Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: raasbiuMLIlgCcJo4cUqIODk0bZfKhBUP3k0AQUEj7E=
Subject key identifier: 61:94:0C:98:01:FB:71:6A:C2:F3:1C:78:07:F7:20:14:D7:64:1D:53
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 01978169444C77A96A20DF1A99561DBEE2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 159A
Signing time: Wed 18 Jun 2025 05:00:48 +0000
Manifest this update: Wed 18 Jun 2025 05:00:48 +0000
Manifest next update: Thu 19 Jun 2025 05:00:48 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: y5UcR0H8EyAIa83qYfzrYvzK6Mrul11Hqk90nbO1iCg=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:69:44:4c:77:a9:6a:20:df:1a:99:56:1d:be:e2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jun 18 05:00:48 2025 GMT
Not After : Jun 19 05:00:48 2025 GMT
Subject: CN=61940c9801fb716ac2f31c7807f72014d7641d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:96:9c:f3:31:3b:60:83:91:d7:93:6c:33:
88:ab:8e:1a:ee:c7:fb:22:25:bc:47:51:ab:4e:d6:
80:02:ce:e5:6e:c9:a6:a0:1b:3a:44:a8:bb:3b:24:
08:e2:89:80:de:bd:81:d5:68:bc:b1:8a:3c:2c:48:
f3:75:cb:5e:aa:7f:0b:fa:25:b8:50:30:51:b1:e1:
a4:36:c0:d4:bb:0c:2a:ac:fe:b7:3c:79:9e:b7:7c:
81:43:65:2a:62:56:81:85:3f:21:70:44:1c:7a:15:
ec:56:95:79:4d:ab:60:3e:17:13:27:89:e3:98:a5:
c0:42:ef:0c:4f:e2:d0:54:5c:9e:f8:5f:12:57:9c:
5a:37:4d:e4:f4:78:86:12:8d:1f:a5:31:fa:31:d5:
e2:95:54:24:4d:9a:11:e3:04:d9:76:de:8b:03:b5:
a2:f6:c7:ae:51:5c:14:78:38:35:49:2a:4d:76:21:
d9:f2:cf:4f:ee:ea:ac:db:32:0d:65:e9:95:77:73:
49:69:05:24:75:f3:21:b9:4c:7d:3b:18:1f:2b:99:
74:db:82:9a:6c:c1:ab:3c:68:a1:84:57:c7:2c:b3:
d9:76:88:e5:8e:c9:d0:c5:28:b3:40:b9:a2:8d:76:
8c:d3:23:db:dd:12:2f:74:4f:db:21:21:a5:a4:3f:
51:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:0C:98:01:FB:71:6A:C2:F3:1C:78:07:F7:20:14:D7:64:1D:53
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:21:0c:9d:d9:12:66:f2:5b:c6:9d:09:38:15:95:73:9b:8c:
37:b3:0c:e1:21:aa:d4:6d:b7:3a:7e:e9:3c:c6:65:20:8a:d9:
57:65:59:4a:63:9c:6a:fd:ff:68:87:1f:38:c6:1b:f6:d6:f3:
10:b6:a4:1e:bb:06:4c:4d:4f:2b:00:fa:fa:e5:7c:2e:ab:a2:
69:fe:45:b2:18:76:a8:69:d4:e7:16:78:5e:e3:33:c5:16:4b:
06:08:60:f2:a5:93:62:27:18:25:f6:d2:34:7e:96:9c:e4:08:
a8:eb:b4:51:47:3c:0d:62:45:8d:57:8d:56:5f:6d:fc:72:af:
d4:e2:5a:78:32:4b:1c:09:ef:5e:c5:84:65:82:56:6b:53:5e:
10:54:ea:1a:5f:9c:8b:22:08:19:8a:35:ee:5f:20:f8:42:0c:
0d:85:30:ae:40:85:c9:67:48:de:26:ba:7e:58:f3:e9:6b:b0:
8e:1d:89:fe:a6:ef:73:2d:6b:73:7a:69:02:f9:6e:e9:41:28:
4a:56:c9:10:2f:d1:db:b7:5f:61:75:91:08:c3:fa:35:f9:2b:
cb:44:fe:1a:38:48:9e:34:b3:a7:2a:8e:c5:ec:8b:d6:04:05:
0c:2c:c0:6c:3e:f4:6b:f5:43:c8:21:86:b3:c7:2e:dd:51:71:
d1:40:ab:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:28:59 2025 by rpki-client