Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: snzi7dmgixBxx/twjoeO4K+nQoioHErcmmz8CTOFdtE=
Subject key identifier: 49:20:21:5E:A2:6A:97:25:24:9E:B6:50:F8:BA:50:C2:01:78:78:91
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 01976E1900F88F12629B2AFCF97064605384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 159F
Signing time: Sat 14 Jun 2025 11:00:21 +0000
Manifest this update: Sat 14 Jun 2025 11:00:21 +0000
Manifest next update: Sun 15 Jun 2025 11:00:21 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: 6htBZduYjJxNee2ZmjVtd41tVrbtoGBMqfwnOHeVtWY=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:00:f8:8f:12:62:9b:2a:fc:f9:70:64:60:53:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jun 14 11:00:21 2025 GMT
Not After : Jun 15 11:00:21 2025 GMT
Subject: CN=4920215ea26a9725249eb650f8ba50c201787891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:25:4b:e2:20:8f:77:07:37:01:cc:2d:ca:18:
9c:49:95:47:9f:f8:bd:4a:ea:c7:22:c2:1e:1a:74:
24:3e:3b:f4:88:f2:a9:d1:32:87:4b:94:04:d1:a7:
0b:f2:67:64:34:c2:3c:67:18:97:be:45:4c:dc:d5:
42:bd:f9:4f:5b:75:65:f3:cb:3d:96:40:d0:87:c4:
06:c7:b1:4c:af:c8:39:69:63:ac:fe:06:f1:e3:72:
93:c6:78:d9:a0:c9:dc:ea:01:88:fd:33:2c:30:26:
92:27:08:0c:29:2c:ad:34:fd:3a:7d:ed:51:fb:a1:
2d:21:08:86:91:f5:f4:14:da:3c:a8:ae:a7:5e:e5:
a5:f8:3e:35:31:1b:bd:19:b3:6b:d4:1d:e6:7b:03:
92:cd:14:98:64:e7:57:f2:d2:52:5d:0f:99:85:38:
ad:f3:2b:b4:38:eb:9b:24:22:dd:87:4c:e4:a9:14:
20:a4:74:a3:90:ab:05:12:b5:b4:a1:5e:08:31:e2:
5f:d2:7a:e4:70:58:4b:d3:98:67:c8:64:8d:7e:ba:
f0:6f:f5:32:16:be:9a:10:b6:d4:a6:c2:0e:4b:ab:
20:24:61:db:3f:a5:71:f0:b9:2a:b7:38:a1:7f:e4:
55:7c:8b:7d:42:99:e3:0c:9c:bd:98:b1:e8:5e:99:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:21:5E:A2:6A:97:25:24:9E:B6:50:F8:BA:50:C2:01:78:78:91
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:67:69:1c:89:e8:2f:4b:63:a7:6a:8b:99:92:c9:1b:84:fb:
e0:01:7b:fa:4f:7e:46:a2:26:23:01:2e:a7:1c:60:b1:9f:eb:
9f:be:fe:ae:14:23:7e:79:8c:3d:a5:ba:aa:80:b2:69:d7:12:
04:fd:e4:2b:57:91:ec:f0:8a:05:c1:f5:3e:cb:42:98:ea:67:
ea:bf:9f:d7:f9:12:2b:92:c3:42:13:91:cd:0a:db:2d:e0:b4:
ca:ab:50:99:d0:6b:c6:b2:ee:42:9b:69:ef:56:10:ac:41:0c:
17:85:6d:ec:4c:67:02:c1:0f:8a:18:8f:08:34:06:92:92:99:
ba:0d:26:6f:14:48:36:42:66:50:a4:b1:71:04:80:59:7c:07:
56:f0:5d:39:3e:92:67:8e:99:ff:fd:42:d2:ee:0f:ef:90:e7:
2a:44:aa:11:93:b2:06:0c:ee:a8:cc:65:0e:33:0e:dc:26:74:
f8:3f:32:b0:78:d6:ea:4f:97:32:7c:e0:22:2e:d0:b6:bc:d0:
0e:51:b7:aa:38:31:f8:bd:ce:71:67:52:86:f5:04:b0:c3:0a:
41:a2:fe:5d:f6:a8:48:12:fe:64:d5:4b:fe:57:ae:c9:6d:97:
76:cb:34:b2:b5:9d:94:97:14:ac:80:29:49:2b:a6:f1:a1:54:
f0:0c:c1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:21:09 2025 by rpki-client