Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: XZgSdlvZeh1VawEM4SRJG806djY+aL+py8J3U/eYe98=
Subject key identifier: FA:1D:B6:3E:40:7B:09:9D:41:96:48:B4:35:36:F9:F7:99:0E:DF:19
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 0197B74562EA85F92FB0CA102131430D19C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 12E0
Signing time: Sat 28 Jun 2025 16:01:07 +0000
Manifest this update: Sat 28 Jun 2025 16:01:07 +0000
Manifest next update: Sun 29 Jun 2025 16:01:07 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: BIZ/m2/kEyVkw8/dQ5FNGkgCqRfIhTumgSE4rq8ZD/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:62:ea:85:f9:2f:b0:ca:10:21:31:43:0d:19:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jun 28 16:01:07 2025 GMT
Not After : Jun 29 16:01:07 2025 GMT
Subject: CN=fa1db63e407b099d419648b43536f9f7990edf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8d:ce:57:0b:48:60:b2:38:19:82:9d:d1:63:
eb:91:db:cb:27:22:12:2c:c6:e4:f1:29:02:a7:57:
cc:55:2c:4a:db:81:44:c3:e6:fe:d8:af:56:6b:e5:
74:00:9d:1d:6a:8d:79:ea:70:b4:91:c7:fc:54:cc:
83:00:52:a3:85:71:dd:b4:15:b4:71:f4:05:d3:fe:
82:04:1b:28:1e:64:dd:7f:5d:87:0e:dd:f2:ff:ce:
7f:ac:1f:75:42:85:90:22:8c:af:21:af:01:e7:e2:
16:65:aa:b7:7f:73:e1:c0:d8:a0:d3:37:21:b3:b7:
26:05:48:85:38:b8:f3:9f:3c:67:83:3b:62:84:2b:
46:a5:91:a9:3c:98:47:db:26:e8:5e:5a:bb:a6:a4:
2d:d9:7f:4a:41:1c:00:3a:f8:b1:ef:90:8e:19:82:
29:0c:d2:e9:cb:a8:9f:78:09:7c:49:71:51:a1:6d:
b3:fa:8b:2a:54:73:9f:2e:7e:1f:94:c4:c4:26:f6:
20:1d:59:d5:cd:b7:65:af:8d:da:d3:9f:3f:18:a5:
d6:9d:35:d4:ac:8d:44:07:4c:ed:e0:ba:2d:8e:e5:
19:be:3b:04:79:e3:51:82:55:cb:24:b6:10:16:a1:
b5:6a:73:90:d9:46:f0:d3:4b:64:6d:ac:ca:2c:c9:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:B6:3E:40:7B:09:9D:41:96:48:B4:35:36:F9:F7:99:0E:DF:19
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2e:13:9c:6d:ca:a8:e7:c3:50:c1:7c:55:54:f5:d3:e9:b8:
b0:22:3a:93:99:72:c5:a1:d7:3d:8f:7a:8c:cd:8f:c4:69:61:
d8:6f:e9:92:c1:10:1d:ef:e8:a7:8f:cf:dc:a0:bc:df:5f:93:
5a:ee:9b:55:1a:3e:50:c7:d9:c0:0f:b3:c1:be:7e:ae:b8:f4:
c9:e7:b2:b8:29:83:81:05:e8:1c:0b:12:d2:8d:99:e8:6d:d0:
6e:1d:73:25:19:0c:63:47:ff:25:39:4c:c0:f4:67:cf:a8:9d:
86:e8:4b:ef:30:ed:7f:e6:e5:6f:fe:83:8c:2b:1b:64:e1:86:
29:19:78:da:2d:3c:78:0b:c7:d5:74:3e:be:c1:9b:33:19:e4:
d3:28:66:43:b7:38:d5:b5:23:ab:7e:27:72:be:03:f7:43:a7:
92:24:5c:40:86:28:4c:7d:65:e7:52:8d:6d:0d:a0:09:c1:ac:
a8:db:82:30:56:69:c6:01:a1:32:26:78:f7:2f:16:65:d5:6b:
fe:66:79:7b:7d:cd:52:06:e5:7b:c9:ed:e3:97:f0:17:aa:e8:
34:75:ce:6b:97:aa:53:83:fc:3c:08:d6:42:cd:73:15:ba:66:
f3:81:a6:fb:18:18:90:92:f1:80:3b:e5:21:42:d7:d9:a4:7b:
4d:7e:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:44 2025 by rpki-client