Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: eK/hQQsYqBOdAAhUrdWI8GeINtTOEYXdH79xpMCVnOI=
Subject key identifier: 03:8D:C8:2B:83:9C:14:04:A2:D1:98:DE:73:B4:C6:4C:55:D4:37:7C
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 01976C61ED3ACB00FB478C2DFEE068B5B638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 11A4
Signing time: Sat 14 Jun 2025 03:00:46 +0000
Manifest this update: Sat 14 Jun 2025 03:00:46 +0000
Manifest next update: Sun 15 Jun 2025 03:00:46 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: 4B/JIPDRa+IR5rCaHVK6idHuf4DHNvOL40wM3mKjtkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:ed:3a:cb:00:fb:47:8c:2d:fe:e0:68:b5:b6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Jun 14 03:00:46 2025 GMT
Not After : Jun 15 03:00:46 2025 GMT
Subject: CN=038dc82b839c1404a2d198de73b4c64c55d4377c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:83:d7:80:52:ee:7b:5a:d3:5c:c7:1e:7e:
8b:8e:58:d1:86:40:fe:82:fd:77:68:40:1e:1d:ea:
82:8f:c7:58:f0:1d:36:47:fb:37:48:50:56:55:96:
31:7b:10:4a:9a:82:7d:63:f2:ed:c0:f5:24:0d:f5:
e1:b0:da:15:68:7c:d9:d7:20:1f:1a:99:6b:7a:0f:
34:ce:4e:df:40:26:0c:44:c1:45:ba:25:8e:21:28:
b0:43:3c:37:ea:1f:db:14:c1:fd:b0:bc:9a:24:ef:
b7:31:11:3e:a8:bf:4d:2d:b0:b1:49:93:71:5b:3b:
70:fe:37:40:d0:63:af:6e:fa:33:6d:c0:11:00:c6:
f5:64:3e:45:11:2c:2d:4d:37:f5:21:69:3d:19:9d:
ae:aa:38:e1:70:b4:91:39:e8:9a:64:84:f3:b8:fe:
64:d6:87:c3:98:22:3b:7e:53:fb:86:bd:e9:2e:30:
09:97:76:38:4b:37:e1:51:d8:d4:ac:95:8a:22:57:
4e:ef:82:41:f0:4b:2b:94:9f:63:06:ff:db:64:07:
85:3b:95:ae:71:54:bf:f7:9d:84:c6:1c:0a:64:93:
53:bd:2f:b8:69:2a:6f:dd:59:4c:8e:2f:3d:c5:ae:
11:2e:ae:80:d0:a2:a8:08:a2:61:3d:89:c0:20:07:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:C8:2B:83:9C:14:04:A2:D1:98:DE:73:B4:C6:4C:55:D4:37:7C
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f5:29:cd:ca:2d:b6:66:f6:91:f5:34:24:84:a0:b5:02:fb:
a3:0e:b8:36:a9:42:4a:2d:5a:e2:12:96:20:63:f4:8a:6f:79:
e3:6d:56:32:58:7b:78:f2:de:b4:87:0f:bf:87:2a:95:2f:02:
da:b4:4e:8a:86:80:ed:95:d9:17:d1:c3:6e:a6:03:3d:0b:27:
f7:41:ed:0f:e4:f6:75:10:5a:5e:4d:de:86:86:9a:14:a7:57:
d6:74:e4:4f:7f:f6:9f:93:0c:0a:a9:b4:03:72:6b:d1:cb:09:
b0:e6:1c:93:a3:63:96:93:45:4f:cf:1d:37:9d:24:e2:f6:1f:
21:3b:67:02:b1:96:81:01:ec:87:2b:43:a6:c2:fc:14:63:31:
d9:9e:7e:08:8d:0b:75:21:2c:d1:39:17:9e:53:27:2b:59:ba:
0b:23:21:66:c3:ab:3f:1b:b2:b2:3c:e0:d5:25:74:30:2a:bf:
86:e6:d9:4a:8d:5d:0d:f6:57:e3:3c:b5:af:81:97:42:a0:5c:
5d:43:22:f6:9a:a4:0e:3c:7d:74:0a:9f:73:e5:1b:73:40:3b:
f5:d1:65:6c:df:97:57:2a:fd:90:1a:09:ec:7e:5b:7d:aa:aa:
3e:c1:c8:92:9b:b9:7e:ee:a1:eb:3d:a9:72:68:fa:42:30:d4:
e3:0e:26:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:54:58 2025 by rpki-client