Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: JTRAPWMAb6NkOXXt56NXn/FJokOJTeY5gzVTKY1AVGU=
Subject key identifier: 6F:2C:2A:EC:9A:6E:AF:B8:4B:A0:0F:B6:33:CD:7C:71:95:49:1E:08
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 01987CAE9B21F6E227FB865C05D0EB820478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 1231
Signing time: Wed 06 Aug 2025 00:01:14 +0000
Manifest this update: Wed 06 Aug 2025 00:01:14 +0000
Manifest next update: Thu 07 Aug 2025 00:01:14 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: a1Rvw1LKfRmyRzVIYKeKR/UuUAP5Zs4DzGHWmqo/ajg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:9b:21:f6:e2:27:fb:86:5c:05:d0:eb:82:04:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Aug 6 00:01:14 2025 GMT
Not After : Aug 7 00:01:14 2025 GMT
Subject: CN=6f2c2aec9a6eafb84ba00fb633cd7c7195491e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:e6:31:5f:31:48:73:10:54:8e:9c:fc:80:
15:87:b4:c2:f7:b1:52:bc:98:38:90:71:24:0c:31:
14:6c:bd:cd:bd:24:fd:5e:99:ce:93:96:ce:89:eb:
bf:dc:73:fb:f0:01:2e:c0:ff:e4:ce:f8:75:f2:68:
cd:a7:ef:5d:99:f0:2d:c3:c5:df:90:d2:4a:93:98:
2b:e6:a4:76:94:be:f4:14:fd:7b:1b:5c:4d:86:c6:
3a:91:11:df:01:c5:6c:bf:c8:8b:d7:9f:d0:da:16:
4c:64:50:37:ac:f5:5c:9c:ce:0b:e4:cf:58:3b:00:
07:42:05:85:4f:ee:66:55:24:ff:7c:9b:14:69:ed:
08:33:64:b6:82:85:6f:23:cb:47:e2:98:00:6f:d3:
e3:70:ca:5f:ed:9c:9e:19:d1:01:ed:39:b6:9c:29:
97:54:ce:3c:37:53:2e:94:4f:7b:92:ce:b5:bc:eb:
81:f6:85:ae:ae:1a:5f:2e:6a:2b:e1:1e:81:cf:37:
f7:fc:bb:21:af:07:a1:ca:5c:0b:dd:25:b9:94:11:
e3:9f:0c:d9:f9:71:40:3d:a1:6d:66:3b:f7:85:f6:
9b:1f:4f:e0:0b:86:2d:59:ac:4d:66:ef:98:bb:22:
a5:7e:81:14:d6:22:6c:be:a9:32:b1:e5:83:98:8e:
2c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:2A:EC:9A:6E:AF:B8:4B:A0:0F:B6:33:CD:7C:71:95:49:1E:08
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a3:b4:e1:1d:a9:13:98:f9:b9:a1:1f:1d:7f:a7:51:1d:33:
97:b7:b4:f7:43:27:e4:a3:cf:b1:6e:0e:58:e1:dc:4e:5a:81:
5f:48:e8:c4:f0:41:ca:91:b5:2d:7e:2d:d9:19:90:d9:87:c2:
d3:91:59:9d:61:00:f6:73:f6:d1:02:b5:16:2d:e3:5c:d6:b4:
f3:fb:75:2c:ef:1f:a6:94:ae:6a:a1:5a:b5:53:3f:1a:e3:00:
7d:7a:0d:de:1a:5e:47:65:69:b4:6d:21:5a:82:9e:52:c5:e6:
dc:af:f5:b4:69:6c:30:f2:4f:6c:4e:a4:7e:bf:9e:84:15:f6:
10:5c:af:22:6a:20:22:63:e8:41:6f:df:d1:e0:bc:1b:00:10:
02:49:0b:2b:3c:80:6f:f3:06:e2:66:05:b8:b8:00:c0:ce:d1:
5e:ad:86:2c:99:70:4f:ea:a4:cb:a0:10:a4:d3:4d:43:4e:8e:
78:7b:07:6c:ad:e8:21:84:37:71:af:01:35:83:70:7b:16:72:
a9:ab:c4:5e:60:c0:b8:25:61:54:65:32:47:ca:67:fd:ca:63:
dd:14:21:5e:8d:ee:d7:24:d8:f6:c1:8f:10:f0:3b:4b:18:a5:
5c:fb:57:46:14:4a:2a:3e:2c:73:61:e4:95:16:21:e4:8f:2d:
18:53:25:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:08:20 2025 by rpki-client