Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File: PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier: 1GYSDt96PZKLU63cMOSeFP3SehunaPEhqeAY2Pm1QIo=
Subject key identifier: 0B:B1:D5:CD:50:FA:EF:E5:38:6A:30:D3:E8:42:C8:94:FD:B3:A2:C0
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0198553245101A1FA74A605626B3E2F98872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number: 0F88
Signing time: Tue 29 Jul 2025 08:00:14 +0000
Manifest this update: Tue 29 Jul 2025 08:00:14 +0000
Manifest next update: Wed 30 Jul 2025 08:00:14 +0000
Files and hashes: 1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: bzJRBQhkDccKgD7fz3ewYMUeYPg8sDX04OBzbJVR47U=)
3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:45:10:1a:1f:a7:4a:60:56:26:b3:e2:f9:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jul 29 08:00:14 2025 GMT
Not After : Jul 30 08:00:14 2025 GMT
Subject: CN=0bb1d5cd50faefe5386a30d3e842c894fdb3a2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:10:a7:73:0f:fa:ae:27:ec:bc:9c:b6:73:
15:ac:52:03:10:0a:bb:dd:bb:3d:86:da:02:49:1f:
70:e2:d8:fb:f7:6a:9c:5c:3e:18:f7:ba:53:fa:8a:
05:a8:20:f5:c2:ed:fa:38:65:da:81:fc:98:c9:39:
66:ee:c0:30:52:70:1d:f3:8f:cf:35:91:57:70:08:
a4:a4:4e:26:2d:80:70:5c:a7:87:17:ba:10:09:4b:
29:2f:54:e3:63:70:ec:52:c1:ed:a5:bd:7e:65:54:
42:ea:cf:75:76:5a:67:8c:ef:7e:21:b0:e8:fd:29:
b2:5b:04:97:7f:5f:15:67:ec:ac:1c:b9:f9:0e:5d:
4b:5b:12:85:28:ad:68:b5:fa:9f:d2:85:3b:b8:81:
1d:3e:31:c3:3d:41:b7:99:f0:d6:33:5e:e7:a7:0e:
dd:54:c9:5f:63:1b:65:45:95:ed:49:00:1c:9f:b1:
c3:1a:13:f2:d0:a8:a5:d8:f5:83:d1:45:01:4b:76:
f0:21:a4:2f:93:59:ad:1b:d6:be:d1:93:82:d8:fe:
cc:f2:5a:fe:9a:9a:22:e5:be:9b:82:bb:8d:1a:e0:
8a:fe:91:6a:b0:65:b6:5b:f6:d0:9c:98:9c:06:fe:
24:c4:e2:a9:2c:12:1b:5c:5f:bb:99:d8:a7:d2:38:
94:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B1:D5:CD:50:FA:EF:E5:38:6A:30:D3:E8:42:C8:94:FD:B3:A2:C0
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0a:4f:2c:8d:68:ce:9a:15:2f:98:81:44:bf:6a:9f:a7:15:
7a:47:cf:da:31:d2:8f:04:be:1b:d7:1e:1e:ae:04:ce:48:bb:
f1:43:ce:1c:6f:e3:c9:a9:f4:be:c8:5b:6b:74:94:91:f3:3b:
36:f5:f9:71:a3:ff:df:73:76:ab:d4:4f:c4:96:c0:a1:3e:1f:
44:f4:6f:61:f7:e8:ca:19:d0:f3:10:54:16:de:25:96:1b:1b:
dd:54:82:23:56:24:a5:43:f0:b5:9b:6e:b5:05:58:17:50:cf:
d9:8b:cc:eb:4f:70:10:c0:eb:cf:42:44:0f:b2:17:48:9e:e1:
2a:1e:f3:1b:75:03:af:61:7f:51:bd:c4:5d:48:f9:d7:f6:5b:
38:ef:3b:4b:3f:77:40:3f:c2:7e:fc:7e:ac:7c:42:43:d8:c9:
1a:3d:77:64:92:bb:e1:28:6e:79:7e:c4:ed:1e:02:03:f9:5a:
85:1a:36:41:aa:06:cf:1f:df:60:12:4f:b0:96:36:06:e3:f9:
36:6c:f1:52:24:ca:d2:e1:ee:dc:0d:2a:69:85:8a:4d:a5:4a:
52:87:02:fe:3f:6c:cd:0a:54:cd:d2:53:db:6f:a3:df:bf:66:
16:f6:91:a3:9a:7a:f2:d9:f9:f3:cc:d4:43:7b:04:3b:07:d6:
b8:de:fb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:16:25 2025 by rpki-client