5OeZCPttJSOF6uH3iX57ElDhc=)
2: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: P0nqsaidyGk9IRyELdl3p2EA05LR8u2avAsFEz3m3Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:75:c3:6c:dc:91:5d:46:54:60:c7:d5:5d:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=f3e35a43470d7ee5e8021acf2b19f4d964c96d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f0:c1:72:b1:e3:3b:f0:c9:03:9e:3e:ed:62:
ee:9d:a4:6d:9a:82:9b:a9:79:ae:69:9f:9f:58:9d:
a7:bf:e1:ae:c3:cf:eb:8a:97:d3:27:79:d8:90:b0:
1a:41:fe:e2:b7:67:d2:fc:29:08:0d:a0:0d:6b:eb:
ad:ed:6b:39:b4:bb:fb:aa:b8:28:53:8d:00:b5:8e:
b9:b9:9a:68:23:d5:6e:e0:a4:36:71:a0:69:da:32:
cc:05:22:0e:ee:90:80:bf:a1:18:7c:ad:af:9a:1f:
f4:22:ca:0d:1f:fa:7c:b4:87:1a:14:d4:64:26:69:
db:90:1a:a2:a5:3d:91:da:b1:9b:9c:02:c4:8f:49:
67:0f:f2:3d:71:66:e9:26:9e:f3:eb:3a:49:d2:45:
1e:ed:7f:12:a6:b4:d8:4f:60:b2:b1:c6:38:26:3e:
55:37:e6:5d:94:92:75:05:4b:f2:0f:02:df:56:ed:
37:84:90:7d:25:81:c2:e4:bc:be:ec:00:14:bd:a3:
89:80:bd:38:42:19:ff:e0:87:0d:77:7c:2d:af:75:
42:97:9f:05:2b:87:b0:ed:84:5e:75:4e:6a:09:16:
15:4d:fb:f3:bd:50:98:1b:ac:a8:22:d7:e8:ad:6d:
44:6b:cd:2e:08:1b:6a:40:fa:00:69:0b:0e:c6:a8:
a1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:5A:43:47:0D:7E:E5:E8:02:1A:CF:2B:19:F4:D9:64:C9:6D:07
X509v3 Authority Key Identifier:
keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a1:98:0e:7c:d4:44:24:c3:33:c3:f9:c7:fa:22:4a:8b:0d:
ca:9e:82:ac:83:65:32:90:a2:ad:97:df:7c:f0:9b:b5:fb:4a:
fd:58:f9:06:42:ab:11:c4:9c:c3:da:53:12:73:5d:0d:43:08:
56:e5:d6:e1:3a:31:f9:b4:a8:8c:46:7c:c7:1b:e6:21:91:0e:
33:83:16:69:b4:2c:dd:50:ee:d6:5a:d1:e1:33:d4:e6:60:0a:
18:05:e1:2c:40:96:d9:af:c0:15:c7:49:94:7d:dc:c2:25:c4:
d4:4a:9e:81:52:8e:d4:61:fd:5c:4f:74:a0:e6:66:37:1e:3a:
95:87:52:28:53:55:37:44:43:14:85:07:ea:db:40:89:0e:62:
49:86:e7:a2:15:64:58:69:29:99:cd:15:0a:4b:0f:e0:d3:22:
9a:9a:c0:df:c7:f3:a5:ce:cc:bb:82:65:1f:30:bc:eb:f6:c1:
5b:9b:10:43:49:c4:47:a1:ea:57:42:8b:f0:e4:f1:9e:4b:4c:
a9:a8:c3:d0:6c:f4:07:34:66:4a:d7:c5:bd:cb:f1:5b:a5:60:
0f:e7:a0:33:98:79:99:7f:b7:bb:34:24:5f:92:41:a2:ee:6c:
20:10:fe:dd:29:fb:8a:2d:5c:48:c1:cc:c3:0b:9d:82:23:66:
48:ed:56:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:19:27 2025 by rpki-client