Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: gt6lXIKZAmQJlCWRCq+MEhSgYjaIkfeqfioFbCDDLFo=
Subject key identifier: 12:16:24:4B:5F:70:83:6C:4C:3D:DB:56:92:AB:0E:4A:85:FF:C1:2C
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 0198D583544B4F4FC7D1081DB69BDE94021E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 125F
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: QS2EA20Rf5H8uYQ8h5H0Ul8Ct5iwa9wJJyXLI8O+M/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:54:4b:4f:4f:c7:d1:08:1d:b6:9b:de:94:02:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=1216244b5f70836c4c3ddb5692ab0e4a85ffc12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:65:64:2d:f4:99:2c:f2:d0:9d:72:b7:d8:
29:97:84:d7:cd:66:5c:79:91:d8:32:41:d5:0d:8c:
9e:fc:ee:e0:5a:55:6f:9d:fd:8d:4d:78:58:70:90:
99:a2:dc:13:03:c7:0c:14:3b:45:07:3f:c0:1d:22:
2e:98:2d:ed:da:1e:24:4b:7f:41:6f:2e:b6:47:33:
91:47:8c:7c:e6:aa:7b:ba:db:59:d6:ae:36:6c:b6:
cb:eb:a8:b2:df:7a:db:75:74:40:86:6b:fa:4b:9a:
4b:9c:a8:cd:32:6a:53:85:fe:ea:4b:5a:f2:57:c4:
d3:24:44:e7:fb:3e:d8:04:a1:df:48:a7:c7:d9:fb:
a1:8e:04:d7:1f:1d:b4:d8:34:a3:6f:1c:fb:30:36:
47:ac:12:c6:71:7c:c7:34:86:ae:f2:66:5c:70:51:
f4:9e:53:75:05:73:2a:a6:0c:cb:ca:fd:8f:8b:ec:
c6:59:48:ea:4d:9b:6d:e9:53:07:a9:1d:df:74:24:
55:34:9b:23:1a:0b:3f:0c:d2:10:01:78:c0:5e:25:
cf:a2:7e:51:d2:1e:60:3d:97:c4:19:b2:b3:38:de:
b4:02:5f:ae:69:cd:6b:35:75:c0:2e:d6:c7:9a:fc:
17:54:e6:91:9e:2e:ca:b0:49:2e:45:84:fc:03:5f:
27:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:16:24:4B:5F:70:83:6C:4C:3D:DB:56:92:AB:0E:4A:85:FF:C1:2C
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:11:a3:a2:52:4f:b7:ea:7a:f1:ee:b9:74:61:82:77:e8:
a4:55:f5:19:14:cf:2b:58:60:dd:0c:81:b6:69:ca:53:65:6e:
bd:18:fd:23:f6:e3:c2:5a:c2:77:6e:32:82:65:6b:e8:38:fc:
7b:10:c6:80:e6:f1:5f:18:77:ab:97:49:a0:79:49:ea:55:70:
ed:a3:4f:24:9f:5f:14:76:0a:b3:bf:7d:7a:00:72:7d:28:3e:
d9:86:a1:33:ef:03:b4:25:7b:d9:58:a8:44:e6:1e:0d:cc:8d:
0a:1e:f2:55:3f:7a:93:e1:f6:b7:36:ff:2c:78:5c:c6:ae:fe:
d8:db:f2:9e:c6:2a:62:26:c9:be:1f:ad:90:9a:36:b0:e5:cc:
72:82:2e:fb:13:3a:ed:eb:1e:32:ec:b6:1e:05:b5:71:3c:c2:
42:a8:19:71:4b:92:b4:e7:20:df:e6:a0:ea:76:91:e2:89:e5:
9b:1a:19:44:b8:0c:fe:f3:18:6a:e2:3e:c5:14:0d:2d:d9:58:
bd:7a:bd:ac:40:28:ff:95:c3:f1:01:f8:fb:08:88:25:5a:8c:
97:72:24:d7:3d:a5:10:39:ca:fd:d8:1e:69:39:f9:da:0d:81:
d2:23:06:01:78:a8:75:e1:b2:b6:ea:92:25:71:f3:e9:52:92:
2a:e1:ad:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:40 2025 by rpki-client