Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft (raw, json)
Hash identifier: ETs67CPwygBvS7W1+74jqIo7o42CMbPoxU7suG5VOg0=
Subject key identifier: 8D:7F:26:00:84:DA:1A:EC:8E:15:59:0F:5D:F3:0B:C1:4C:CB:D1:2C
Authority key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Certificate issuer: /CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Certificate serial: 01988356A72C696DF023639102E19587375C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
Manifest number: 0B24
Signing time: Thu 07 Aug 2025 07:02:30 +0000
Manifest this update: Thu 07 Aug 2025 07:02:30 +0000
Manifest next update: Fri 08 Aug 2025 07:02:30 +0000
Files and hashes: 1: 1-QJRvD_s23t8EY5xEdDTuC908Sc.roa (hash: lC8dpaKtg1+1rVuBlbmqllxIuGpvRJft4kKrK9r2MOs=)
2: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl (hash: x0Cg/8M3DA7sN8Cy9nNu00OioxFw9xsY/qXzq7zDVP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:a7:2c:69:6d:f0:23:63:91:02:e1:95:87:37:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Validity
Not Before: Aug 7 07:02:30 2025 GMT
Not After : Aug 8 07:02:30 2025 GMT
Subject: CN=8d7f260084da1aec8e15590f5df30bc14ccbd12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:82:f9:c9:81:03:16:75:a4:8e:42:b6:14:
8a:de:18:28:86:d5:9e:d7:53:d3:a7:1d:84:73:48:
a9:bb:e0:a6:5b:9a:c2:83:c9:fe:09:d6:c4:35:5b:
57:54:7c:32:92:82:c3:37:fa:31:2b:64:9e:cf:59:
9d:6d:31:10:f7:ce:e9:a1:98:4a:ff:75:40:1a:fc:
18:7d:e5:fb:70:1a:83:70:02:ba:4c:be:52:e3:72:
13:75:08:97:61:84:bb:fa:d4:1c:15:98:97:46:86:
3b:fc:c5:74:91:05:00:4b:d3:9f:d5:54:e1:bf:34:
8c:05:44:03:ae:7c:60:d0:12:29:ac:10:1f:cc:3a:
dc:a2:36:08:d7:de:76:31:ec:32:56:d9:ea:78:41:
e8:9a:2b:6d:3d:09:47:e9:e1:d0:19:f5:bc:a0:fb:
3d:53:78:43:f8:35:7a:8c:ea:c4:c0:5b:33:c6:36:
34:4d:75:3e:6c:d2:a1:26:4d:cf:0a:6e:09:09:3d:
16:c7:a0:04:e2:18:a6:6a:c9:d2:ff:34:b2:a5:aa:
b6:e0:18:81:1a:0a:19:71:b5:8d:f6:00:5f:41:14:
6c:59:8b:06:e7:8b:93:2f:d3:b8:17:6b:4a:7f:ff:
0e:fd:59:d2:54:56:63:eb:3d:22:64:43:d0:5a:2d:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:26:00:84:DA:1A:EC:8E:15:59:0F:5D:F3:0B:C1:4C:CB:D1:2C
X509v3 Authority Key Identifier:
keyid:3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:76:ef:53:03:22:f4:48:e1:72:76:e5:29:99:e2:ee:4d:3b:
2b:38:ac:25:17:b2:c3:bf:c7:0e:76:1d:f0:96:15:a1:63:4c:
40:fb:c1:64:c9:24:79:16:54:b2:bf:2a:38:91:c2:54:84:9a:
d5:f9:d6:a8:78:cb:34:80:95:4e:8e:fc:e7:6c:3a:1c:f9:d4:
d6:46:35:32:ba:1a:fb:27:b6:41:12:3f:4d:ef:6d:db:f8:98:
7f:01:fa:c6:ff:94:03:1f:7e:84:ad:a0:da:05:ec:3e:89:f4:
a9:0b:17:04:68:e4:84:cf:c8:db:bd:06:94:59:39:36:6d:a2:
24:03:39:49:80:f4:a4:b2:62:6c:77:a6:06:2b:68:9a:e9:4d:
43:ff:f9:5d:20:6a:01:f0:c6:27:0e:15:62:73:90:fd:53:ce:
d7:55:51:32:fd:4d:df:36:d2:bf:6a:39:4a:17:9c:4b:f4:b0:
99:03:a1:a7:95:a2:84:fd:b5:af:3c:8d:33:de:70:27:6c:fe:
05:fa:3a:ee:98:41:b6:11:cb:61:ec:96:ad:44:36:66:17:2c:
c9:d3:1f:f4:20:6c:00:c8:bd:d7:19:58:e7:c1:52:e4:ed:8a:
f4:89:38:9d:c6:26:19:2e:a2:b5:5f:dd:bb:5b:55:85:45:c2:
8c:84:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:33:55 2025 by rpki-client