Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: fF4Mg+5x2yPVJe/iGCmmArNiU23HUnqjjtBub5oyqsk=
Subject key identifier: F3:C2:15:03:02:90:89:B9:98:18:B7:A5:37:8F:43:92:CA:56:FE:34
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 0198D58373737AF8B07C304A34367C9B56C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 070F
Signing time: Sat 23 Aug 2025 06:00:18 +0000
Manifest this update: Sat 23 Aug 2025 06:00:18 +0000
Manifest next update: Sun 24 Aug 2025 06:00:18 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: yIxDtG5Gf1QD1lzzreAxk5EcFJ16pyGBSkxB2ctQ1uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:73:73:7a:f8:b0:7c:30:4a:34:36:7c:9b:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Aug 23 06:00:18 2025 GMT
Not After : Aug 24 06:00:18 2025 GMT
Subject: CN=f3c21503029089b99818b7a5378f4392ca56fe34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:df:73:39:54:88:36:b5:8e:5b:9c:d7:29:
ef:bb:46:b7:35:6f:89:a3:e3:f9:0a:26:0b:18:be:
c0:e9:f3:c0:a0:0d:de:b1:2c:99:1b:3d:60:d9:c0:
fd:92:d6:a4:aa:9f:93:bd:4c:98:3c:c4:64:11:77:
fc:54:8a:58:0e:9c:5f:01:3e:18:38:e7:6f:95:32:
af:20:2a:0f:36:ab:81:65:9d:86:ce:d3:87:b4:d0:
79:e2:28:9d:c3:a7:fb:75:57:ca:20:8d:5d:8f:b2:
0b:50:fe:94:60:0e:1f:08:bc:06:54:7b:18:6b:04:
bf:b9:c2:a9:6b:d7:53:c7:90:2c:c9:31:2a:22:f9:
75:05:87:b7:e1:4b:81:d7:15:01:32:aa:f7:2e:8f:
1b:da:4f:30:49:c8:83:03:44:81:a2:cf:b2:e1:9c:
30:73:9e:bc:f4:d6:09:e6:1c:e7:f6:ff:1c:4c:82:
11:7e:14:05:13:17:c2:85:a2:3a:dc:1b:05:7a:e1:
86:13:fc:2a:c2:09:93:62:b8:05:9b:71:4e:52:ff:
9c:f4:70:5c:f0:50:2a:03:78:56:37:03:57:95:09:
e3:f0:6a:58:53:be:03:c6:78:d7:fb:78:a8:e4:73:
42:88:52:dd:22:eb:51:39:aa:4f:ff:3c:10:42:86:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:15:03:02:90:89:B9:98:18:B7:A5:37:8F:43:92:CA:56:FE:34
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f1:f0:a8:ad:55:ce:97:c3:d1:03:ce:87:2b:19:a9:7a:38:
82:13:c5:5c:7e:ce:6e:67:d1:92:65:dc:a8:ba:fc:62:04:3f:
db:ab:4f:ec:f9:7e:f2:a7:53:4d:fe:b5:bf:dc:ac:4b:26:8c:
96:31:7e:0f:78:87:ac:1c:b5:ef:66:c9:bd:b9:18:a8:c0:ba:
04:22:82:05:1e:01:17:c0:a6:09:ec:1e:63:95:c5:b5:41:71:
5e:34:98:ec:d8:2e:f5:73:ec:32:a4:9e:45:16:a7:04:3a:13:
91:68:27:a9:b1:43:13:38:a0:34:bd:17:e8:5f:bd:94:f9:08:
c5:39:c9:c1:cd:4c:21:d4:e0:9c:58:c4:0c:4b:b8:6e:3c:64:
66:5c:28:ba:f4:4c:60:7a:df:3d:4f:bd:fb:d2:6e:eb:70:d0:
c1:57:0c:12:54:e4:01:f8:9d:77:6e:a8:06:22:c9:4e:fa:a8:
6d:a0:72:eb:cb:83:c3:fe:e2:18:a4:d6:55:1d:23:e3:42:6d:
59:15:94:be:dd:8e:23:09:6e:fa:77:10:2e:ce:09:cc:51:84:
a8:75:68:7a:c1:64:7e:e0:7d:93:6e:57:04:fb:2f:ef:48:a9:
f2:03:94:47:fc:60:51:74:f2:5b:d6:fd:2c:a5:84:51:a2:a9:
e1:3e:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:04 2025 by rpki-client