Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: 3Kd6ltjiapgPd86I1d4gZcJeUIqD1N5yXTwQfdNAsLw=
Subject key identifier: D3:BE:6F:E3:B2:09:7F:E7:1C:F6:EF:F8:A4:97:27:4F:E3:4D:9B:18
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019846D2178FCBAE518B62D4C89688657849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 13:00:30 +0000
Manifest this update: Sat 26 Jul 2025 13:00:30 +0000
Manifest next update: Sun 27 Jul 2025 13:00:30 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: 64u0HNHiaXVWR3rFSMf6J/NnFEwOfsYMnW5DRsbYAA4=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:17:8f:cb:ae:51:8b:62:d4:c8:96:88:65:78:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Jul 26 13:00:30 2025 GMT
Not After : Jul 27 13:00:30 2025 GMT
Subject: CN=d3be6fe3b2097fe71cf6eff8a497274fe34d9b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:69:c8:ca:1c:6b:d8:5e:d0:c3:cf:89:13:
e1:86:fe:d4:9e:e6:6c:f6:d9:01:ed:38:45:3d:80:
f4:7a:f3:7a:81:de:b4:72:46:89:c9:f6:76:19:56:
58:47:5b:2e:0f:9d:e1:e8:67:35:81:88:98:48:7a:
4d:e1:e4:46:28:4f:9c:7c:16:00:14:cb:8f:4e:0f:
16:ad:e7:78:a6:f1:58:b9:c0:67:0a:b3:34:78:c0:
0e:f7:fb:0d:68:ef:72:09:89:17:20:17:49:2d:1c:
81:b4:59:d1:5d:98:5e:dc:ff:b8:02:c9:c0:64:dc:
ee:f4:20:6b:2d:5c:d6:51:86:19:ba:d9:62:77:c9:
85:02:00:9b:11:58:6e:23:39:65:74:05:12:12:59:
d1:03:a1:3a:fa:67:d4:64:4c:3e:d4:19:79:af:23:
38:9c:60:fe:ff:9c:5e:bd:6d:03:dd:be:70:2c:35:
c1:95:5e:6b:e7:d8:9c:48:90:20:ae:9c:6c:58:c9:
47:71:cc:d5:0c:04:54:b5:0c:9e:44:9b:68:92:1d:
21:00:d9:7d:80:d5:5e:32:bc:0e:e4:6f:c6:89:b7:
7c:b6:71:91:59:aa:cb:21:ea:9a:9c:8e:ef:95:04:
88:84:d1:c7:16:5f:2d:69:a2:f9:6f:2e:49:19:87:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:6F:E3:B2:09:7F:E7:1C:F6:EF:F8:A4:97:27:4F:E3:4D:9B:18
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:48:f4:45:08:54:3f:31:66:75:23:ee:23:1f:f0:85:62:3f:
97:2e:ab:a9:35:ea:1b:6d:e0:cc:90:b5:e3:34:5b:e8:0b:b5:
ec:2d:4a:5f:ca:72:f0:c7:e5:ed:3a:a7:59:bb:3a:6a:44:d6:
a0:a4:7f:54:14:ec:f3:68:ca:3f:df:da:ab:72:f1:41:9a:1a:
60:0f:bf:5e:a5:a3:38:b1:49:04:39:e8:dc:1f:47:cd:17:45:
25:67:1e:7c:84:41:1a:35:f3:c2:73:66:d9:e9:e0:de:f3:a0:
d8:c3:b9:33:48:80:87:c4:c8:4b:32:aa:8d:db:30:e3:98:b2:
f2:b5:ea:32:9f:25:3f:2a:85:8e:42:0d:60:31:86:95:43:18:
bf:7a:8e:e2:7b:71:8c:f2:42:20:1e:8f:62:14:db:0c:d5:11:
73:4e:3a:f7:ca:a8:82:c6:8a:eb:93:08:cb:44:41:69:27:fe:
10:ed:f8:c4:28:23:01:64:0f:30:d3:50:2e:e1:7b:8b:33:fc:
30:cf:02:52:2f:e2:58:df:d2:f3:17:2c:7e:bf:ad:a8:e8:de:
c4:f7:16:43:c7:44:05:ed:24:6f:7a:c5:2c:38:0c:6d:a2:75:
92:f9:dd:c9:68:32:a0:86:b6:6d:f6:35:e9:6c:21:6b:6b:c6:
da:3b:52:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:39:20 2025 by rpki-client