Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
File: pTJy83vudp-iPqZUueOPsCNGjZI.mft (raw, json)
Hash identifier: ABvPVMpcpWl09BaBfYNvpQdk1eqtb8Qi43aNTulhPWY=
Subject key identifier: C7:E6:A3:8A:0C:2A:9A:63:0E:81:1A:13:F8:AE:EB:CF:49:89:DE:20
Authority key identifier: A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
Certificate issuer: /CN=a53272f37bee769fa23ea654b9e38fb023468d92
Certificate serial: 0197B7EA353CA38A0F03112473B17DE14950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
Manifest number: 016B
Signing time: Sat 28 Jun 2025 19:01:08 +0000
Manifest this update: Sat 28 Jun 2025 19:01:08 +0000
Manifest next update: Sun 29 Jun 2025 19:01:08 +0000
Files and hashes: 1: kl_zb47rnd8AaAP4vBoCuK61hPA.roa (hash: e2T6+pFfv8tCYwWL0QcrJLWjz1NsTR4Qy2fxVQvCN8Q=)
2: pTJy83vudp-iPqZUueOPsCNGjZI.crl (hash: 2JTvQXP+x8AohUtNFQ0qqP62ClLK1JiyNE6ezV10ECM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:35:3c:a3:8a:0f:03:11:24:73:b1:7d:e1:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53272f37bee769fa23ea654b9e38fb023468d92
Validity
Not Before: Jun 28 19:01:08 2025 GMT
Not After : Jun 29 19:01:08 2025 GMT
Subject: CN=c7e6a38a0c2a9a630e811a13f8aeebcf4989de20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7f:d7:97:d6:99:5e:df:bf:4e:97:cb:f5:04:
74:f0:c5:5c:c2:d2:00:7f:ed:81:ba:eb:53:5d:1c:
09:30:54:1c:51:f7:53:54:81:52:e1:d3:24:b5:d0:
9f:b0:14:09:a6:cd:af:98:5e:08:f3:0f:a4:fa:4b:
15:c6:1f:4e:d8:18:a7:18:35:15:9e:5a:54:ac:82:
8a:32:b4:ad:53:df:f2:63:1d:60:d7:52:24:ff:07:
cf:62:dc:6e:04:73:fa:b8:3a:a5:5a:5e:20:24:a3:
e7:f3:ea:c9:21:75:7e:c3:f9:89:d8:14:c6:4e:c0:
85:a3:c6:9d:66:fc:90:74:cb:e1:f8:17:99:c8:0d:
de:a9:8e:98:81:7a:1f:ed:74:c5:dd:9d:7b:48:3f:
1f:07:af:96:b7:73:56:7b:dc:8f:63:6c:37:9f:69:
b6:b0:9b:2c:3d:29:8f:c2:9a:0e:7c:2d:ad:8c:ea:
a4:9b:be:a9:58:ef:4e:05:8f:74:30:26:89:f7:47:
52:0e:c1:48:fc:4f:f8:26:8d:16:05:14:35:b5:18:
15:c3:e0:03:88:be:08:29:df:ec:21:6a:86:1f:bc:
26:76:56:46:ee:e6:2a:8b:5d:8d:f0:f6:9c:ea:64:
0d:01:15:7c:f2:f4:81:81:a7:fb:5f:df:bc:ce:d2:
5d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E6:A3:8A:0C:2A:9A:63:0E:81:1A:13:F8:AE:EB:CF:49:89:DE:20
X509v3 Authority Key Identifier:
keyid:A5:32:72:F3:7B:EE:76:9F:A2:3E:A6:54:B9:E3:8F:B0:23:46:8D:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTJy83vudp-iPqZUueOPsCNGjZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f3f06d-4b27-4981-95c6-2f56a5a9a756/1/pTJy83vudp-iPqZUueOPsCNGjZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:af:1f:6b:56:80:4d:47:8d:48:f5:ce:e3:fb:7c:d4:b3:a7:
57:b2:5c:71:e0:a9:58:fd:8e:4f:19:4b:c6:a1:c3:be:f2:de:
96:de:a1:bf:0f:c4:bf:c4:84:44:f6:b2:e4:18:32:42:0c:3c:
62:2c:6c:10:31:9d:b5:e1:3f:8f:1d:03:a2:6b:dd:28:a0:41:
eb:90:d7:a8:b1:f6:a2:d6:3a:52:a2:a8:5e:31:d0:e4:8c:38:
a7:ea:e3:89:bc:13:12:47:f9:36:f6:2d:91:92:d9:1a:5c:a5:
ac:0b:50:f5:1c:35:86:ad:bd:21:25:f4:4d:05:96:bb:b6:21:
b3:59:ea:a0:2f:8a:7e:f7:c3:81:bc:c7:b6:cb:d3:43:03:42:
eb:a7:3b:87:12:9d:6b:46:0d:94:9b:c8:27:20:d1:1b:c4:d3:
8e:e1:b0:90:14:fb:d0:17:ba:bb:da:43:07:c0:40:f9:d1:cd:
3f:70:0b:2d:02:96:3a:39:dd:df:2a:2d:09:4d:b8:9c:fc:cf:
e4:9f:89:d2:19:4a:67:96:cc:18:d9:d3:a9:26:4a:d9:58:79:
03:ee:9c:be:77:0c:ab:53:df:5d:e8:78:3f:36:30:3e:22:fd:
0b:80:06:ca:06:ee:8e:d5:8d:ad:ae:16:e6:d3:2f:87:f8:82:
c0:de:32:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client