Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: pi2USPxQeExQQcRFDwRBJMiepL8+DWIEn4t15OxxK+U=
Subject key identifier: 91:4E:13:29:F2:F3:A7:C4:44:B8:C4:A6:3C:95:6E:E9:E7:EF:6C:CD
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 0198D515BF994A0B9CE800AD6280A2BF95EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: D4/JYKF6cnT7YK5qXENX/DAU+MZosQoQUNIzXmsmwcQ=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bf:99:4a:0b:9c:e8:00:ad:62:80:a2:bf:95:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=914e1329f2f3a7c444b8c4a63c956ee9e7ef6ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:43:5a:d0:0b:d7:34:26:8d:22:1f:12:07:3f:
58:da:6a:c0:ea:66:8f:50:a6:ae:b5:1c:a6:67:2e:
1a:ea:ae:b5:d4:ae:37:c0:82:b8:7d:26:91:7c:31:
00:a5:6e:de:80:ee:38:b3:0d:14:8c:65:6f:66:4d:
cd:ca:37:ec:b3:1a:f3:33:d8:8b:49:87:5c:9e:50:
6b:54:93:7e:e6:7e:35:3f:3f:40:4a:73:59:b3:5c:
44:9b:c4:d0:d8:05:5a:e8:d7:c4:11:6b:ae:cb:f3:
15:45:56:f6:f0:37:af:e7:5b:b8:aa:66:09:40:bd:
b0:92:b4:d9:07:c4:79:19:ce:95:1d:b1:b5:c4:18:
c8:ea:99:7e:6f:fe:2a:5a:42:2e:45:ca:b1:e4:5a:
c0:d1:67:7a:fd:a6:a0:a3:aa:eb:ec:0e:a1:27:df:
d9:8e:7e:b6:ca:fd:8d:a8:6c:03:06:de:c3:a0:db:
a6:c8:d6:68:06:91:63:a6:09:b9:ec:23:8b:56:66:
aa:4f:2a:70:e2:f3:3b:cc:61:3e:26:e9:b4:dd:fe:
1c:68:66:2f:fb:02:77:c8:c9:49:8e:dc:26:8e:b0:
44:60:76:39:36:b4:0f:67:29:a4:d5:b5:d4:82:09:
79:5a:8e:07:42:41:bf:42:f1:d0:94:6b:1a:7b:0c:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4E:13:29:F2:F3:A7:C4:44:B8:C4:A6:3C:95:6E:E9:E7:EF:6C:CD
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:30:dd:4d:56:fd:14:2a:c0:be:5d:ed:15:47:f8:7d:f9:06:
ea:9a:36:2b:6c:67:95:ae:9a:03:c7:4c:fb:fa:1a:cb:d9:d6:
c2:18:4a:7f:97:27:e4:cb:e8:51:dd:e1:6f:13:c3:03:12:35:
b1:1d:cd:1a:65:72:71:a7:bc:3a:fe:33:4b:d9:45:26:a7:9f:
fe:74:65:30:a8:15:e9:15:f0:c5:30:a0:ef:1b:6f:28:53:06:
aa:63:f6:a7:dc:ae:05:1f:54:83:6d:f7:d4:17:e0:cd:f2:bb:
8f:97:12:4e:3a:5b:09:2b:b8:8f:1e:a0:6c:95:2f:50:ca:23:
8d:f0:4f:0f:81:17:43:f2:41:43:ad:60:40:49:3b:5c:00:a0:
a4:51:2c:96:d4:c6:aa:55:7b:66:21:05:fe:26:1e:c5:8d:f8:
7c:c6:df:43:ab:df:2e:3e:32:4f:8c:27:47:ff:e2:56:65:3f:
1a:a6:09:89:e0:54:ba:5a:49:9e:29:6a:8f:b4:83:cf:a5:de:
e4:62:e0:72:6e:aa:13:10:79:94:eb:f3:ef:fd:32:93:2f:12:
6a:0b:53:83:84:57:9e:66:db:a4:e2:35:93:b7:83:4a:04:9d:
c3:d1:c7:2d:04:bc:72:77:a8:81:c1:9c:19:bd:be:b5:f9:ad:
ae:61:62:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:25 2025 by rpki-client