Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
File: PesQRGPpILRVQravGifVlQ6G6aA.mft (raw, json)
Hash identifier: KG3IMDscZLRLNI6Ci8ZEnxy9B85Jtz1+x4iJ/aUdo7U=
Subject key identifier: 5C:5B:25:DB:E0:24:F1:17:7E:43:D7:C7:53:4E:31:73:3A:64:8C:22
Authority key identifier: 3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
Certificate issuer: /CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Certificate serial: 01984BF8AC360C2AED553A2F165B008F98E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
Manifest number: 13D3
Signing time: Sun 27 Jul 2025 13:00:44 +0000
Manifest this update: Sun 27 Jul 2025 13:00:44 +0000
Manifest next update: Mon 28 Jul 2025 13:00:44 +0000
Files and hashes: 1: 1-gBlmRElwFozsXlk-zODgtGpAuA.roa (hash: xVfyWKViH35Kce9xfyzBsAu8tiyl2DKuvLolO3h9f4s=)
2: 3X_OCsm4wSXVQQmIGXvbWiOwwPk.roa (hash: uAifQhxv7JsH18zEmjWnpWg6H+QdTkCHwp4ioEB51v8=)
3: CGYCoXePbFBrriJrNgrZF9Uefow.roa (hash: KPb5usKgdYQ3JpgKFKA1WlcbtVkuv48+f5lB1B8M9IA=)
4: PesQRGPpILRVQravGifVlQ6G6aA.crl (hash: wvn9XO25CFSnEpM6usaGbWkCqYLKZRiJyKOk6C2shrE=)
5: PyMiLV0wnNJXQTQMDEPMVXWx9ZQ.roa (hash: gY7gqfT3zhDP3uAkWWCqVVxfWQ7GvCSgS8lQh0U5EGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:ac:36:0c:2a:ed:55:3a:2f:16:5b:00:8f:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3deb104463e920b45542b6af1a27d5950e86e9a0
Validity
Not Before: Jul 27 13:00:44 2025 GMT
Not After : Jul 28 13:00:44 2025 GMT
Subject: CN=5c5b25dbe024f1177e43d7c7534e31733a648c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:46:2d:b7:10:c1:aa:fa:68:8d:57:4c:f3:
42:71:a7:50:e1:d9:5d:15:96:91:f6:a8:e7:fc:35:
a5:32:fd:e8:0e:7a:9c:21:b0:ef:a2:9b:41:cd:3c:
8e:77:bd:19:bf:37:8c:00:49:4f:00:4b:33:6f:34:
91:4d:1f:13:cc:a9:b1:0b:1a:1e:de:5c:d3:73:fe:
13:d4:1d:8f:bb:17:a4:f4:8b:7b:2c:e4:72:fd:fe:
5e:8f:8e:ce:9c:05:e8:d0:a1:85:78:27:86:c5:18:
a7:81:c6:a5:35:b1:a1:c9:76:5b:04:6e:22:3d:b2:
99:0c:ca:69:10:1e:eb:f2:55:ad:ce:2a:a6:11:22:
99:9c:81:89:74:cb:83:19:3f:bd:98:af:10:3a:5d:
99:ea:a9:30:64:8e:ce:0d:51:89:5b:f4:78:a5:f6:
43:77:f2:af:7b:f8:74:15:b5:55:ec:1e:ea:d8:74:
1e:1d:42:34:d9:1f:53:9a:bd:29:17:cb:aa:be:8e:
bf:eb:63:78:4c:d4:d0:18:e1:59:13:47:fb:b0:7f:
1f:d0:20:d1:ea:9d:77:45:f6:fd:a1:7a:d5:85:25:
22:79:45:a6:6f:1a:9b:0e:1b:d7:2b:7f:4e:2c:f7:
7f:35:e9:89:0f:42:2d:97:de:bb:80:9e:07:78:57:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:25:DB:E0:24:F1:17:7E:43:D7:C7:53:4E:31:73:3A:64:8C:22
X509v3 Authority Key Identifier:
keyid:3D:EB:10:44:63:E9:20:B4:55:42:B6:AF:1A:27:D5:95:0E:86:E9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PesQRGPpILRVQravGifVlQ6G6aA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c686b3-e7a9-4f9c-842c-119d8bf717bb/1/PesQRGPpILRVQravGifVlQ6G6aA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a4:4b:d3:71:c3:c2:17:c7:21:ec:3a:91:f0:3f:ac:db:cd:
c9:ed:79:82:a5:87:51:4c:0c:07:97:a8:08:e2:e6:57:03:99:
81:6c:cd:5c:45:8c:ff:2b:1a:18:c7:86:4e:44:e8:c6:fe:25:
c1:87:3e:fd:14:ed:3b:db:01:47:99:16:f8:23:d6:63:56:44:
7c:c6:30:07:b7:d7:ef:77:1d:d5:a6:43:6d:cc:46:b4:ba:84:
ce:68:0b:d7:b4:a4:f6:f6:98:e2:83:d3:5c:dc:35:2a:1a:6c:
67:a5:5f:b9:00:d2:f9:1d:40:5e:eb:b3:96:fa:4d:18:a5:79:
31:4a:14:c9:26:eb:7f:c5:71:da:37:6a:a3:c8:f8:34:a9:bb:
a5:19:06:81:05:3b:5b:c7:ad:7a:bc:97:fd:c2:d0:46:21:09:
12:a7:7b:c4:d1:e6:f9:4f:e9:f6:01:da:fc:7e:dc:e5:11:90:
2f:a0:73:52:a7:35:8a:af:66:a0:44:d8:06:4b:09:b0:d2:7d:
45:3d:17:1f:6b:83:e6:97:01:39:97:ff:c6:e2:dd:dc:6b:b6:
c2:46:bf:69:76:e2:46:46:9f:61:09:05:ef:a8:f6:a5:7a:b8:
b0:2a:ae:59:e6:c8:fa:bb:e9:2d:78:4b:17:c5:2d:71:38:7d:
f1:2b:65:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:41:01 2025 by rpki-client