Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File: PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier: Z48uRLoZjDASIrHXOG4yotHxNdVFyqYSpM9JHGIDVa8=
Subject key identifier: 97:9F:B8:EF:AA:42:91:40:FA:0C:3B:FC:24:AA:B1:78:40:A0:B9:9E
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 019873E34B4F0868E22DCC15AAF3F210AC1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number: 0346
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: 77R8mlaw3XCPkCWINLIr9IM095FYuHmhCcgWx7Xi/Is=)
2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4b:4f:08:68:e2:2d:cc:15:aa:f3:f2:10:ac:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=979fb8efaa429140fa0c3bfc24aab17840a0b99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ef:a2:76:9d:0d:86:f6:94:30:96:51:df:5d:
59:eb:45:d6:e7:08:67:a3:9a:b4:25:56:1a:ab:05:
15:02:44:02:3b:5c:7c:f8:e8:9f:f9:e8:4e:08:2c:
b6:93:f3:b0:55:77:2a:6a:b0:1b:63:c7:e3:d4:4d:
f2:f4:aa:df:39:85:84:39:34:03:51:5b:3d:b1:7a:
63:f4:d8:7e:c2:c9:c9:2b:a3:cb:29:6a:d6:17:34:
b1:ba:d7:f5:c6:b3:29:72:65:89:5c:b7:d7:e8:af:
75:6b:1e:12:21:4e:4b:21:41:64:68:2a:62:32:70:
c2:4b:00:e4:14:71:30:47:f3:90:23:60:fc:87:42:
d9:f5:05:19:5d:c3:9a:f8:72:7c:ea:80:81:40:58:
85:d9:72:a2:81:01:70:01:cf:3f:af:fc:e9:5b:ad:
f8:08:9a:a2:c2:33:f5:ff:41:fe:2d:b3:86:7f:d2:
a2:13:2f:8a:2e:21:47:19:1c:70:eb:cf:5e:04:c8:
c3:a5:b1:ea:a9:d0:6c:96:d5:4c:a2:70:8f:6c:56:
38:0b:53:a9:1b:90:0a:af:f5:fd:c5:d6:33:0e:a5:
a7:2b:2a:53:97:31:8f:c0:ac:39:bc:57:5b:79:2c:
08:d1:72:67:8d:03:ba:2e:ee:67:38:db:d8:71:19:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9F:B8:EF:AA:42:91:40:FA:0C:3B:FC:24:AA:B1:78:40:A0:B9:9E
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e8:94:04:ab:1c:00:5c:db:04:05:b0:c5:1a:c9:52:db:fa:
d2:02:4c:ae:0a:a8:b0:a3:b6:50:27:0a:76:4d:86:c7:0a:3e:
bb:fc:47:28:b1:08:2a:e7:8e:bc:45:dd:27:96:76:03:e6:09:
29:60:7a:60:04:a8:d0:21:d3:67:a2:fc:b6:f1:10:88:4a:ed:
f7:ca:93:4d:59:58:02:ce:4f:d0:3f:4c:1d:fc:1c:d8:1b:11:
6d:e5:df:03:ef:2f:4e:66:f6:f6:ba:a5:f6:45:cc:b2:c5:d0:
53:34:48:8c:7d:30:b9:96:09:dd:e2:c6:37:a4:d3:3c:13:96:
80:95:9a:fd:44:eb:dc:8d:1e:47:74:ff:3e:25:b6:a6:37:8f:
46:d6:06:d2:3f:27:10:62:d3:ff:87:8e:76:66:58:6c:18:0f:
26:c6:70:2a:44:a2:e9:fd:03:23:35:3b:72:43:a7:45:5d:f2:
c2:2e:8b:ca:33:59:43:5c:a7:65:23:bd:f9:af:97:88:87:46:
e3:bc:47:29:66:df:3d:ab:ab:8e:a2:9b:38:a9:2a:d3:c8:fd:
0a:18:ad:ab:8b:ff:4d:d2:c5:19:e3:74:0a:f6:cd:2d:d5:aa:
5c:57:f1:31:2c:c8:76:9c:ec:84:40:ba:25:89:ba:96:ac:0f:
43:37:b9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:07 2025 by rpki-client