Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: H2Ue9h1C3pQSTGF3ONpgSbSdPWFnJUul30s6hy5pDbM=
Subject key identifier: B7:ED:3C:67:D5:E6:B2:9A:F0:01:E1:90:22:1C:FB:7B:9E:02:CA:A7
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 019889FC5011E54381F3337674464A39FC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 14:01:10 +0000
Manifest this update: Fri 08 Aug 2025 14:01:10 +0000
Manifest next update: Sat 09 Aug 2025 14:01:10 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: 0C2qXgha7loo+wqtoyhHROppufGxeIzD4robTx2W4Po=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fc:50:11:e5:43:81:f3:33:76:74:46:4a:39:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Aug 8 14:01:10 2025 GMT
Not After : Aug 9 14:01:10 2025 GMT
Subject: CN=b7ed3c67d5e6b29af001e190221cfb7b9e02caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e5:31:05:46:e4:14:03:a2:ce:93:50:d2:3d:
7c:91:8f:1a:7b:33:1d:45:05:9e:5d:f2:fb:c5:c9:
a0:50:78:0d:ac:05:9a:18:24:77:39:96:90:32:df:
da:f1:1f:76:f4:ab:cb:dd:c7:3b:18:d9:aa:05:9e:
5d:c3:55:6f:54:d6:92:af:4c:15:be:63:8b:57:99:
6e:a9:bd:39:75:59:31:5f:13:26:1f:0e:9f:bc:b3:
b1:7f:45:21:25:43:08:16:3a:df:50:eb:b3:2e:c4:
94:ae:2c:85:ec:2c:c9:a3:24:44:23:07:05:bd:41:
8b:48:4b:56:1e:72:7f:7c:3f:8b:b9:c6:e6:30:2f:
e6:7b:f7:ca:83:75:6c:62:2c:eb:67:02:9e:26:7b:
c3:47:3e:02:5d:b4:ec:90:a0:2f:04:3d:31:b7:35:
de:a0:86:d5:bb:74:8e:1f:2d:b2:65:22:3d:68:ae:
9e:9a:d1:9b:2f:74:25:89:04:74:8a:92:78:b2:54:
2e:8e:34:7a:35:ac:40:46:62:03:61:7c:94:93:63:
18:c6:87:55:28:4b:ff:c9:a5:9f:94:29:39:46:16:
38:3c:0f:58:c8:97:c2:ce:0b:fe:b0:cc:bb:78:4e:
ea:a8:8d:c4:2c:5f:f5:d1:b6:a2:22:4b:04:8b:98:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:3C:67:D5:E6:B2:9A:F0:01:E1:90:22:1C:FB:7B:9E:02:CA:A7
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:65:e5:cd:6d:4f:9d:03:81:26:f9:4c:61:bd:58:47:77:ba:
fd:db:54:25:11:7c:00:e9:10:d7:25:8d:0b:6b:c0:d3:13:90:
47:10:52:6e:ea:96:12:13:3f:7c:e1:70:46:05:f7:d5:0b:de:
f6:a7:95:81:6a:43:7e:41:a9:0b:61:7b:e6:1f:2d:5a:9c:f3:
1c:50:1b:ab:62:61:bd:d5:77:90:eb:2d:83:bc:bf:2a:b6:4b:
14:cc:84:a0:e6:66:07:1b:32:49:9b:75:c8:7d:e9:91:d5:3c:
ec:1a:4c:b1:f4:a5:68:88:49:1e:ba:57:05:55:a6:31:1d:4f:
61:61:e5:e5:6b:65:39:64:01:92:56:a3:e9:ea:7b:39:58:22:
dd:56:4f:86:75:f5:be:34:8d:b3:1e:35:ae:99:73:f4:bc:95:
f7:d4:b9:62:5b:12:af:20:10:a7:b7:0e:f3:67:eb:99:c4:6e:
26:74:ed:e2:e6:cf:8b:fe:4a:8c:1c:2b:d8:eb:f4:86:ea:01:
e5:a3:fd:ab:7f:63:b9:96:24:10:cf:5f:09:26:57:dd:d8:a2:
36:7f:dd:7a:6d:67:fa:fe:92:4f:3c:48:5a:d4:8c:85:eb:1b:
78:17:a6:2e:9c:68:5b:14:0e:b5:6f:ad:31:be:79:4e:4e:d5:
6d:c7:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:50:11 2025 by rpki-client