
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: /tvv0iFLMjG35nD+0klUztxzXWAtng1wExz9fX9W7MU=
Subject key identifier: C4:89:C9:79:3E:AD:3F:F9:2E:34:42:C7:31:37:0B:FB:AD:30:7B:F9
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 0197C9F171DC8F5932ADD08470516F7D5588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0AC4
Signing time: Wed 02 Jul 2025 07:02:13 +0000
Manifest this update: Wed 02 Jul 2025 07:02:13 +0000
Manifest next update: Thu 03 Jul 2025 07:02:13 +0000
Files and hashes: 1: 1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (hash: lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: e3QL6VQ2jobCqpZXIglAugRz/tXcSnQsszIYA1CuEwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:71:dc:8f:59:32:ad:d0:84:70:51:6f:7d:55:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Jul 2 07:02:13 2025 GMT
Not After : Jul 3 07:02:13 2025 GMT
Subject: CN=c489c9793ead3ff92e3442c731370bfbad307bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:b0:a3:7a:70:b1:32:20:dc:d7:b8:31:da:
47:26:36:0a:5b:ac:f6:e0:06:ab:b2:5e:cc:5b:96:
fa:91:0f:09:b8:a4:44:38:88:86:94:0e:3c:da:33:
58:a6:e3:1f:c6:ed:68:17:e6:88:f1:49:0e:cb:57:
b6:7d:0c:ec:fa:6d:13:e7:8a:05:87:ef:e7:e9:62:
72:48:18:b1:b8:22:f6:67:58:e3:23:13:f3:fc:78:
6d:6d:73:b3:a6:9d:16:1a:51:8f:8c:d5:44:ee:96:
24:17:2f:12:e4:2a:d5:9c:fb:79:0c:aa:93:53:ba:
ab:38:d6:f0:91:c6:ec:dc:ab:4c:93:81:be:7c:48:
4b:73:ac:bb:fe:b8:ed:f8:3c:f7:8a:99:7d:de:56:
fa:52:56:3c:a3:57:fe:8d:51:e4:06:0f:cd:84:97:
d8:a3:47:a1:3a:97:88:c0:4d:c3:cb:30:d9:36:ad:
86:81:f3:06:67:30:ee:01:6a:48:dd:6a:ab:0e:b9:
a5:b2:f9:02:ee:a2:6f:49:49:6f:ad:a8:61:9d:75:
b5:8c:eb:b9:89:62:5e:0e:47:2e:50:ca:af:71:95:
ea:36:ea:b7:6d:52:a1:7d:7c:b4:3b:94:68:f2:0f:
04:c1:3a:c8:39:00:63:d7:dd:e9:4a:98:a9:d5:69:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:89:C9:79:3E:AD:3F:F9:2E:34:42:C7:31:37:0B:FB:AD:30:7B:F9
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:31:c8:7e:b0:6f:b4:f3:d1:bf:f8:bb:00:cb:fd:a9:61:
e3:a6:15:76:0a:e7:58:50:f3:b1:f1:78:e7:e0:71:e6:67:9b:
22:dd:a7:d8:b2:9d:90:ac:54:c7:9b:18:99:21:10:e2:9c:46:
0b:0b:f6:dc:88:7e:d8:ad:78:b1:a8:b1:22:78:d9:cc:3a:b5:
bd:8e:e2:20:f9:b9:91:3b:32:74:70:b9:47:e9:90:2c:8e:0d:
ae:1f:1c:cc:51:5c:69:bc:e3:6e:28:f0:0a:c0:85:f9:86:4c:
fa:5b:0c:5f:42:b6:1b:01:54:7b:5f:9c:6f:bf:0e:85:de:c0:
b5:bc:a4:8e:bc:7d:4b:e5:49:e9:d3:43:8f:cf:6b:90:9c:6e:
0f:74:2b:c1:ff:85:ea:63:32:ac:1f:53:c1:2c:e2:10:e3:83:
02:8c:c5:d9:5d:28:d0:40:a4:5d:c0:98:52:38:ee:e5:67:92:
02:d4:ca:15:5e:a5:69:28:4e:73:89:86:b6:84:7b:1e:fd:ed:
63:4b:38:7f:95:cd:45:fa:19:47:13:ef:a9:4b:03:05:5b:ac:
b5:f2:4f:73:e0:7f:28:c4:e0:1f:1a:54:06:7a:25:61:df:43:
65:7b:fd:96:f2:2d:97:2e:d0:70:64:fd:a6:ba:00:83:89:5e:
4c:e9:27:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:28:59 2025 by rpki-client