Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: q65BY1iPObdPlS+nPn8jJlQyxYfQdL2jsuHKyhRIxxY=
Subject key identifier: EA:85:9F:02:8E:16:ED:29:1E:34:15:0D:29:E8:35:0C:ED:10:61:15
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 0197C982B028F2B632F68027A827C6A44773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 05C3
Signing time: Wed 02 Jul 2025 05:01:14 +0000
Manifest this update: Wed 02 Jul 2025 05:01:14 +0000
Manifest next update: Thu 03 Jul 2025 05:01:14 +0000
Files and hashes: 1: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
2: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: vJT5roacTeG3Do9iKENWQDe4dGGCFtMUQ4K2TFCG19I=)
3: rEm8DnSRjF-eOZ8W-19-W5YBOlI.roa (hash: oKxbV7NuBt8nP02xM3KhblNP7v+2Q4dV/sQu1W1Wh/I=)
4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:82:b0:28:f2:b6:32:f6:80:27:a8:27:c6:a4:47:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Jul 2 05:01:14 2025 GMT
Not After : Jul 3 05:01:14 2025 GMT
Subject: CN=ea859f028e16ed291e34150d29e8350ced106115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:5e:cc:84:ea:b7:24:74:c6:bd:65:ef:a7:
5a:ed:bf:20:db:3d:47:21:b8:c0:cf:85:ea:41:2c:
b6:d2:56:cb:62:8a:8b:71:e1:c5:1d:59:57:d8:c4:
44:52:39:03:c3:03:ee:d4:da:a4:9d:34:ae:d2:a8:
88:65:52:1a:f9:8c:df:7b:9c:44:66:d8:b5:61:ee:
fe:3b:cd:5d:cd:db:67:79:c0:6b:5b:84:0f:51:4b:
4f:7f:7e:a3:2b:cd:cb:c2:90:e4:17:6e:5a:f8:57:
54:27:30:7c:89:1d:70:44:91:47:21:87:b4:24:21:
f0:b1:55:e6:68:b9:8a:7d:5d:cb:65:9c:05:cc:6c:
7f:00:eb:a3:39:35:9d:20:45:6f:1c:29:47:23:ab:
ba:1e:ea:b4:6a:38:1d:91:b2:99:fd:6b:54:e3:11:
6c:c6:a5:4b:09:12:2f:a1:d5:0c:f6:d0:93:c9:1d:
65:da:b5:75:d2:d4:a0:7f:13:cd:33:b6:64:b6:49:
67:ca:23:5b:e4:1c:dc:ff:24:b2:0f:cc:73:54:80:
c3:d6:7b:52:7c:d5:cb:89:91:a0:3c:cc:7f:6c:34:
2b:05:60:61:1b:b7:62:e7:41:a9:61:4e:bf:32:c3:
2c:59:88:82:30:f7:0b:62:b3:c3:76:4e:bb:b9:4d:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:85:9F:02:8E:16:ED:29:1E:34:15:0D:29:E8:35:0C:ED:10:61:15
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:18:6d:71:87:f7:f9:46:33:e5:62:5d:e5:66:21:a4:f0:
e1:f6:68:3b:a6:34:c6:39:e0:f6:2f:f0:25:2e:9b:b6:9f:de:
09:1d:2f:5b:48:56:2e:13:d6:08:99:6d:97:d9:59:40:63:d5:
67:f0:bc:16:8f:93:f4:b7:19:2c:d3:fd:32:77:2a:48:3c:95:
8c:ab:21:15:81:7b:d4:1f:e3:a3:bb:13:3e:a3:2c:4e:e6:b3:
eb:22:11:09:49:73:65:46:e7:5d:6a:a4:fd:ff:81:fd:e3:bc:
9d:bd:b2:33:57:47:a3:dc:99:32:72:d4:fd:39:ad:89:93:e2:
d9:44:71:e6:74:5a:a1:99:7c:de:b6:48:14:85:b9:1c:2b:13:
5f:6f:96:58:b4:42:1e:38:f5:b6:55:48:82:ca:f0:77:0c:ff:
db:7a:c6:da:e8:db:83:49:c3:91:55:8e:b4:a4:0f:98:c0:01:
88:82:91:3f:0e:a6:ab:c9:55:eb:ff:24:1b:00:b2:7f:47:53:
20:0e:4a:0d:10:47:48:a0:b6:fe:e8:4f:bb:de:a4:d1:87:c4:
c0:82:fa:cd:94:69:4f:70:21:ff:e7:8d:89:0c:6c:c7:89:8a:
4d:58:7b:b5:3d:e3:e4:ba:f6:29:99:64:d1:e5:f1:19:6b:4f:
a6:3a:c6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:30:42 2025 by rpki-client