Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: CYPlqXeoG9ljmpNrbf3sts6d28C4MQt+tE54vtFiQew=
Subject key identifier: DE:82:63:AC:FC:AF:14:36:D9:F8:6F:71:89:3D:6A:35:B3:DE:87:91
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 01987CAE6FBCC1A679339B70E4CBA5A1ABDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 06E1
Signing time: Wed 06 Aug 2025 00:01:03 +0000
Manifest this update: Wed 06 Aug 2025 00:01:03 +0000
Manifest next update: Thu 07 Aug 2025 00:01:03 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: mX96gldll3KnAp8OmxUaQTS4NpKo8tiED6e4hs6+Rhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:6f:bc:c1:a6:79:33:9b:70:e4:cb:a5:a1:ab:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Aug 6 00:01:03 2025 GMT
Not After : Aug 7 00:01:03 2025 GMT
Subject: CN=de8263acfcaf1436d9f86f71893d6a35b3de8791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:e2:55:58:c5:2a:ff:f0:99:94:cc:b3:4e:
17:f7:c3:06:a9:0b:20:3f:df:f9:20:fc:53:7d:09:
f5:5c:a0:47:e3:7d:05:66:ac:ad:6e:01:87:63:8b:
6a:96:69:b1:78:9e:41:81:73:25:4d:3e:84:43:35:
62:be:c4:9b:8d:58:43:fc:53:43:0e:89:08:00:5b:
b7:d1:d1:8c:27:d1:1b:de:44:83:9f:f7:f2:3b:6a:
d9:f1:12:79:42:bd:d6:72:96:5c:61:ba:3c:29:ef:
4c:15:30:1a:ed:7f:1b:da:90:af:e4:41:ee:80:cd:
c4:26:0c:bf:12:b4:48:4c:7b:1c:a7:86:a8:0b:de:
73:74:67:f1:7b:70:19:90:9c:7b:05:c1:57:31:6a:
ca:91:9b:d0:e5:29:c8:c5:43:94:be:49:39:71:03:
c6:7e:4f:4e:50:12:f9:ab:2d:7b:df:d0:26:6a:4c:
1f:94:0c:01:dc:7d:13:57:74:52:ca:4d:1c:9b:92:
4f:59:50:cd:ba:d9:15:a7:9f:40:f4:9d:2c:fd:4e:
c1:27:15:c4:35:50:5a:16:8d:ae:61:dd:cc:3c:51:
12:c4:39:c5:7a:79:d7:9e:00:d3:e2:87:d5:62:b9:
20:af:4b:bf:dd:24:c0:a5:41:6c:2f:a4:e1:41:5a:
ca:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:63:AC:FC:AF:14:36:D9:F8:6F:71:89:3D:6A:35:B3:DE:87:91
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:ae:71:97:62:b4:7c:11:37:26:14:7e:84:27:6a:9f:cb:b7:
5f:27:5a:05:89:a8:92:31:93:52:cf:45:df:50:be:29:f9:10:
6b:bc:aa:01:8a:d3:da:99:42:b7:02:f7:41:00:41:55:a6:c2:
26:e8:30:5f:9c:ef:be:8f:28:6a:e3:1d:e5:be:31:ec:79:44:
1e:c4:c8:64:fb:7d:00:76:5b:8e:07:39:7e:7a:9f:49:8c:51:
a4:72:be:7f:03:bc:61:10:2d:4a:28:74:2b:5a:48:40:5c:0d:
75:6e:bd:81:8c:45:f7:03:a3:b7:f2:1c:d1:f2:6d:8c:e4:81:
82:7a:e6:f3:91:ff:8b:aa:a9:ae:d4:c8:3c:c2:0c:c3:d1:a3:
31:49:29:b0:7f:7a:d3:d8:18:94:09:94:6a:5b:4f:d6:bb:c2:
bd:b9:06:a3:8b:27:3e:e6:a1:12:39:1c:f4:44:93:a0:17:56:
7f:db:d9:8e:2b:04:38:6c:d3:85:d8:a6:7c:cf:49:72:aa:2e:
94:05:fb:da:ec:8b:bb:1c:0b:7e:78:82:e4:ed:e2:12:67:aa:
ca:f0:86:4c:37:e1:e0:3d:68:a1:cc:e5:16:24:b0:07:bf:0b:
7e:d8:74:8a:e5:65:2a:fb:a6:d2:65:dc:12:1f:88:03:78:0b:
9c:0e:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:30:29 2025 by rpki-client