Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: Pc1QefzV6B0kL5x+f5BHYDyuUtPCVHK0Q/8tdovG90w=
Subject key identifier: 0A:62:05:7B:78:42:26:39:CE:F7:6E:A7:81:5E:A4:E3:6D:8C:57:35
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 0197B77C0C11ED4FA0047E8136F027B88D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 0288
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: 6zsluOVFRZRiJFUidhZcqlxn8jTavrXBQPxGMUXXaLY=)
2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0c:11:ed:4f:a0:04:7e:81:36:f0:27:b8:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=0a62057b78422639cef76ea7815ea4e36d8c5735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:12:57:14:ca:b6:fd:6c:d8:23:b0:c1:6f:
22:83:ad:e0:bf:ec:1e:48:df:2e:1c:66:0d:4a:b2:
0e:60:20:f0:a7:5b:8b:b0:99:d8:6b:ca:2a:97:f2:
89:b0:37:c4:70:86:ec:d2:c7:b2:f6:16:0b:a1:be:
c1:dc:5a:7e:2f:e5:30:28:9a:3c:89:37:ea:bb:5e:
b3:fc:6d:60:d8:c4:40:bb:e8:dc:07:d8:4a:1f:b5:
10:b7:98:bb:36:db:6f:e0:1c:0a:16:7d:eb:e2:bc:
1e:a2:05:ec:2c:52:40:01:c9:6e:79:11:ee:c0:05:
44:21:6d:fa:bc:8e:df:c8:31:ca:a2:50:88:44:3b:
5c:39:c6:36:d8:cc:e6:ab:c8:5a:d3:b7:bb:aa:57:
f0:d4:74:50:4b:24:2a:96:8e:80:0f:3c:81:60:ae:
db:e1:66:b4:98:8c:e3:61:82:2a:e3:86:61:9d:b7:
ed:0f:54:03:93:3a:82:d7:bf:6d:ff:a2:6d:9c:9c:
a3:dc:84:1a:0b:a8:0f:ad:13:c7:15:9b:93:3c:07:
ce:4b:ce:48:68:b4:47:cb:b7:67:58:b6:69:72:66:
21:20:68:08:af:2d:e7:59:02:cc:bc:a5:0d:90:e9:
93:e2:96:0e:a7:b3:07:c4:d5:97:19:54:ec:e8:ad:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:05:7B:78:42:26:39:CE:F7:6E:A7:81:5E:A4:E3:6D:8C:57:35
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:5d:3b:16:51:44:b0:fa:0c:08:1f:72:0a:8f:75:28:77:8c:
6e:de:be:93:82:68:dc:92:b5:70:ce:26:73:57:50:22:b4:86:
a5:91:f7:95:f3:69:2a:45:f0:db:38:2a:d5:b6:e3:f5:8d:4f:
0f:23:68:49:57:75:89:28:dd:64:2b:de:4d:f8:1b:88:8d:ee:
cc:7f:32:27:25:32:d7:0e:21:84:71:2d:09:ce:32:be:6d:4b:
40:4c:35:27:bf:8f:f6:5e:ee:8d:81:be:a1:01:64:88:c5:55:
e4:49:2b:f3:b2:6b:14:4c:db:21:fe:94:d1:e0:64:f4:da:d2:
06:93:5e:be:90:78:fb:7c:6f:8c:8e:96:12:55:ac:f3:0d:e2:
39:1d:b6:20:e1:85:42:2e:37:43:8c:7e:29:e3:18:17:0d:ff:
75:63:e7:22:8f:62:13:da:a2:e5:d2:32:68:16:e6:a9:a0:de:
c4:a0:b2:06:54:43:41:89:74:28:1e:1b:65:8c:04:0c:1d:a2:
c2:2f:80:a9:50:06:8f:c0:0a:e8:39:24:2b:96:97:46:67:37:
de:6c:46:4f:30:a9:10:71:a8:9c:4b:ec:09:38:2f:25:62:08:
2e:ad:5c:53:e7:03:fa:95:25:0d:c2:17:89:16:4c:a7:e9:af:
38:01:0a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:40 2025 by rpki-client