Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: 8t0v4krtk49PWPVNPEgrESODfPA9s+vfQ561aBwBMZQ=
Subject key identifier: C3:71:3B:42:47:FF:0C:29:A3:52:DE:BB:14:35:D5:9F:C3:1D:28:73
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0198D54E101E6AE4155D9363622A8A254251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1659
Signing time: Sat 23 Aug 2025 05:01:59 +0000
Manifest this update: Sat 23 Aug 2025 05:01:59 +0000
Manifest next update: Sun 24 Aug 2025 05:01:59 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: 12ovGCB7X3cDt0aOL5eUUsUWKtH9cjBXsqtA8Wrh5To=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:10:1e:6a:e4:15:5d:93:63:62:2a:8a:25:42:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Aug 23 05:01:59 2025 GMT
Not After : Aug 24 05:01:59 2025 GMT
Subject: CN=c3713b4247ff0c29a352debb1435d59fc31d2873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:43:e6:05:66:49:a7:5a:81:a1:88:9b:cf:
45:be:6f:b0:c7:5d:1e:d0:cf:5c:15:01:7e:2f:1e:
38:69:11:4d:f0:fe:2f:be:2d:41:56:42:9e:53:3a:
cb:98:56:a0:f1:ac:2f:cf:5c:e8:c5:7b:25:18:c3:
06:87:a8:78:1a:13:0a:75:cd:c7:64:67:c2:4f:24:
a0:43:34:c8:87:a5:22:a4:40:72:51:21:25:5e:ef:
2e:b1:94:1d:f8:0c:2a:99:75:32:6a:59:1c:a4:e1:
15:2f:f0:bf:e8:47:e1:e9:2f:88:fe:13:78:6d:a4:
ce:93:a3:8f:3d:7a:e8:ff:b4:39:ff:32:99:fe:cd:
8d:6f:49:35:40:a0:73:9c:12:2b:88:1d:d7:d7:ee:
1b:b0:ad:51:0e:39:20:98:5d:97:f8:16:79:05:e7:
84:74:d0:ad:8c:f5:4c:f4:f5:78:98:41:50:3a:3b:
1e:fa:c7:ef:c3:35:b9:c5:7d:6f:86:59:ef:76:27:
ee:3f:00:e0:e1:0b:f9:05:80:d3:81:7e:8a:0d:b5:
07:7d:c6:85:a4:48:9c:00:5e:ee:e1:8b:15:f7:ce:
65:20:59:67:ed:c0:c4:f6:b4:45:ec:77:50:5f:8f:
4a:c5:da:d0:ee:84:1c:2a:16:60:b0:26:d3:f6:bd:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:3B:42:47:FF:0C:29:A3:52:DE:BB:14:35:D5:9F:C3:1D:28:73
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7e:5e:e6:31:8c:03:f7:d5:3d:ea:ff:b2:4b:77:21:c9:d3:
ad:5d:65:fe:ef:f5:14:e2:52:83:f5:16:ed:9d:85:6d:61:75:
bf:6f:a3:7f:6d:9a:15:71:3b:3d:fe:1f:0a:ab:79:c5:ca:a4:
4d:46:71:07:9f:1e:d3:23:81:f0:3f:ca:44:2a:f8:fa:2e:5a:
77:86:cf:a9:9d:79:0e:9e:e1:ae:50:af:84:e5:d1:72:2d:0c:
9b:2c:96:e7:b3:3a:e8:7d:00:6e:82:e1:75:58:ba:bc:2d:90:
28:4f:fb:14:80:0f:d7:a1:28:0d:da:77:b8:c5:e5:e4:80:71:
ec:a6:2b:83:f2:08:cd:1c:e0:15:cb:d0:6f:23:c2:84:e9:e9:
29:b4:f8:88:d1:07:84:2e:0a:4a:36:82:c2:80:de:c5:70:d8:
e1:2c:2f:7f:6a:02:f2:21:db:5c:51:59:20:56:73:fd:75:c2:
d5:8e:86:01:92:cb:44:1e:c9:dc:3b:5c:65:96:14:e1:16:3f:
79:9f:22:bc:01:d5:98:e1:89:f0:6b:d2:ac:e0:90:51:a1:14:
32:fb:56:ae:74:e7:d9:5a:a1:36:4f:0d:03:7c:4f:8f:e9:cf:
5d:d3:9e:ea:9b:ea:98:b1:9b:81:63:b8:77:9e:4f:3a:c7:c6:
ce:c5:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:21 2025 by rpki-client