Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json)
Hash identifier: jbeVsqRMUXJn89Rex+sEh7cYCCNC6WTsDUgCdXDMUic=
Subject key identifier: A7:E6:D0:6D:2D:CF:49:38:08:4B:86:99:42:25:24:74:ED:0E:89:71
Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d
Certificate serial: 0198D4724813B29D232515617DB46DEAED82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
Manifest number: 1653
Signing time: Sat 23 Aug 2025 01:01:55 +0000
Manifest this update: Sat 23 Aug 2025 01:01:55 +0000
Manifest next update: Sun 24 Aug 2025 01:01:55 +0000
Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=)
2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: snDsaNu7jbMPXe3NqsW9bbcEw/YXGSY3ElohXZfT8qM=)
3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:48:13:b2:9d:23:25:15:61:7d:b4:6d:ea:ed:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d
Validity
Not Before: Aug 23 01:01:55 2025 GMT
Not After : Aug 24 01:01:55 2025 GMT
Subject: CN=a7e6d06d2dcf4938084b869942252474ed0e8971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:dd:fa:c0:03:07:51:b1:79:36:28:72:f4:5a:
ce:59:31:45:04:3a:ef:4c:e0:5d:d5:8d:9e:4b:59:
ed:51:1a:a9:9f:92:39:71:6d:55:14:84:69:5b:cd:
c0:78:0f:09:f9:42:7b:69:a1:dd:59:33:10:ed:7a:
82:a4:b4:c0:ed:44:95:45:75:9a:32:96:4f:f7:3b:
36:a0:9a:08:c0:f5:34:19:e3:5a:e3:e9:3a:f6:ec:
7e:e9:f2:31:5e:b1:b2:33:31:fe:f3:e3:b2:36:ee:
49:ad:92:2d:83:6a:b8:aa:d2:9e:0a:e5:83:05:3b:
63:40:5e:a9:33:12:f0:ad:97:84:24:2a:35:d2:48:
ec:c8:cc:e6:c2:07:d3:72:3d:0a:03:d6:61:08:13:
af:f3:39:c0:17:ff:00:ae:7f:1d:da:70:7c:0a:23:
8e:03:1a:b8:a7:a3:dc:e2:d3:9a:c8:d4:24:5f:6e:
85:fc:2c:a3:6a:86:f9:2f:32:e1:1c:dc:a3:86:c7:
00:e6:55:6d:89:35:8d:59:53:13:a1:65:3f:98:0b:
f2:de:0b:54:48:b1:a7:2c:4b:5b:63:5f:d7:a7:3c:
eb:1b:f8:9b:0c:11:5e:a3:37:a6:ad:93:62:9d:ab:
4c:f4:bb:c7:60:96:b0:a7:a0:1f:ee:99:43:f9:cc:
5a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E6:D0:6D:2D:CF:49:38:08:4B:86:99:42:25:24:74:ED:0E:89:71
X509v3 Authority Key Identifier:
keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:9d:1f:43:8e:dd:68:36:a8:68:17:00:ca:7e:6c:18:e8:
45:67:47:94:e3:6a:e3:70:8a:80:cc:64:e2:c1:17:9e:ae:34:
95:d9:3b:23:bc:3e:c1:1b:d8:00:f0:da:6d:af:b9:8f:86:8c:
a4:f8:f8:07:6a:19:eb:cd:e1:56:cb:6b:d9:8c:c1:d6:6f:a3:
50:44:1a:6f:93:92:a5:6c:b4:94:3e:24:9e:34:62:37:0e:91:
90:11:d6:9a:a7:cf:ab:33:94:cc:6f:e8:3d:86:00:7c:a5:3f:
f3:fa:29:ad:f3:72:26:26:ec:27:ab:84:13:23:e6:a3:67:be:
28:2f:ae:e2:c7:da:47:9e:d3:ad:67:fd:55:8b:f9:88:e1:c7:
eb:6e:e2:ff:b1:5b:61:57:ba:0a:96:99:cf:88:0d:f2:52:35:
a3:fb:19:d8:c8:51:a8:fa:8e:15:ae:e0:cd:c0:a2:99:cd:2c:
53:96:47:97:3d:47:c3:40:71:64:2a:5e:09:f5:a6:81:4f:3e:
f1:be:2c:f1:19:7a:06:f1:7b:84:82:aa:ec:18:13:38:dc:d3:
fa:78:37:ec:9a:ab:d7:eb:56:40:7c:31:bc:d9:bc:6a:d1:c4:
42:08:c9:14:25:ab:b6:67:81:6f:be:90:2a:27:46:5a:2c:d6:
65:52:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:27 2025 by rpki-client