Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: YIWa4zLp2HF56yi4JviElFYjHwuYZEpJ1He6lFZFFk8=
Subject key identifier: DF:E8:D6:E4:2D:B8:70:53:97:E9:FF:DF:21:4B:94:D9:36:AC:4E:68
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 019894ED79867C94A56FEB7FB411481B1083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 0FA9
Signing time: Sun 10 Aug 2025 17:00:47 +0000
Manifest this update: Sun 10 Aug 2025 17:00:47 +0000
Manifest next update: Mon 11 Aug 2025 17:00:47 +0000
Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: W+ZNLJNoihmgz4wVu3BPz6EwaAPeCF1QCx9kuU5xUUI=)
3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ed:79:86:7c:94:a5:6f:eb:7f:b4:11:48:1b:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Aug 10 17:00:47 2025 GMT
Not After : Aug 11 17:00:47 2025 GMT
Subject: CN=dfe8d6e42db8705397e9ffdf214b94d936ac4e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:f7:c3:d0:93:74:b3:03:27:36:0d:34:53:
43:c2:b5:e2:fd:61:fe:c4:94:07:78:48:86:83:3b:
d3:fc:0a:53:5a:90:6a:dd:a7:1d:94:ad:a5:ed:60:
0d:58:88:38:19:89:79:c4:c9:3e:46:0f:f3:ac:ed:
7c:02:10:9d:5b:58:6b:44:64:fb:c1:3e:64:d2:f8:
93:21:e5:97:1e:84:cb:fe:aa:ef:2f:fb:f4:fe:93:
a9:bf:95:3d:6b:61:61:0a:0b:74:40:6b:3c:7a:9b:
39:1b:df:e8:fa:70:a5:59:2c:ab:22:12:94:5b:17:
3d:5c:dc:66:a1:3d:a0:53:44:e5:20:62:a2:3d:20:
a8:da:8f:48:39:3d:31:05:b5:df:c0:e9:8b:8d:8e:
c8:5b:9d:a6:9c:4f:58:93:1d:e9:81:37:88:1c:ec:
11:a5:70:f6:9a:ae:b6:ad:52:74:a2:66:e9:7b:c7:
07:b2:81:00:ba:99:60:44:03:7b:39:0e:8b:8b:78:
8b:ec:55:3b:47:b7:d1:d9:60:ec:0d:fe:4a:fb:cb:
8f:fa:0e:0f:2a:52:5c:f1:15:dd:49:f5:c8:eb:63:
05:3a:b0:52:f4:ca:58:f3:58:79:c4:08:2f:5b:8b:
6a:24:89:97:48:cf:05:64:af:3c:7a:65:ba:f9:c7:
f8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:D6:E4:2D:B8:70:53:97:E9:FF:DF:21:4B:94:D9:36:AC:4E:68
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:eb:04:16:03:3b:09:fa:3a:7e:2a:69:aa:ef:34:74:34:e5:
2a:f0:3d:a2:49:d3:a3:bf:2e:58:bc:fa:e1:37:53:f6:70:34:
c3:23:36:ff:97:b2:b3:6a:f6:0b:8f:bc:3c:dd:33:b9:ee:03:
a1:e7:2d:f3:e5:f9:d2:a6:3d:b3:40:52:28:56:1f:dd:e4:3d:
cc:c7:46:8a:84:49:7d:e6:23:51:d8:69:f4:6a:f8:b5:e1:74:
c2:8f:25:ce:fc:89:54:17:38:ae:a1:47:40:4d:bd:ab:78:76:
56:e6:0c:f4:fd:b0:a7:cb:32:c2:d1:0c:08:63:60:ac:92:9d:
a3:b9:8a:24:95:aa:7a:b2:08:12:a5:be:ac:13:0a:19:da:de:
42:b6:e2:fc:6c:2e:4e:7e:84:44:43:73:f9:a8:80:16:49:dd:
0b:3e:9a:04:53:31:c9:f8:4d:37:56:1d:14:cd:ce:b1:b5:29:
6f:e9:25:e8:ec:52:da:4a:a3:ef:72:1a:0c:9a:e9:74:b8:e3:
c1:4d:2f:51:d0:1e:8d:b8:72:6b:f1:7e:1a:b5:94:d0:dd:95:
ff:63:cb:27:2c:fd:43:fb:bf:1a:21:0f:ed:76:7b:90:1b:e3:
bf:e9:ae:c1:43:a0:33:a1:41:65:d9:51:af:75:17:44:c9:29:
d8:36:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:06 2025 by rpki-client