Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: XG6MNdO2mUDgP7iYiZ0hDK1B0owa/Pdgaf/zXw4C330=
Subject key identifier: F0:02:41:63:33:B1:1B:B5:87:A3:38:F7:13:18:3B:EB:BC:27:51:6E
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 0198729887981F10E0E8FF25AB23578A8B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1341
Signing time: Mon 04 Aug 2025 01:00:55 +0000
Manifest this update: Mon 04 Aug 2025 01:00:55 +0000
Manifest next update: Tue 05 Aug 2025 01:00:55 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: 8J5B8aE4obJALRtZBwyK8g159P6c458UGGOB68YR+yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:87:98:1f:10:e0:e8:ff:25:ab:23:57:8a:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Aug 4 01:00:55 2025 GMT
Not After : Aug 5 01:00:55 2025 GMT
Subject: CN=f002416333b11bb587a338f713183bebbc27516e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:30:37:a5:32:6b:6d:0d:32:4e:f1:6d:87:
eb:0a:0f:af:ee:6c:b2:40:c7:63:ec:28:6b:4d:66:
c7:02:bb:ef:eb:c0:a5:50:fc:e5:6d:18:d3:fe:56:
ac:40:2e:d4:fc:1c:44:d1:8a:d5:e8:59:71:4d:10:
db:f4:e3:47:0b:95:1a:62:05:c4:4f:5f:ca:75:7a:
b4:a6:9a:ec:25:96:43:c4:70:93:2d:67:72:f9:7e:
03:a4:4c:75:8d:57:47:24:95:4b:09:38:47:39:b8:
ad:81:0b:77:36:4e:9d:c9:15:62:5c:97:0e:45:c9:
0a:ff:1b:22:d1:aa:73:aa:c5:e3:c6:5d:e4:8d:8d:
ea:97:3a:f2:9f:76:87:dd:be:91:ec:c1:e2:46:b0:
13:c4:fe:b9:b5:26:23:6f:ca:39:d3:1a:98:dc:6c:
0a:ba:f8:90:67:c3:53:fe:cf:ca:2f:bb:19:b6:a3:
dd:7a:5e:56:b6:c3:86:ce:39:09:5b:2f:56:21:3f:
24:60:94:ec:d2:50:74:19:58:17:37:a3:4b:ee:4c:
60:17:60:e5:0a:91:7a:89:ef:20:8e:99:61:6f:3d:
f7:8d:44:1f:e1:09:d0:df:dc:bd:e5:ae:f4:c2:e3:
c3:f5:2e:7b:61:77:8f:25:9e:be:05:63:1d:bc:63:
55:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:02:41:63:33:B1:1B:B5:87:A3:38:F7:13:18:3B:EB:BC:27:51:6E
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:32:e1:89:1d:d4:4d:49:5f:39:d1:fd:12:0c:f3:af:2a:
fd:4c:f9:1f:fc:8f:1c:77:42:5f:8e:6f:6d:14:61:75:62:e5:
a7:98:b5:10:f3:2c:58:bf:b3:4b:5b:ad:b9:69:ed:8e:e8:a3:
57:73:e6:44:ff:23:7c:ca:4f:6a:59:aa:4b:09:ea:e7:60:27:
d7:65:28:9c:35:d0:87:91:00:11:6d:09:a0:61:ad:e9:60:5a:
58:99:cf:7f:9d:4b:57:89:a9:5a:cd:9d:e7:56:12:69:40:c4:
67:fc:d6:d6:1b:57:3e:2c:d7:cd:e2:59:b7:42:13:de:85:cd:
18:72:3b:dc:69:87:40:ea:d0:50:16:fc:65:3d:2d:6f:0e:f8:
3c:81:5c:d8:d9:91:06:d7:ae:e4:93:1e:32:45:fd:aa:3c:7e:
45:a3:26:58:95:e3:3a:fe:22:3f:28:2a:43:53:ae:e1:28:05:
95:63:df:3f:a6:59:06:e8:f6:d5:15:2b:86:70:ef:73:8c:7f:
15:86:b4:18:74:b0:61:e9:e5:40:0e:1c:df:f7:42:4f:c4:73:
e2:46:8d:ca:13:3f:0b:d0:af:97:0d:03:1d:23:b7:87:a6:78:
fd:23:2b:20:11:2a:b7:8b:66:f1:fb:1d:25:a0:f6:d2:0e:c9:
19:b2:e1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:09 2025 by rpki-client