Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: dm41XfCodkO128lKdgHJeH/Qn1ofss1dZ4mZG63Q/pk=
Subject key identifier: 35:C1:8C:FA:BD:A5:EB:D4:99:C7:61:51:C0:FD:3D:DE:3B:3A:82:7A
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0198D4A796F1BB527F157CB0A5DE13FF87A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 0FCA
Signing time: Sat 23 Aug 2025 02:00:09 +0000
Manifest this update: Sat 23 Aug 2025 02:00:09 +0000
Manifest next update: Sun 24 Aug 2025 02:00:09 +0000
Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: DRnXmZMHMY6ylfiZaW+ln5pquyE2FXP2c4yWxd9nEwo=)
3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:96:f1:bb:52:7f:15:7c:b0:a5:de:13:ff:87:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Aug 23 02:00:09 2025 GMT
Not After : Aug 24 02:00:09 2025 GMT
Subject: CN=35c18cfabda5ebd499c76151c0fd3dde3b3a827a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0c:4d:7d:2e:8c:fd:28:40:cd:71:b2:f3:e2:
a0:fd:88:56:86:4f:06:d7:6d:3b:7d:d4:e1:ff:b6:
b9:d1:5c:06:b7:71:6a:95:40:30:83:0f:33:30:d3:
e9:1b:63:3f:42:3a:d0:82:51:37:2f:6d:2b:f4:bc:
80:76:08:b1:ce:28:10:20:16:d5:fa:10:1b:30:b6:
e5:dc:79:49:ab:37:9a:ef:f3:e5:d8:bb:9f:e8:d8:
9f:02:ce:fc:d4:cd:f9:f6:13:60:50:ee:bc:9c:a9:
a7:ae:9a:b1:27:f3:65:dd:69:05:dd:fb:71:dd:00:
85:e9:86:1e:5d:ec:86:17:2f:34:86:e4:7e:1d:ee:
c8:18:34:e3:e1:1c:6c:c5:b7:0c:10:26:b9:78:d6:
ad:ad:5e:95:35:78:5b:67:02:bc:d5:5a:f5:3a:98:
37:c2:d1:d6:ed:c9:60:20:b6:0c:23:68:57:e7:54:
30:fe:de:fc:85:a0:07:bd:16:ae:50:f5:e3:9a:16:
7c:74:05:29:60:f7:c8:31:4f:9e:a3:52:02:62:2c:
37:93:ee:52:5c:f9:62:cc:82:53:3c:26:4e:82:36:
c6:fc:b3:74:1f:ac:2e:d0:08:49:94:13:0d:c9:e7:
76:1a:ff:f6:13:ce:15:d8:60:37:14:05:02:e4:cd:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C1:8C:FA:BD:A5:EB:D4:99:C7:61:51:C0:FD:3D:DE:3B:3A:82:7A
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:70:36:37:d7:4c:32:36:57:50:6c:42:42:fc:8b:50:f1:b6:
4c:d2:9b:5f:7b:8b:84:d0:4d:6a:46:3d:bd:c3:fd:c5:11:61:
f1:40:7b:2b:9a:76:35:83:31:b4:95:cd:f3:04:f0:47:96:22:
31:67:71:4d:de:b5:20:7b:59:a7:d0:be:8a:ba:8b:4b:21:f3:
43:34:93:e1:e6:0e:84:ee:f4:31:05:c3:70:8b:ad:68:cb:c8:
3b:40:7e:1f:d1:d4:56:bb:84:1f:c1:33:d1:ca:d6:d5:5a:bb:
82:43:a0:d0:e9:49:80:ea:e4:03:9e:71:e3:39:d7:35:d8:ff:
19:64:27:81:f9:67:56:0a:96:48:ef:e2:23:f2:11:94:87:de:
16:38:c9:df:3d:bc:a3:6b:93:a1:20:f6:b3:1b:16:11:70:b2:
fc:88:8a:94:00:80:24:0f:19:2a:1e:3c:89:78:af:7b:ba:cf:
7d:dc:30:9c:df:e1:3e:12:5d:79:0b:a6:17:dc:ee:7d:b5:df:
35:f6:d5:27:9c:94:20:e6:0c:9f:8c:60:c7:8c:b8:9b:5f:46:
f6:58:2e:ac:50:91:4c:13:da:5b:2f:89:40:fc:94:a6:fa:37:
e5:f6:66:cc:73:9c:7f:ed:50:96:17:58:bd:c0:2a:ef:1c:86:
4b:51:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:17 2025 by rpki-client