Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: yGkp3+lBdd388ynAp7FYfWoyMhScckD7pKkRwqtHs1g=
Subject key identifier: 12:7F:F9:45:8D:2E:05:96:98:08:E9:1B:C2:17:B8:48:9B:33:6D:10
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019880C2A3A9E80B191167FD6CFE8669A05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 071C
Signing time: Wed 06 Aug 2025 19:01:36 +0000
Manifest this update: Wed 06 Aug 2025 19:01:36 +0000
Manifest next update: Thu 07 Aug 2025 19:01:36 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: 8X2Dm8K860WhPKjKw9cSBYSW6iN7TFsWV12E1ZGQTbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:a3:a9:e8:0b:19:11:67:fd:6c:fe:86:69:a0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Aug 6 19:01:36 2025 GMT
Not After : Aug 7 19:01:36 2025 GMT
Subject: CN=127ff9458d2e05969808e91bc217b8489b336d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:bf:3e:71:e9:12:14:93:a5:fc:74:50:5d:
41:68:a6:99:ef:be:f9:dc:04:5d:40:5c:1b:14:ab:
d2:a5:12:59:af:7d:68:30:0f:98:aa:5b:cf:01:95:
7e:d6:49:3e:a4:c5:f5:0e:b2:88:cb:51:86:15:40:
3a:e6:26:0e:7d:e8:26:9d:50:82:a7:6d:db:3e:86:
a7:fe:53:50:76:f9:4c:c8:ed:41:9f:ac:a7:58:c3:
82:7a:ae:49:98:2a:2b:a9:56:cf:df:ab:f9:0d:c6:
24:8a:94:da:b9:fc:8d:31:ec:df:62:6d:9f:4b:4b:
4f:31:5a:21:94:98:bf:f3:c8:a9:26:f2:45:9f:92:
ed:c1:bc:cf:de:3b:b3:ff:99:30:19:ab:c4:ef:d9:
ef:31:fb:43:04:25:ec:b7:9b:31:0d:1d:39:26:aa:
bc:95:d6:a7:18:26:c5:c6:20:28:c6:e4:14:03:89:
eb:81:10:f9:3f:04:82:a6:bd:36:87:2e:f0:d9:f3:
64:23:3f:8b:89:a4:40:cc:1f:e8:66:b7:6d:18:e0:
8b:bb:92:ca:7b:72:41:76:d9:c3:2e:0d:87:da:84:
67:e6:88:e8:6c:a9:3f:5c:23:9c:07:7e:a8:82:74:
fb:09:a6:35:12:6b:2a:fc:0c:d1:f8:29:12:0f:09:
6f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:F9:45:8D:2E:05:96:98:08:E9:1B:C2:17:B8:48:9B:33:6D:10
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4f:ff:d8:be:74:18:68:9b:ce:49:a6:42:70:cd:28:ae:e6:
56:9a:03:68:04:6b:9a:60:e3:18:96:c7:30:f1:e4:96:4f:8e:
57:3d:4f:bd:87:1b:10:e0:57:37:5c:bd:f8:fe:b0:09:ed:61:
41:41:2a:9f:49:e9:12:9f:8a:4b:08:10:4a:50:eb:4e:f0:12:
cb:15:17:c0:47:14:85:bd:40:97:95:c2:10:cc:ac:c8:67:71:
c9:40:31:96:c2:cb:8c:74:e7:71:ec:f2:b9:9f:8b:c7:7d:1b:
ed:24:7a:a6:96:9d:23:f8:9e:9a:47:2f:17:54:26:b8:b2:18:
bf:47:ad:a4:83:f6:21:56:91:ef:52:e3:d8:da:15:83:bf:f1:
34:50:7a:3a:8c:82:3a:59:85:f6:d2:e7:99:b0:d4:09:42:12:
05:a6:68:1a:f8:2d:c7:57:7c:e8:f4:ab:6a:ff:a5:23:4e:66:
a2:66:0e:92:f6:94:e6:19:52:1c:1b:89:38:7d:96:0c:3f:76:
1f:9c:f3:70:5e:6a:1e:5c:ab:e5:30:db:b4:a2:ce:ab:06:e2:
1c:be:7c:54:10:96:57:c8:9f:8e:f8:6d:1c:34:ba:01:1b:8b:
b1:2b:93:2c:2d:3d:b9:36:6f:a3:12:dc:a0:a2:12:36:a2:36:
f1:dc:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:51 2025 by rpki-client