Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: TYVvSXJmsiTXOtL0wrBCQPTf6K3w6akh9zVhhU3uao0=
Subject key identifier: 6E:0B:9B:19:4F:CB:03:06:86:A1:CB:2A:22:C0:E9:BA:E2:DC:A7:CD
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 0198D705B1DA7AD184CE3ABCF42EB0762FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1375
Signing time: Sat 23 Aug 2025 13:02:11 +0000
Manifest this update: Sat 23 Aug 2025 13:02:11 +0000
Manifest next update: Sun 24 Aug 2025 13:02:11 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: IYxsot1unquqUzK0NU/rEZSFgzAdLL7XV+/yk3XIMG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:b1:da:7a:d1:84:ce:3a:bc:f4:2e:b0:76:2f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Aug 23 13:02:11 2025 GMT
Not After : Aug 24 13:02:11 2025 GMT
Subject: CN=6e0b9b194fcb030686a1cb2a22c0e9bae2dca7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:05:5e:c2:67:47:76:cf:73:8a:ec:f8:53:
92:75:11:df:ca:94:10:c6:9b:16:57:4d:3c:bb:ae:
ac:01:f3:25:2f:8f:af:55:dd:2b:30:ed:c0:d3:fa:
0b:fc:72:45:8c:4b:13:eb:89:63:d4:ae:67:f3:64:
a5:24:49:e7:50:cb:4f:e3:02:a4:c4:ca:34:87:03:
56:41:70:24:15:3f:24:d8:5c:fa:83:ab:0b:c7:f5:
76:42:f1:2b:fa:e1:2e:f2:bd:35:a5:1e:d7:de:ff:
ac:b6:dd:1d:98:c9:2e:af:9b:3b:6f:39:e6:e8:1a:
c2:1f:aa:c4:d4:9e:89:65:94:8d:6b:df:39:42:e0:
89:aa:0b:5e:88:a9:33:bf:86:80:45:47:7d:c5:f1:
82:ad:56:03:dc:a7:03:e3:0e:e5:1c:9d:15:47:3a:
8e:d5:e4:eb:9f:02:e5:8f:4f:52:f8:0a:6b:80:9f:
f9:a3:dd:98:27:df:c7:8e:70:ca:15:1f:9f:bc:b3:
9f:c8:9a:13:b8:56:30:3c:2a:94:28:9c:5e:87:33:
fb:c7:a5:05:a0:81:15:32:e4:14:7a:69:cc:11:6e:
a7:ee:aa:6c:a3:64:95:94:b3:9d:f1:f7:73:76:ba:
41:e8:f8:46:86:9b:4b:06:b3:be:2a:20:bb:2e:b8:
9c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:9B:19:4F:CB:03:06:86:A1:CB:2A:22:C0:E9:BA:E2:DC:A7:CD
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:aa:96:c8:eb:c3:e1:86:0a:56:df:12:4f:6a:0b:18:5b:c4:
79:0f:f2:83:ed:eb:98:e4:71:a3:55:59:bf:6c:f7:00:1a:91:
4d:03:d7:bc:3e:03:ab:21:62:61:32:b4:ff:d9:d9:5e:23:d0:
ba:a1:7e:6a:bf:94:48:d8:4d:d6:83:55:7e:de:f5:72:97:4c:
34:97:fe:77:8f:00:7f:fb:54:13:c3:51:e7:88:d0:35:32:2a:
f8:86:43:5e:47:8f:89:6e:04:b1:57:9d:09:ec:ee:2a:01:f2:
19:b7:9c:48:84:54:d4:ee:fc:72:5e:ba:ac:02:cb:70:cd:a6:
ef:3c:cd:6b:b0:eb:12:63:28:f8:36:d5:42:c5:be:64:58:0c:
a1:a7:98:93:ed:bc:a3:de:31:d3:59:e2:b8:0c:e0:04:d7:a2:
73:ca:26:d7:23:4a:96:e5:eb:7c:6a:0d:29:5d:0f:cf:f2:2b:
bc:2f:37:b6:36:e8:e6:e5:1e:62:1b:b8:67:89:fd:62:b9:6d:
a0:e4:3b:e7:7e:49:84:af:6d:ca:f3:1a:43:2d:45:81:3a:69:
2a:45:9b:53:83:03:d3:6c:50:03:d6:7b:19:0d:d9:2d:f8:38:
31:a5:9a:05:d4:b7:d4:3d:6d:4a:bc:ed:19:23:8d:d6:7b:70:
4b:3b:cd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:47:54 2025 by rpki-client