Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
File: Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft (raw, json)
Hash identifier: P67QLSPI66C1QpREpVj2MSwunaSf77MdOrVek3n/zJM=
Subject key identifier: 4D:CB:B6:DD:FC:BF:7E:07:09:91:71:4F:8E:E2:C9:89:16:40:3D:FA
Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Certificate serial: 01983FBDA11F44C1B6C9CF0D4032359324BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
Manifest number: 109F
Signing time: Fri 25 Jul 2025 04:00:48 +0000
Manifest this update: Fri 25 Jul 2025 04:00:48 +0000
Manifest next update: Sat 26 Jul 2025 04:00:48 +0000
Files and hashes: 1: Mkotcv7SVmhVByeOdk7RYd0Gupw.roa (hash: kugv35F9Yygi1KlvVSFAeTblpUz5gnszp5yric0gM3k=)
2: Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl (hash: XsiwxAKnqaMJi3//h8svXi5L3/c161ft9rCfSM5B5m8=)
3: cwlcUqjMTfEdbvTuuvejw-lUBd4.roa (hash: ZDYHX14do9hr1lUFKNqTx5RIBWwnueYI0rEZQZpyW1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:a1:1f:44:c1:b6:c9:cf:0d:40:32:35:93:24:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c
Validity
Not Before: Jul 25 04:00:48 2025 GMT
Not After : Jul 26 04:00:48 2025 GMT
Subject: CN=4dcbb6ddfcbf7e070991714f8ee2c98916403dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:6a:a8:15:07:4f:14:71:37:11:83:f7:ea:
8c:63:39:35:93:a1:8c:77:0c:3f:0a:c7:2d:0b:b5:
c5:f1:53:a3:99:83:2e:a2:0c:45:3f:49:43:57:86:
9d:8d:11:19:27:43:c3:2e:aa:c1:d3:3e:1b:e6:8f:
fc:f0:41:71:9f:7a:22:95:06:05:a2:44:b4:66:c3:
06:7c:ab:0a:94:16:88:3a:05:25:1b:51:43:b5:29:
1c:10:da:e8:e3:9a:4f:c1:97:ca:92:27:69:8d:33:
4e:d9:64:80:9a:98:52:a0:27:64:50:42:f7:00:a9:
04:01:b1:b9:64:48:ef:fa:e9:bb:bc:d9:dd:f1:db:
c8:5e:ee:a3:2e:a0:51:46:0f:3f:94:e7:44:43:c4:
55:72:62:27:9b:04:6b:93:03:3d:94:21:bf:39:4a:
3f:4a:c4:99:0a:f4:34:0f:02:b7:b5:bd:37:5f:91:
77:96:c7:eb:06:ef:84:ff:c1:1c:bc:f5:26:85:22:
8b:82:e7:e6:1f:20:0b:e2:9d:e1:19:c6:35:65:67:
8a:c9:16:37:b4:e7:3c:f9:85:91:f5:3a:d9:9b:46:
a7:35:8f:ee:59:cf:85:33:d5:a5:bf:e0:34:47:e7:
4d:4f:7a:3c:b6:b0:13:aa:f3:67:de:8e:11:f3:85:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:B6:DD:FC:BF:7E:07:09:91:71:4F:8E:E2:C9:89:16:40:3D:FA
X509v3 Authority Key Identifier:
keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:99:a0:d8:2a:05:6e:48:45:cc:c8:ba:12:0c:cd:72:33:15:
2c:96:c3:61:99:d3:68:53:37:03:06:09:5d:69:c0:49:fb:f0:
1c:ac:25:ac:8f:c4:0b:47:17:20:c0:e8:44:d6:e6:9d:01:7d:
05:71:81:a8:86:23:2a:5c:f4:79:1b:87:a0:be:33:b3:5d:cf:
a6:8b:03:e3:81:cb:9f:de:24:4b:bd:44:e1:72:08:59:6f:61:
cc:f5:a2:c8:5e:ed:0f:78:11:21:df:89:0b:9b:e7:4a:e5:c1:
2d:f0:15:43:8e:85:af:af:cd:64:78:dd:de:b3:8c:57:48:57:
7e:6c:f5:17:d4:c8:14:a4:f9:cb:b4:0f:f8:9f:7a:4d:e5:50:
a0:f5:66:8f:d1:1d:47:a0:d1:27:fc:a4:99:58:4d:8c:ba:f6:
97:35:92:a3:c0:93:e7:af:57:5f:48:d7:1e:1a:3f:91:ed:c6:
ee:32:93:f4:b6:fe:c5:a7:60:b1:10:c8:1c:7a:f7:f3:c9:88:
c1:1f:a0:ea:04:4d:80:64:61:59:e0:0b:ce:4c:ac:df:b2:32:
2e:f6:f7:43:d4:14:bd:1e:18:f7:5d:8e:86:ca:f3:0a:be:ca:
5a:e2:6b:7e:7b:7c:86:cd:6a:86:fb:a9:c4:98:c0:d6:c1:fe:
f0:3e:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:52:35 2025 by rpki-client