Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
File: Pt7grog0cFCIgFBEvnXHQDsdx-I.mft (raw, json)
Hash identifier: ZlX+ZvqtNmvKh5ib4wvkFrSmugn5JljO2HRLaZJoXw8=
Subject key identifier: 9E:85:D2:8C:85:66:40:47:C5:BD:4D:2E:CE:A9:2E:2A:68:E3:9D:74
Authority key identifier: 3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
Certificate issuer: /CN=3edee0ae8834705088805044be75c7403b1dc7e2
Certificate serial: 0197B6A1C8C9C91BCAB6281AD57E230931C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
Manifest number: 124A
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: Pt7grog0cFCIgFBEvnXHQDsdx-I.crl (hash: 44Ewxraf7azbH5vm4RDIeT0yHdwQwYhOXDN08ZdYLyc=)
2: f4uXUqTz6EMLfxnYPkQ3ht2dRz0.roa (hash: WwKae4E8mCPYphGvXV9B/QCbohcENp4wZ1ekmYvPPps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c8:c9:c9:1b:ca:b6:28:1a:d5:7e:23:09:31:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edee0ae8834705088805044be75c7403b1dc7e2
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=9e85d28c85664047c5bd4d2ecea92e2a68e39d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:14:53:1a:a4:61:09:0a:ff:ea:93:6e:4a:e3:
ef:47:49:f9:2a:3a:ef:18:bb:f1:5c:47:27:5e:f7:
fe:7e:d3:e7:57:2c:f1:45:ef:ef:4e:4a:ad:3f:e8:
2d:a7:cc:b8:59:f2:67:86:ab:1d:d5:70:28:ea:6f:
1f:fb:24:89:91:b3:de:2f:f3:16:49:e4:8f:83:26:
0a:70:60:2d:56:76:d7:85:e3:97:94:77:09:e5:58:
b2:11:7a:35:98:88:09:ee:13:7d:21:da:be:15:73:
2e:f9:39:c3:bf:9c:4e:a2:0a:22:cf:6f:e0:7e:13:
81:ac:d7:91:57:dd:ce:49:6b:49:d3:47:13:dd:c8:
94:f3:a0:66:c9:b0:70:59:f7:7e:7c:d1:23:9f:13:
1e:b8:a2:69:4d:ad:19:db:33:7e:f2:2a:35:ce:09:
4d:e1:e5:38:08:fc:3e:74:ea:78:d6:41:40:94:05:
01:af:59:6c:8f:4c:c0:b0:b5:c5:eb:35:78:33:a9:
e1:9c:4b:49:f3:82:92:e6:53:f2:6b:88:64:98:da:
ce:84:0e:88:26:21:1f:ec:8b:26:1e:1e:dd:fc:99:
87:3c:87:63:e9:89:c5:60:66:05:2e:31:6f:9d:f7:
46:cc:29:f6:d9:28:98:ee:08:9d:8f:0e:d4:7f:a4:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:85:D2:8C:85:66:40:47:C5:BD:4D:2E:CE:A9:2E:2A:68:E3:9D:74
X509v3 Authority Key Identifier:
keyid:3E:DE:E0:AE:88:34:70:50:88:80:50:44:BE:75:C7:40:3B:1D:C7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt7grog0cFCIgFBEvnXHQDsdx-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/514cf4-126b-4cc5-b4d5-79ab48d83bab/1/Pt7grog0cFCIgFBEvnXHQDsdx-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ad:e4:55:c4:3a:37:46:24:73:d2:5d:49:d6:75:49:24:ed:
5c:50:a5:52:0d:8b:af:00:ee:2c:5e:78:b7:16:1d:5e:9d:8a:
05:48:cf:84:2d:0f:67:32:5c:35:00:76:a3:ba:ed:be:ae:e1:
52:b8:8b:16:aa:34:12:d7:fc:e9:ac:72:b2:5b:7c:e4:9f:23:
27:e4:63:f6:8c:39:6d:be:48:ef:3b:1a:2c:d8:05:2d:30:c7:
22:af:57:c1:09:ba:e1:b5:28:b1:f6:e1:3b:af:61:46:01:1b:
fd:12:8b:79:55:a6:37:d4:78:e6:dc:5f:4a:97:0d:69:52:7e:
05:24:40:cf:18:4c:bf:f5:27:04:c0:5c:58:ff:53:74:65:b1:
90:08:3e:87:be:01:56:bf:e3:96:93:b5:5f:da:b6:76:f0:c4:
50:02:60:4d:c6:8f:9a:bd:dd:7d:6e:4f:c7:73:4e:5d:fc:09:
93:10:fb:1d:d4:b1:80:6b:6e:00:66:06:66:71:32:15:11:4f:
b0:6c:fa:c3:48:4d:44:70:d1:3b:57:4b:5e:65:a3:f6:5a:ea:
aa:b9:8d:76:0c:cc:ed:07:a6:1c:9a:ac:2e:93:22:fa:db:50:
9c:ea:54:b9:8d:35:76:d5:3b:60:cb:b6:9e:85:ca:b6:53:f5:
ed:31:21:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:53 2025 by rpki-client