Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: qnpk2hc0DW7K8n/OCIC4pADiGutZsfIuhFW2lGQ7EO0=
Subject key identifier: D1:C3:12:B3:AE:0B:33:EA:13:1C:8B:EA:FC:B3:71:A9:CB:8A:8F:D8
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 01976A058CB94077007497C792362FE2BCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 12B8
Signing time: Fri 13 Jun 2025 16:00:37 +0000
Manifest this update: Fri 13 Jun 2025 16:00:37 +0000
Manifest next update: Sat 14 Jun 2025 16:00:37 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: CiUTPOucQKKzegje3ojYMkC3nJtnHjelfsVEL892uOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:8c:b9:40:77:00:74:97:c7:92:36:2f:e2:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jun 13 16:00:37 2025 GMT
Not After : Jun 14 16:00:37 2025 GMT
Subject: CN=d1c312b3ae0b33ea131c8beafcb371a9cb8a8fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:80:e7:f9:e5:db:1f:31:85:22:ff:f7:69:
43:df:79:b5:53:e5:d0:2c:8e:f4:86:65:65:4c:23:
23:fa:2c:af:1d:67:e2:d2:3b:e5:f0:b8:11:dc:0a:
71:6c:56:54:48:70:d3:e9:c0:c2:b9:fb:b1:e7:1c:
55:aa:51:85:f4:0e:55:64:9f:d5:18:83:9b:56:d3:
fe:71:00:03:97:a1:e7:46:21:5d:9a:68:3c:1f:75:
45:08:00:ff:d8:f7:ff:d4:93:ea:c7:6c:27:32:b8:
28:38:35:97:99:ca:f0:25:88:e4:c2:d5:f0:0b:a3:
ec:a3:fc:02:93:fc:be:a0:c0:45:07:5e:ae:43:22:
da:fe:1f:7e:60:b5:f2:fd:44:d9:d0:d2:52:47:4e:
90:68:76:3f:cd:9f:ea:29:b8:d4:47:78:76:c6:76:
79:0f:d4:11:a3:39:99:93:b2:69:4f:00:01:51:48:
ca:c8:00:d3:14:5b:43:8b:30:aa:82:83:af:cc:22:
78:63:91:27:03:a2:cb:91:c2:cc:f4:14:ec:15:cf:
b8:34:63:0f:1f:74:17:58:67:50:cf:1e:47:a6:94:
f2:0c:b5:5c:ee:52:ce:7a:42:37:7c:d1:5b:1a:26:
a5:5c:07:2e:67:30:53:0d:fe:a7:cc:30:f6:49:33:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C3:12:B3:AE:0B:33:EA:13:1C:8B:EA:FC:B3:71:A9:CB:8A:8F:D8
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5b:30:cb:85:32:41:1f:3f:94:4e:01:79:af:08:21:b0:b8:
81:ca:0c:a6:8b:2e:4e:15:68:21:f8:c6:3f:dc:19:c6:0b:17:
58:2e:fc:ef:ae:34:56:42:ac:ee:9d:a7:ce:65:c6:32:7c:be:
73:f5:59:3e:d9:47:2b:f0:2e:f1:e6:ea:31:53:cb:63:7e:39:
f2:1f:b7:bd:3f:26:95:8f:76:92:e6:aa:69:46:2d:f3:62:b7:
97:10:d1:78:dd:f9:ca:14:a7:42:b4:15:69:f0:21:1d:4e:e3:
9b:c8:87:43:3b:ca:3b:cc:c3:8e:76:af:38:9d:47:62:e6:dd:
3b:d2:22:32:00:bd:fc:d3:e4:69:2f:15:75:7c:40:80:4f:cb:
ef:9e:3c:cb:bc:c0:ee:27:f4:a7:9b:bd:bd:58:35:e3:e7:08:
5e:5e:ca:a2:5a:23:e6:69:18:96:26:89:94:e2:d8:81:40:f1:
48:52:73:60:52:8a:82:08:ee:ff:8a:83:c6:12:29:a8:50:f9:
21:8b:d8:ad:e1:c2:00:46:b0:7b:64:87:96:2f:63:22:09:46:
42:96:fd:ed:87:bd:bc:e6:af:cc:e6:cb:61:7c:08:c3:31:a9:
75:8d:dc:22:45:c7:4a:7a:d9:92:e8:05:75:fc:65:bb:68:d6:
8a:a1:91:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:56 2025 by rpki-client