Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
File: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft (raw, json)
Hash identifier: +tcaz35YzsIj5Uo01xn/vax7tw9GTAWPsg2bfXW6lgk=
Subject key identifier: 37:7F:8C:86:87:40:E2:39:CC:66:FF:05:A2:88:84:E7:4F:C9:A6:9F
Authority key identifier: 3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
Certificate issuer: /CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Certificate serial: 0198D697EBD7D0319361823D11A74602DFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
Manifest number: 0AE8
Signing time: Sat 23 Aug 2025 11:02:17 +0000
Manifest this update: Sat 23 Aug 2025 11:02:17 +0000
Manifest next update: Sun 24 Aug 2025 11:02:17 +0000
Files and hashes: 1: 1-zwO4Bnz3Ual-zgnG201JvaWkY0.roa (hash: d0O7JzfUI0auiFcqxl2U8Q+1vT7/+BPs1dhy7hNLrrs=)
2: Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl (hash: 3CcVfUTiCvlQuSj8tGIJdDhI2Tdiet2fw8Vk22Pu5HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:eb:d7:d0:31:93:61:82:3d:11:a7:46:02:df:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edd551d0a636db4b5077c648d9d87bdadaab81e
Validity
Not Before: Aug 23 11:02:17 2025 GMT
Not After : Aug 24 11:02:17 2025 GMT
Subject: CN=377f8c868740e239cc66ff05a28884e74fc9a69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:25:1a:52:2e:14:36:49:80:4f:5a:73:1e:
e0:55:36:7d:c8:49:3c:f2:84:f1:42:2b:87:6c:6a:
85:51:a0:d8:22:2d:32:49:77:b7:cb:89:d6:9d:78:
87:d9:83:62:59:54:d9:2e:c2:60:34:6c:fe:c9:b3:
7b:7c:d6:a2:10:7d:6c:37:c4:bc:be:d6:41:61:dd:
eb:4f:68:eb:fa:d7:a5:44:1e:f3:72:6e:5c:5d:aa:
19:98:94:28:19:50:cc:d0:7b:20:63:10:66:ff:c6:
82:38:ad:5e:14:95:ac:d0:83:34:d9:2f:a0:c0:80:
99:91:22:11:5a:09:93:2e:7e:40:03:be:f0:73:c1:
e6:f0:9d:22:7c:f9:18:d4:a6:94:01:7c:7f:e5:58:
63:1c:fe:25:71:2c:ba:d6:45:65:e3:44:d1:8d:3e:
e5:50:30:37:3a:c5:01:81:fd:26:9b:e3:63:a3:0c:
db:be:c1:e0:b7:1d:5a:d0:1b:05:c8:5f:28:ff:07:
4d:af:68:96:22:92:aa:75:10:3f:48:a5:2d:1a:05:
8e:9a:1c:7a:7f:5a:21:89:06:13:97:d9:91:23:cb:
ce:d0:36:32:f1:51:36:d4:f3:d5:98:de:57:b4:e6:
f8:a8:3f:21:a0:f0:32:69:14:70:ff:26:a4:21:a6:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7F:8C:86:87:40:E2:39:CC:66:FF:05:A2:88:84:E7:4F:C9:A6:9F
X509v3 Authority Key Identifier:
keyid:3E:DD:55:1D:0A:63:6D:B4:B5:07:7C:64:8D:9D:87:BD:AD:AA:B8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4ad364-f991-4585-9047-11adc40e44ce/1/Pt1VHQpjbbS1B3xkjZ2Hva2quB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cf:6f:18:87:da:35:88:54:c8:f9:ce:a3:56:f1:97:cb:bb:
41:17:de:8f:2b:38:8c:cd:a1:9c:6a:45:50:51:db:56:43:3b:
b5:81:7b:89:22:dc:a7:92:e8:c0:11:fe:31:3b:42:6d:92:ac:
db:82:fc:27:8a:da:ce:f8:51:b1:8e:01:f6:5f:80:bb:42:5c:
f7:10:ac:f0:6a:53:bf:90:80:67:99:d5:c1:0a:99:bd:4e:49:
e5:23:ae:aa:5d:d4:3e:39:9d:25:22:75:57:1e:d3:47:cb:1b:
ad:51:2a:c3:20:19:35:d2:53:ef:b3:7a:72:0e:01:a6:96:b7:
79:bc:ee:af:23:2e:7b:d9:15:a6:e3:ba:d9:23:99:d2:8c:dc:
b3:4f:5d:87:dc:29:4c:43:c6:e4:aa:5d:69:b4:04:cc:c9:6b:
be:1c:44:04:9b:ff:bd:bd:b0:22:b5:05:fd:b0:6f:ff:e7:64:
c1:4b:2f:9a:6e:45:98:ab:ee:fe:c8:22:30:98:7f:4a:f4:ef:
b4:39:cf:28:57:bd:c9:29:fc:6e:3c:ac:fb:24:91:55:39:74:
c0:fa:cf:87:1f:a5:13:2c:e0:87:e0:8f:09:62:50:d0:b2:8a:
e9:34:00:f7:1a:3e:f5:23:7b:1f:79:72:9f:82:74:ce:2b:7b:
0e:97:3e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:43:55 2025 by rpki-client