Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier: jQsrZo2YreFks8b7k5II+BIgupHYkl8S3QaMTt0ySpk=
Subject key identifier: 23:22:3E:FF:5C:0B:72:17:16:EC:31:7F:A5:86:C8:83:B3:54:EF:7A
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer: /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial: 0197B77C3BAFB999ADAB9FECCAB08CF50C9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number: 04E3
Signing time: Sat 28 Jun 2025 17:01:01 +0000
Manifest this update: Sat 28 Jun 2025 17:01:01 +0000
Manifest next update: Sun 29 Jun 2025 17:01:01 +0000
Files and hashes: 1: 4j1kn9ZRNRslxMytu5eL1iX2ygw.roa (hash: RrIgP4kxCXaPwvdRe3NPsmeTo+G3ybJskr4dzXhR3EY=)
2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: DpN6qDeXDahNDiZFKqni3mzbxOdemwnZnk89VGmlr9A=)
3: RZDB-wEsqhNgJE7sn6sviv6flew.roa (hash: OO6b8TF+dc/NIr8Tg9F9I1/6IDlTjI89aON6PORPAdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:3b:af:b9:99:ad:ab:9f:ec:ca:b0:8c:f5:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Validity
Not Before: Jun 28 17:01:01 2025 GMT
Not After : Jun 29 17:01:01 2025 GMT
Subject: CN=23223eff5c0b721716ec317fa586c883b354ef7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:22:ac:7f:74:f9:ef:80:2c:60:ff:40:51:
95:a2:39:38:f0:6f:6b:6b:47:2b:a3:4f:b4:73:0b:
ef:5e:2b:2a:60:52:4d:52:8f:31:84:67:38:a9:0a:
42:6e:89:88:8a:ee:93:21:21:b0:90:ee:38:f3:da:
64:1d:16:70:0c:43:0a:f2:f8:5f:c2:56:ed:d1:94:
03:a9:8c:6d:28:97:90:ed:5b:a0:50:43:4f:6f:7e:
1d:05:30:47:d7:ec:a5:5f:19:41:30:a3:49:90:ec:
19:1b:fb:a2:f9:6f:16:c9:64:1f:19:57:c6:6d:4b:
30:fe:36:98:17:35:a5:0d:b6:a7:36:62:a0:00:e3:
df:9b:28:a9:4b:6c:9c:11:f4:c1:ba:62:3b:5d:27:
57:da:d4:a2:54:b2:00:da:02:ca:4e:6d:06:c6:dc:
28:26:0e:ba:55:6d:51:9a:b4:7e:de:8c:39:0a:07:
a6:8f:74:8a:25:02:a1:46:38:61:ab:69:b0:60:76:
2b:f8:4d:cf:91:e4:3d:9f:4d:b6:a4:8c:19:ef:97:
8c:b2:1e:14:1a:b3:b7:f2:cd:c9:94:14:60:e6:00:
66:b4:69:8c:1c:46:d3:2b:74:8b:1c:0d:2b:ac:15:
dd:58:8e:77:83:e0:6d:36:60:c4:10:1f:72:43:3b:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:3E:FF:5C:0B:72:17:16:EC:31:7F:A5:86:C8:83:B3:54:EF:7A
X509v3 Authority Key Identifier:
keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e0:e2:37:b9:ae:84:3c:86:8f:6e:77:81:61:72:0e:60:cd:
42:c7:9b:8a:5a:a9:e8:5b:3c:f6:6d:4d:02:25:18:e1:a0:1a:
41:f3:9c:7d:f6:72:1c:fe:c1:8a:b1:5f:3c:41:2a:95:9e:ab:
0d:be:3b:fd:ea:ee:8d:68:59:96:5e:96:f8:76:ab:79:db:0b:
ff:38:dd:53:c7:86:60:46:f2:df:f7:ac:14:51:55:54:4f:a8:
f3:4d:70:28:4c:d8:2a:4d:db:42:da:71:89:3f:40:5d:9b:a1:
52:98:91:80:dd:ac:8f:c8:48:e1:d0:70:c4:f1:bc:b4:3d:97:
49:04:6e:9c:2c:0d:56:ed:06:de:0c:d3:42:1d:d4:3e:77:f8:
af:e0:0d:23:b5:19:c1:af:5e:4f:5e:73:89:f8:75:a3:26:4d:
a7:bf:b3:bb:9b:b0:d4:92:ef:6b:21:5a:77:e1:88:65:23:92:
60:b8:fa:bb:54:9b:a1:33:a3:7f:a4:3d:50:59:2d:39:8d:38:
cf:ae:6b:13:25:1a:b8:6e:17:8d:99:ab:25:40:6c:ac:75:b0:
c7:29:8c:38:55:f8:b7:70:b5:6d:0d:51:19:01:35:36:4e:8f:
84:c9:a1:06:05:d8:82:21:e3:5b:40:d8:d8:f4:cb:8c:cb:31:
41:d9:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:18 2025 by rpki-client