
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
File: p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft (raw, json)
Hash identifier: 2yteUwrrB7NY/CV+1ablSbGYafJkGdKquiBHFtZYIIs=
Subject key identifier: 79:99:D3:84:F8:62:79:31:02:DB:1D:D9:A4:26:8E:A7:C3:2B:7B:A0
Authority key identifier: A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
Certificate issuer: /CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Certificate serial: 01988AA11B4D34885CE8097DADD7B9F59B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
Manifest number: 0627
Signing time: Fri 08 Aug 2025 17:01:10 +0000
Manifest this update: Fri 08 Aug 2025 17:01:10 +0000
Manifest next update: Sat 09 Aug 2025 17:01:10 +0000
Files and hashes: 1: oe0ViHcJehxm3wVuZHtIwUX00hU.roa (hash: RwLw3XJajb9LZZAlaGbGSJVNCQJewc1VgXJkyuKlD8Q=)
2: p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl (hash: GEqwmet4aVexpJlw+zyN2w4/33h18Lu9QppgiiZM/ts=)
3: rEm8DnSRjF-eOZ8W-19-W5YBOlI.roa (hash: oKxbV7NuBt8nP02xM3KhblNP7v+2Q4dV/sQu1W1Wh/I=)
4: wsmN0GUZsWjC_T-MselV4vkxQWc.roa (hash: yTPdTeVo9RosDc+EbxC7mvYcTFyk5tLkcD8SHn8y0Zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:1b:4d:34:88:5c:e8:09:7d:ad:d7:b9:f5:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77720c7dc1dc3edd1d0d47f923bcd833f06af36
Validity
Not Before: Aug 8 17:01:10 2025 GMT
Not After : Aug 9 17:01:10 2025 GMT
Subject: CN=7999d384f862793102db1dd9a4268ea7c32b7ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:1a:e2:d6:1f:7b:be:34:94:6a:76:44:af:
5f:86:f8:66:c3:ab:27:71:16:a6:33:1c:85:23:a3:
c3:8a:f8:a3:f7:f4:94:aa:4f:75:2e:db:04:56:57:
66:c4:7b:24:37:b1:77:cd:53:aa:93:f5:82:5a:34:
e5:82:a2:b6:30:10:6c:21:fe:63:c1:10:dd:bf:31:
26:f9:ce:60:1c:0d:3f:b8:c7:f2:9e:15:69:b9:6e:
37:45:6c:c4:cd:b3:8c:4d:62:34:56:e4:cd:c6:9c:
20:29:76:3d:ae:68:dd:00:03:87:3a:58:24:47:49:
90:70:b4:c4:2d:93:53:f2:2e:6e:0f:1c:3e:e0:18:
68:4d:2e:22:71:c0:21:6e:7d:cd:b1:d2:07:ed:9c:
66:90:35:a3:cf:c0:27:3d:4d:bd:10:ec:ce:61:38:
97:fa:17:dc:9c:a0:0e:4d:8a:ff:23:bc:9e:56:24:
94:af:f8:09:b1:10:a6:07:c5:d6:57:05:b7:54:f8:
c3:05:1a:f8:3c:2b:72:8d:60:e3:f2:e1:73:f4:84:
5d:31:5e:04:29:4b:cf:04:12:9a:fa:4a:b2:9e:a4:
d5:85:4d:1f:f2:0f:3f:9b:ee:df:43:0a:95:81:53:
8f:0c:de:68:19:4b:b6:6e:cd:b3:e2:38:4f:f9:d2:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:99:D3:84:F8:62:79:31:02:DB:1D:D9:A4:26:8E:A7:C3:2B:7B:A0
X509v3 Authority Key Identifier:
keyid:A7:77:20:C7:DC:1D:C3:ED:D1:D0:D4:7F:92:3B:CD:83:3F:06:AF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3cgx9wdw-3R0NR_kjvNgz8GrzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ba7219-ad7c-48b0-9c96-17228cef0049/1/p3cgx9wdw-3R0NR_kjvNgz8GrzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:76:e5:5d:9d:0e:f8:59:df:45:e0:b4:32:b5:d3:72:bc:
86:b8:76:57:39:a9:fe:e4:b1:b6:c5:2e:0e:b6:24:5b:6d:59:
35:9e:6d:46:36:64:d2:7b:e6:3c:0b:09:e3:60:3c:5b:28:bf:
c9:7d:82:fd:92:d7:19:83:71:8c:93:14:ca:a7:95:74:80:bf:
eb:4d:d0:e7:52:fe:b3:33:8d:de:1a:7d:68:92:ca:43:e7:2e:
7c:6c:64:3e:17:81:a8:47:ea:c3:3f:59:3e:9e:0c:ce:04:23:
bb:44:08:77:0d:4c:c7:ea:ff:c3:62:21:db:97:c4:50:b0:bd:
47:0a:03:c8:5a:00:ee:31:91:f7:02:ff:ab:ad:92:56:94:bc:
f5:fc:38:67:1d:79:d7:6c:f9:53:36:b5:03:20:78:53:cd:1d:
ea:a8:47:e7:b4:fc:34:a5:8b:ea:89:59:7d:3e:d3:9b:39:ba:
e4:3d:f5:a8:f4:c0:cf:c6:52:11:e1:1a:dd:fa:7d:22:67:42:
72:1b:57:ab:60:9c:81:b5:a1:6f:a2:46:e6:fe:04:f9:08:43:
17:6c:e0:94:d7:33:7e:ed:7c:ad:3e:79:3a:41:74:2c:75:ed:
2e:51:31:58:f5:44:8c:a5:bb:52:f5:5a:ad:64:39:6d:0f:35:
70:0b:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:33 2025 by rpki-client