Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: MDBNPPzWwcuKAjV0bMJlQVMNEov4K2n0QXVrqzizcRg=
Subject key identifier: 71:CD:7A:78:C8:9D:97:47:8C:05:BB:A4:61:84:C7:22:A2:6E:08:02
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 01976DE2818619A26C27A9F9C77C92F4FA75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 10:00:50 +0000
Manifest this update: Sat 14 Jun 2025 10:00:50 +0000
Manifest next update: Sun 15 Jun 2025 10:00:50 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: GT/fP4PvTnSBz+4B/73kvQpSycmfxO+HufFD+bYH4RU=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:81:86:19:a2:6c:27:a9:f9:c7:7c:92:f4:fa:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jun 14 10:00:50 2025 GMT
Not After : Jun 15 10:00:50 2025 GMT
Subject: CN=71cd7a78c89d97478c05bba46184c722a26e0802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:59:fa:c3:1f:36:e2:ad:0e:48:2c:7c:95:
0c:11:9c:8d:70:e8:23:a2:6c:f3:d2:d1:e6:82:bb:
c4:83:12:af:f7:d7:67:2e:74:c3:34:a3:12:d4:82:
d8:f8:e8:0a:89:c9:99:78:f3:50:f5:5c:fd:5b:1d:
cb:c1:94:b4:45:c9:a6:90:72:aa:19:c0:90:6c:c8:
5e:a5:27:fd:ce:92:b6:50:04:63:c0:0a:42:98:ed:
de:b1:f8:07:99:63:aa:41:c8:ba:bc:ee:38:8c:82:
af:18:0f:17:9e:d0:44:66:fb:8f:06:42:0d:76:9b:
ac:99:c7:05:c4:93:15:c2:3a:0a:57:a4:24:df:a6:
68:f8:73:ec:b2:38:31:91:12:55:b9:a9:c7:b5:67:
d4:0e:12:34:3f:df:46:3f:c6:b0:02:64:96:6a:6b:
0d:01:ec:f6:15:7e:9e:e6:da:3c:a0:c4:14:1a:d7:
4b:1d:a5:f1:c1:b7:f7:4d:c5:d4:18:35:6c:e2:94:
72:f0:41:b1:fa:53:ee:f8:4c:e0:8d:93:7e:20:e6:
bd:f4:49:58:5a:c7:59:e2:d7:a0:2b:c0:fb:f9:a1:
c2:87:61:0a:c4:45:fd:4f:28:a0:76:2b:47:53:c5:
09:41:0d:75:cf:78:4d:bc:3f:49:f0:86:3d:54:78:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CD:7A:78:C8:9D:97:47:8C:05:BB:A4:61:84:C7:22:A2:6E:08:02
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:20:63:1a:a6:cc:18:7d:08:10:15:03:80:8f:de:fe:b3:04:
c4:c2:98:b6:c7:cd:12:46:d0:c1:4e:07:9f:83:6e:b6:43:92:
7b:dd:1a:25:67:3a:92:02:e5:6e:7b:20:9b:1e:e9:46:1e:c8:
2c:de:9e:0a:a9:09:3f:29:32:17:21:ae:c5:15:c3:88:82:34:
3c:49:31:6b:db:f5:07:a1:65:51:11:7c:1e:e5:28:47:62:97:
10:39:2c:b3:94:be:34:66:b5:2f:45:b3:93:f4:99:05:55:7a:
d9:c4:cd:52:e5:c0:b3:bc:ea:09:ad:06:ac:84:d3:58:be:e3:
bf:3f:df:c2:dd:2f:1d:be:65:09:64:cd:d0:97:12:05:2e:8c:
1a:b7:fd:03:62:6b:8c:f6:66:74:9b:e6:63:b4:af:68:f8:a4:
3b:a3:64:ee:fc:3e:d8:cc:33:d0:56:bc:48:5f:35:af:c4:5e:
d3:3e:a2:f6:34:3d:85:a9:b3:71:4c:9c:bb:f2:ea:27:3d:c6:
5d:e3:7c:05:4c:e5:e2:b6:cf:db:bf:e4:76:b8:4d:a4:f2:02:
38:24:48:e8:b6:b9:54:b2:34:e0:ce:da:11:75:53:34:cd:48:
e7:8c:6e:c6:7a:ee:32:fe:20:6d:e5:10:b6:c8:c8:e7:14:9f:
5f:09:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:53 2025 by rpki-client