Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: 4ybrkFs33z2xOfUVMdZzUxsHj2JTrGeGpkbPaFbkgno=
Subject key identifier: 82:E5:90:98:BD:F0:1A:37:62:DE:6A:4A:ED:0A:7B:37:B9:DD:D5:9F
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 0197B77C59BC1814C8F6FE7D2EB745C99B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:09 +0000
Manifest this update: Sat 28 Jun 2025 17:01:09 +0000
Manifest next update: Sun 29 Jun 2025 17:01:09 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: STMHf+nUVQ+ZSVTtPZg4OTd1Sc4UPsTONFJdd0zIkeI=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:59:bc:18:14:c8:f6:fe:7d:2e:b7:45:c9:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jun 28 17:01:09 2025 GMT
Not After : Jun 29 17:01:09 2025 GMT
Subject: CN=82e59098bdf01a3762de6a4aed0a7b37b9ddd59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a2:33:fb:53:35:69:6e:a8:9f:26:8d:34:27:
56:02:4f:a2:9a:9b:1f:40:a0:9c:b8:dc:1c:0d:1b:
85:bb:f1:74:90:78:3d:ed:18:fc:b0:a1:16:19:c3:
af:35:9e:e3:ab:fe:3a:4f:94:7d:1f:8a:c1:db:c7:
a8:81:24:64:f9:21:d8:4f:ba:8c:6b:74:c7:8f:6e:
8c:89:4b:2f:10:a8:b5:44:54:8d:a5:57:e9:d3:5e:
e8:28:0c:0a:01:7d:a9:84:56:b8:74:a5:6b:e2:6a:
38:3a:44:df:5c:18:72:3e:c7:74:b7:19:91:15:d6:
e6:99:5f:f5:8e:aa:c3:36:2c:19:70:ce:2c:e2:ae:
b4:05:4d:6c:a4:d6:2a:8a:03:82:4d:78:6c:9f:dd:
70:79:4b:48:3f:8b:12:47:15:18:03:c4:b2:77:fa:
86:6e:85:61:49:57:e3:d5:ac:a8:22:26:e7:73:38:
0b:d3:99:91:5e:43:ff:de:79:4e:8d:72:be:4e:cf:
71:fe:89:d6:f0:ee:a3:57:6f:47:a5:79:6d:f1:7b:
04:6e:1f:4f:23:46:34:38:a4:c1:89:5c:25:b9:c2:
63:2e:34:a1:ed:08:ab:8d:ab:9d:65:dd:bd:81:3d:
ff:d5:c5:9e:a0:a6:fe:ce:af:3e:09:fa:12:a2:8b:
3d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E5:90:98:BD:F0:1A:37:62:DE:6A:4A:ED:0A:7B:37:B9:DD:D5:9F
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bd:24:de:57:19:4a:cb:5e:5b:15:90:15:16:6e:4c:17:7a:
53:3a:d5:d7:1e:01:c1:79:fd:81:a5:00:9c:b7:a3:97:9d:05:
b2:61:6e:8b:07:90:95:dc:b7:48:75:c4:0d:93:73:95:23:7b:
55:15:2a:0e:91:03:4d:cb:46:da:2c:4b:f2:54:11:4b:ff:11:
6f:c8:e7:52:9a:61:37:0e:9f:55:f8:45:1a:d2:54:c0:c7:c4:
f0:f9:da:f5:86:f3:c7:84:7a:0f:d1:2d:47:ea:4e:51:64:51:
5c:69:2b:95:06:e8:da:0c:84:1e:77:60:66:da:eb:18:d8:bf:
b4:e7:ed:02:63:8d:17:1e:f0:12:30:e2:67:9f:df:54:f7:d2:
66:63:07:eb:12:9f:9f:d9:95:33:db:76:14:17:d2:38:98:a7:
bb:e6:cf:aa:25:2c:9d:e4:02:32:a6:ab:36:b6:59:c1:a9:a1:
00:16:e5:77:a1:5f:d9:ed:60:51:24:17:5a:7f:6e:21:0a:f1:
ac:54:b8:e2:df:95:79:ca:c8:f3:de:f6:b3:48:0f:6e:89:70:
20:b0:67:d4:ba:2a:75:d1:dd:13:08:06:f7:31:82:51:d7:3e:
3c:30:96:a2:fc:42:31:18:c1:38:1b:d5:43:a2:1b:63:8a:73:
6b:ca:4f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:38 2025 by rpki-client