Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
File: Pznde9c8PhuifReNVcJvipbNtKk.mft (raw, json)
Hash identifier: MLxWHQTEEllxctH8LcUYxNPZPty+X9c0hc4qHaZSXvs=
Subject key identifier: 48:38:B6:DC:0A:08:38:21:88:F4:DA:4B:4D:BC:A3:9A:EA:8E:04:E5
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 0197B77CD74237B04F3AC483BABF3191C530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: Is-TnbCqT0sZMmHzE0DOERlyuyA.roa (hash: ZwxuieDg5KwfHUePylCdnkHIJ18zptrPuU4i92UJi24=)
2: Ng8LWoHpOFI_Feu0HqtCDWsTm2U.roa (hash: T0h4+Xqtg7Y1viZ/7IiB5TqFGqH+QZrG/sWcCxZLrOw=)
3: Pznde9c8PhuifReNVcJvipbNtKk.crl (hash: hk2Apse0+eToLYfkq7Oqsf3ucKKOetYsMX/aUwuq/Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d7:42:37:b0:4f:3a:c4:83:ba:bf:31:91:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=4838b6dc0a08382188f4da4b4dbca39aea8e04e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:6a:12:84:86:c7:df:bc:25:df:fa:06:8f:
68:31:90:0a:04:ed:22:8a:20:c6:34:b4:c3:02:c1:
11:77:a9:38:ea:09:25:44:94:1a:ed:d2:73:b0:61:
ce:c0:2f:74:8b:9f:39:4c:03:bb:5f:1d:4a:ca:49:
9a:a5:af:7e:af:38:27:25:0e:3d:d5:77:b0:47:04:
04:3a:57:ee:f4:b1:27:e8:2e:a9:e5:9f:10:95:3f:
e6:e8:a6:05:e3:7b:ae:b2:7d:a2:af:ba:fe:e0:b8:
7c:ec:6e:45:02:93:7f:52:f4:3e:4b:76:e0:b1:63:
8f:7b:d5:c0:47:7d:7c:59:f9:64:98:6e:59:1f:62:
de:bd:31:27:ab:bb:af:da:3b:f8:db:ad:d3:8b:0f:
28:ac:48:3a:0e:90:0e:52:3b:86:b9:77:66:87:d2:
8d:4a:2f:e2:f1:50:33:13:34:cf:30:9c:27:84:06:
b4:a4:2e:ff:b3:57:16:54:0c:f2:29:bf:d3:ff:ed:
80:75:b5:c0:09:31:02:7c:95:cd:80:7f:91:f4:78:
63:45:8e:84:eb:cf:26:55:da:6e:4c:e0:5d:c1:79:
6c:c5:a0:3a:d7:a2:3a:94:78:3f:7e:9a:7d:6f:86:
de:bf:f7:53:2d:ba:68:93:d7:2e:5d:9c:3f:06:f7:
92:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:38:B6:DC:0A:08:38:21:88:F4:DA:4B:4D:BC:A3:9A:EA:8E:04:E5
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:52:35:c2:5c:40:6b:a3:2f:09:0c:fa:ba:07:da:ca:19:6b:
bc:10:af:d8:77:10:18:06:0d:bf:15:f4:7e:61:88:08:96:17:
ad:db:b7:46:41:58:00:64:69:04:58:0f:1c:96:c6:ae:74:5d:
17:c9:bb:10:6d:ad:20:6b:fb:c7:84:62:d3:00:6f:18:7c:3a:
9f:cc:39:cb:7a:ba:d9:eb:dc:fb:47:73:fc:16:46:aa:4b:64:
d4:48:fc:66:90:88:68:e9:4a:9c:2d:f7:d8:bc:fd:81:1b:cb:
4d:84:7d:72:3c:28:5f:be:c0:5e:e1:44:d8:08:be:d8:b3:d8:
ed:b2:75:9c:72:8c:36:8a:a0:e9:b6:33:2b:02:0a:11:36:a6:
cf:f3:35:fd:69:57:6d:a8:59:a5:c2:9e:46:03:15:22:05:49:
46:96:7f:60:8e:8a:d1:66:65:40:23:8c:0f:20:94:eb:ce:3f:
41:8b:30:e9:ae:10:4e:6e:1b:78:71:03:2b:55:83:ad:7c:5b:
5e:e3:76:1a:31:ce:c2:ed:d3:c6:c9:37:4a:a1:97:9b:da:c3:
34:66:28:05:4b:48:52:06:2b:76:4e:c8:ce:e2:c4:4b:8d:80:
dc:f7:d0:d4:6e:5e:03:bb:10:da:96:59:3c:ee:e0:67:0e:25:
73:04:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:48:17 2025 by rpki-client