Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: IRPtv4LZux4iVGURph2D8MrwGUDwPhmcGhcbtOJJIZo=
Subject key identifier: 9E:25:C2:39:12:99:B4:DD:D3:6D:37:19:48:20:E1:BB:E1:3A:0B:73
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 0197B6A2524D2885E30FE970F160CAB0138C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 02E4
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: oIn7bt5d7eZ9ahSWO+rHS+6HOmItzvr6afcqFWXzM/o=)
2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:52:4d:28:85:e3:0f:e9:70:f1:60:ca:b0:13:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=9e25c2391299b4ddd36d37194820e1bbe13a0b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:89:57:51:a4:d3:21:b2:51:e2:7c:c1:a4:
fd:8c:1f:4d:d4:18:6a:b2:8d:49:b6:5a:bd:5e:12:
9d:d6:b9:d0:2a:98:af:1e:f3:cb:a0:9a:f3:05:11:
25:d2:1d:6d:02:53:89:89:28:58:83:b0:d3:1b:6f:
68:f3:9b:da:ed:24:9a:72:e3:82:31:24:b2:5b:05:
20:21:63:3b:d5:b9:5a:d2:a7:20:03:17:f9:bd:d0:
89:1d:8f:c9:86:b3:99:ae:42:ec:cf:e6:78:26:96:
c7:ee:38:71:6e:88:9a:3c:39:17:ff:00:02:df:24:
92:26:06:41:8c:e5:47:5e:19:f8:79:b3:16:d4:54:
a8:a5:77:73:a9:cf:1e:97:42:7d:bb:51:9b:f1:cf:
8c:68:65:ad:78:8c:b1:95:66:cf:b9:29:00:7b:2b:
85:9e:1a:85:bf:a4:41:c9:3b:ec:83:e1:04:ef:50:
8c:d7:47:90:f7:60:a5:71:49:0d:93:3e:10:84:70:
b5:e4:03:19:36:26:02:b3:b6:e6:1c:77:81:8f:7d:
09:94:38:20:68:82:b9:bd:1e:b2:1a:2e:c9:0a:ca:
0c:4c:b4:6b:3f:7a:a5:ab:82:dc:88:03:9d:f8:a3:
73:8f:66:df:da:99:39:d7:ae:14:14:d2:a6:a1:45:
7e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:25:C2:39:12:99:B4:DD:D3:6D:37:19:48:20:E1:BB:E1:3A:0B:73
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0e:6e:a2:9a:68:d3:00:db:c0:4d:1b:68:85:2c:a5:35:9e:
84:bb:c2:60:79:14:97:26:fe:68:f0:d4:db:a8:f0:a7:d0:8f:
ba:78:5b:fb:a3:10:2a:b0:ff:c4:77:20:75:6e:39:d1:1a:39:
61:d2:2c:9b:89:3e:03:3a:08:35:f1:4e:ff:0e:3d:73:32:a3:
c9:7f:8a:e8:b4:f6:aa:0a:ca:93:67:51:09:2b:d1:12:83:6e:
8e:cf:78:c2:d9:08:cb:1c:1e:61:d5:b9:71:b2:c7:a6:65:dd:
b4:8e:ce:7f:2d:11:f5:39:d3:58:36:a7:f6:25:d5:61:bd:ec:
8e:5a:df:4f:0d:e3:9a:31:4a:8c:ee:11:cf:bb:d0:dd:59:72:
89:96:28:30:40:24:4e:56:1a:e6:6e:ad:f4:4c:97:e5:36:29:
1a:f1:79:16:a3:b7:b8:d9:74:47:e4:b2:7c:f4:9e:36:76:97:
9c:4c:68:c8:3d:83:0f:02:ab:26:34:78:d2:ae:13:f9:46:1d:
35:ae:a5:75:c2:76:92:d7:b7:f7:0f:5b:49:2f:bd:a9:e1:47:
d8:8d:ff:c7:7c:53:b2:ff:24:a6:56:af:ca:e6:58:05:9b:c1:
15:a6:d6:75:39:90:4a:30:93:70:b9:c9:93:e8:b7:33:a3:14:
7f:b4:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:59 2025 by rpki-client