Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: tp0qCMzql1qKhyMTGzoeI+1LP8c0rCvv1t1anh+zKYk=
Subject key identifier: 45:9C:E2:7B:63:E0:C7:D9:1B:04:B8:A8:55:7E:F2:8C:A7:12:6C:BB
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 0197B7451CEE0FD3F8E2CC817770B4C9B3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: n25oCKaTC4/CJPR6nXQQYYhiSNkF0j5jPUootqJ0/x0=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1c:ee:0f:d3:f8:e2:cc:81:77:70:b4:c9:b3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=459ce27b63e0c7d91b04b8a8557ef28ca7126cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:73:9c:1e:43:1a:ff:10:36:40:55:8b:9b:
1d:69:09:10:64:b0:89:d3:c2:5e:ef:54:e5:5f:85:
3b:7c:3b:8c:c2:fd:3b:7f:bf:4f:db:97:86:88:74:
9f:65:23:87:8d:ce:51:6b:71:71:38:83:eb:12:c4:
81:b2:67:79:b4:67:dd:0b:a3:e0:16:6d:3c:cd:cb:
21:80:3a:fa:c5:b4:f4:b3:fb:50:c8:65:5a:dc:33:
bb:02:d7:12:27:4b:9a:6b:d4:f8:3f:1b:7e:5b:9a:
e3:a3:51:5f:20:9d:aa:35:d6:3c:96:76:cd:e6:11:
ad:41:62:91:55:03:88:f7:c3:06:f9:26:8d:3b:15:
70:dd:e9:7d:21:5a:8a:10:b7:62:6b:62:44:12:54:
6d:3a:d3:71:4b:32:61:ba:28:69:1b:9d:cf:b7:47:
13:f2:6d:20:bc:96:ec:e4:bf:32:b5:9d:ae:77:7b:
bf:4e:3e:9c:04:54:0a:3a:50:e5:33:a5:a2:1a:aa:
32:a1:dc:f3:e4:20:47:01:08:36:7e:46:71:81:29:
00:9f:5f:3a:9c:3f:71:91:95:41:89:da:1c:61:81:
ad:f3:74:39:a7:d5:6b:6e:e5:78:a0:07:37:e8:72:
55:b8:13:7b:bf:3c:54:c3:77:40:0e:f7:69:48:e4:
d4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:E2:7B:63:E0:C7:D9:1B:04:B8:A8:55:7E:F2:8C:A7:12:6C:BB
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:80:f2:37:18:f9:ed:d7:6b:f0:ed:fe:a3:68:9e:08:85:f1:
32:92:1e:69:48:e2:12:f0:b9:01:e2:76:65:44:78:d3:26:05:
90:99:31:32:0f:45:1a:b1:7c:3d:19:92:a8:ec:d5:41:b7:2c:
29:53:e4:e2:80:a9:c0:4c:7e:65:f5:71:29:7c:a8:86:19:4f:
2c:ce:f8:7a:87:10:4a:df:bc:e3:d4:45:b9:14:34:76:58:36:
f2:b8:8e:81:68:1e:2b:e9:4d:b7:3d:b9:4f:29:44:5a:1b:29:
a6:bf:5a:d4:4e:c4:2a:bd:ee:d2:4d:16:42:1a:b5:df:69:f5:
11:9e:12:32:86:0b:3d:62:f0:f6:de:14:50:50:84:dc:9a:ce:
4e:03:b2:05:39:2a:f2:07:2f:3b:24:58:1b:2a:8e:f6:8c:3b:
dc:04:c0:57:00:95:d2:c3:d0:3f:9f:5c:2a:e1:45:e2:d8:69:
5f:6b:d3:33:94:27:79:4e:8c:c8:ce:52:9d:56:20:72:01:57:
08:54:57:fa:fc:b9:0b:25:9c:7a:4b:f7:bf:7a:2d:5f:dd:32:
75:f8:f5:96:a7:f1:82:90:e2:3c:a3:54:d2:52:67:0f:ab:6b:
cc:8f:0f:8d:c8:4a:8c:4e:47:78:ee:29:7f:28:4f:8d:12:0a:
64:02:9f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:25:47 2025 by rpki-client