Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: AC1UnkLjKNbcknrA3F0/aaYXxiGCCRqb9aOPL3oyXsc=
Subject key identifier: 2B:BA:72:3A:C3:F3:E4:E4:21:5B:1B:CD:B7:72:01:5E:CC:6C:F4:53
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0197B77CF62E9F364B393682E6DF7952EE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 15C5
Signing time: Sat 28 Jun 2025 17:01:49 +0000
Manifest this update: Sat 28 Jun 2025 17:01:49 +0000
Manifest next update: Sun 29 Jun 2025 17:01:49 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: UUhg8RlxJXnApK+6/5XaI81ia3/YZD+Ysxm/TBp+8WQ=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:f6:2e:9f:36:4b:39:36:82:e6:df:79:52:ee:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jun 28 17:01:49 2025 GMT
Not After : Jun 29 17:01:49 2025 GMT
Subject: CN=2bba723ac3f3e4e4215b1bcdb772015ecc6cf453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:ba:ce:1d:68:81:5e:50:cb:60:d0:c5:87:
4b:02:dd:14:32:5a:00:8e:3a:44:2f:91:28:60:4e:
9d:3e:1e:e6:ad:91:a0:79:35:59:24:10:40:fa:4d:
45:c4:bf:63:af:49:fd:13:d7:f6:a1:f6:75:4f:9a:
a9:88:dd:6d:a8:58:a1:1f:23:cd:c2:3e:4f:50:9b:
ee:ca:90:bd:42:50:89:cd:d7:97:6b:14:c0:41:fd:
64:a1:41:b5:6c:97:a2:cb:14:69:4f:86:1d:91:8c:
99:24:98:48:f8:df:e3:79:b5:e6:84:09:fe:80:7a:
90:11:7a:44:20:8e:bc:d8:9e:7f:30:57:62:77:43:
74:42:97:7d:dc:5f:6b:ed:3c:49:8b:ca:f1:13:e7:
57:87:46:16:05:4a:c1:75:b4:4f:bc:0b:d8:a6:82:
d9:93:b7:72:56:12:2e:ff:b2:dc:27:c1:c7:01:72:
e5:d9:74:6b:42:3b:a5:7a:5a:8f:07:9b:a0:35:4d:
bc:38:15:33:e0:c4:37:b1:5b:ed:7f:45:04:a2:47:
43:02:bf:6b:db:0b:31:64:0d:a1:3b:7f:95:fc:1c:
32:4e:fd:c8:b0:78:d3:27:b5:63:37:b5:bd:f4:4e:
c9:3d:8f:74:e3:ce:83:46:6c:60:57:d6:c0:a1:d9:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:72:3A:C3:F3:E4:E4:21:5B:1B:CD:B7:72:01:5E:CC:6C:F4:53
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:9d:0f:17:a3:5b:5c:a5:d0:fd:22:f0:88:82:5f:d6:1f:
7d:3e:47:1e:da:87:2c:f2:d7:2b:ab:4a:0d:d6:c0:3f:bd:b6:
64:e8:f7:94:03:f0:d6:7e:a0:ca:0e:6f:7d:66:1f:11:14:0b:
dc:f1:ff:73:28:9c:08:bb:e3:7c:41:3e:ef:b9:25:92:12:70:
02:01:cb:b4:8f:77:75:24:61:17:41:7a:3b:d0:91:4c:26:37:
0e:68:7d:f5:d5:7f:fe:91:34:35:30:a3:b5:ea:a9:d2:f0:0f:
fc:ae:a2:f5:57:b8:4c:9c:db:16:2b:aa:83:70:51:b3:f9:44:
cb:71:a4:56:e6:42:2a:d6:2f:55:a9:72:55:da:41:11:cb:19:
c7:da:45:e0:42:4d:bd:bd:98:53:9a:76:93:1c:a4:32:f1:2c:
63:6d:78:bd:f1:f6:54:01:a0:b1:b2:1a:af:93:f5:15:6d:df:
cf:72:3a:0d:c0:ec:a0:32:b7:02:4b:38:78:fa:1a:ee:11:1a:
25:e5:3b:cc:8a:c8:bd:bb:fc:16:f7:50:7f:46:0f:19:b7:f6:
6b:0b:99:2e:a0:f8:62:45:7e:5a:fa:70:69:f1:5c:06:c2:d1:
e8:16:37:d3:4b:b0:57:85:07:af:e3:62:5f:e7:6d:2b:7b:e3:
77:2f:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:14:38 2025 by rpki-client