Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: lYUDTgP/Qp5VZmNScTigeLpxc4S/8njeggjJWYMQVZU=
Subject key identifier: F2:0D:65:44:D5:F0:E5:B6:8C:97:40:4E:32:12:0A:D8:91:F8:D5:39
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 019768855304E4B76DF2DA564AAE6ABEA8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 0652
Signing time: Fri 13 Jun 2025 09:00:57 +0000
Manifest this update: Fri 13 Jun 2025 09:00:57 +0000
Manifest next update: Sat 14 Jun 2025 09:00:57 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: VFzK9au58r/d7/PCvm26EprXtIhJRZ1Q+GAYoVvOq/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:53:04:e4:b7:6d:f2:da:56:4a:ae:6a:be:a8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Jun 13 09:00:57 2025 GMT
Not After : Jun 14 09:00:57 2025 GMT
Subject: CN=f20d6544d5f0e5b68c97404e32120ad891f8d539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:96:ba:55:a4:89:7d:54:10:14:ac:2f:52:
37:11:76:13:22:00:57:cd:fa:55:27:37:e5:a9:75:
17:57:90:bf:66:66:3f:d0:3e:9b:43:ad:4f:64:dc:
b3:12:82:73:97:b2:79:6a:8f:7c:ed:c8:65:a0:c7:
57:d6:ca:e6:10:7e:4f:d1:12:b6:9f:12:c6:e3:84:
46:ff:dc:3e:89:8c:72:e1:34:e4:26:18:43:1f:c9:
ea:83:67:84:0d:e3:fd:84:7a:12:27:37:32:20:23:
7a:58:c5:60:6b:05:92:d8:45:94:80:79:0b:de:26:
0b:15:ff:39:c3:7c:66:1f:1e:68:e5:85:0d:3c:b4:
07:45:10:c3:6d:52:4c:b2:7a:9d:0e:39:12:ed:ac:
b7:c1:39:40:39:70:12:4b:d6:b7:75:42:72:8c:13:
db:cd:68:ae:33:8e:11:1a:52:f1:43:66:48:24:42:
01:3b:db:cc:9d:d4:11:a1:68:6c:a3:f9:b9:b2:1b:
64:e7:f4:74:0f:8e:b5:aa:00:3f:8f:1d:e4:21:db:
33:43:3b:f8:b6:77:81:4e:f7:79:2f:d1:d9:51:f2:
b5:b1:63:6e:5b:49:eb:8e:78:97:e3:4c:25:c8:43:
a9:e1:21:e8:05:76:99:9f:b5:78:a2:7b:42:b6:e8:
2e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:65:44:D5:F0:E5:B6:8C:97:40:4E:32:12:0A:D8:91:F8:D5:39
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:33:11:2f:6b:f0:89:75:a9:55:15:33:0d:98:69:6c:fa:82:
3d:d6:2e:27:be:0d:dd:30:84:aa:92:f6:8c:85:d1:7a:f4:a1:
a9:91:9e:e6:7f:66:1c:1d:9a:41:33:c1:54:1d:d5:03:17:4a:
8d:b7:9b:ca:b6:d8:54:8d:a9:7c:80:78:a9:a3:95:78:0f:90:
a1:5f:15:61:f0:df:68:5e:a8:9a:d1:35:0b:fe:9f:34:e5:ca:
fc:3b:c9:3d:16:11:b3:20:34:91:ac:85:a6:1d:2d:d9:ad:32:
1a:73:64:cd:62:14:6c:96:ee:22:7c:02:51:f9:e4:83:15:26:
7f:15:bd:0c:bd:07:a9:73:3a:23:75:bf:82:40:ee:d6:d5:a5:
c4:22:57:55:4a:2b:e6:13:7d:a7:8e:f9:e1:5c:2c:60:b7:bd:
10:90:f6:22:2a:ea:50:fe:7c:76:58:25:08:77:9d:37:9e:f4:
e5:93:c4:a6:f7:84:5d:85:64:29:36:8f:26:24:c6:17:f9:c2:
b8:c7:71:03:c7:1d:66:7c:56:ca:b7:8d:09:49:97:40:b6:05:
a5:c7:01:4b:5a:18:4c:3d:78:1a:4f:a0:97:58:4c:92:a8:8a:
71:ef:91:1b:ae:2a:4c:39:bf:06:40:c4:48:bc:62:61:6a:60:
e6:38:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:20 2025 by rpki-client