Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: dpNVsgm8/f5InF2O/nvdq+XWbjoicCkTU7V/DuvIFQQ=
Subject key identifier: 6F:B9:CD:AC:57:B8:2E:87:50:E3:C5:8D:63:4C:30:16:E6:77:AD:85
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 0198481B865F86FDDE390AD91BD880631814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 15FE
Signing time: Sat 26 Jul 2025 19:00:19 +0000
Manifest this update: Sat 26 Jul 2025 19:00:19 +0000
Manifest next update: Sun 27 Jul 2025 19:00:19 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: D0msst96LMTX+XJsm4fzqeWPuwTkFwaQaqjyTk4yNpk=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:86:5f:86:fd:de:39:0a:d9:1b:d8:80:63:18:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jul 26 19:00:19 2025 GMT
Not After : Jul 27 19:00:19 2025 GMT
Subject: CN=6fb9cdac57b82e8750e3c58d634c3016e677ad85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:7d:31:59:d8:a3:29:2e:3a:2b:db:51:b6:
60:3f:28:e2:66:44:bd:49:1a:eb:0c:00:3f:5b:0b:
a3:c4:7f:53:de:86:0e:ac:87:37:d9:5b:54:6e:be:
88:43:96:d7:50:40:b0:ea:aa:37:34:0f:83:f2:29:
21:99:d7:ad:6c:a5:61:1f:91:b2:14:db:3e:fd:d3:
15:9d:27:36:c0:7b:8a:14:49:2b:77:cd:cd:c1:16:
35:f4:ab:f4:fe:eb:d2:d4:cd:c9:0f:e2:a1:39:df:
6d:a7:42:85:e2:1b:df:34:58:86:2b:0e:6f:fb:cc:
27:a5:20:a4:76:cb:0b:fe:d7:43:31:be:6c:c9:3c:
4d:74:60:71:41:3f:66:5e:ca:bc:61:c1:c5:5e:5b:
4d:0c:b9:da:44:16:c3:c5:65:2d:f7:af:0a:e5:b7:
f2:59:fb:b3:ef:c9:69:26:12:7e:cc:c3:84:22:d4:
01:fc:e5:82:56:fc:03:f8:7a:1b:f5:36:51:ec:10:
44:79:ac:41:4c:d1:13:cb:db:cd:0e:26:3e:cd:f0:
d0:0f:ec:97:29:66:ba:70:74:68:01:22:2a:a4:4c:
91:8a:4f:ae:68:86:e9:1b:a5:33:41:39:64:ad:d4:
57:75:00:c3:06:93:47:96:73:f5:93:09:da:55:76:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B9:CD:AC:57:B8:2E:87:50:E3:C5:8D:63:4C:30:16:E6:77:AD:85
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:08:ba:e5:e2:cf:ce:0f:50:7a:bb:c8:59:eb:7d:88:16:4f:
5f:7c:d8:f0:94:12:cb:85:ca:0f:ef:34:b3:32:f1:d9:f5:48:
7b:e2:c0:90:f7:5c:e2:83:1d:88:34:fa:c4:00:3a:e0:e8:cd:
fb:4c:76:49:91:f1:29:e2:9e:d0:f6:e2:01:dd:20:c7:ec:27:
6c:ea:9a:36:2a:51:25:cc:f6:d5:0e:30:66:be:b9:a5:a8:c5:
c0:3a:7b:6c:54:9f:0b:00:bf:4e:f9:14:2b:5e:12:4b:c2:02:
04:3f:07:62:62:bf:e0:8f:e1:35:93:e3:70:9a:60:48:6c:fe:
8a:73:ce:d7:5b:12:9c:f2:30:63:11:62:8a:4d:b6:ce:2e:75:
03:13:4d:30:8d:a1:8e:05:8a:0b:4c:ca:6c:a0:65:c1:c0:9e:
4d:30:d0:37:c1:c1:b3:8a:f4:17:fd:28:5d:17:36:88:45:83:
51:3d:c9:ef:61:54:ea:d4:2b:be:37:75:f3:f3:fd:ce:eb:e0:
68:df:01:fc:f7:36:ef:5d:2e:20:7e:c0:8b:db:69:c7:46:40:
bb:36:a9:e0:a0:95:02:1a:dc:ec:8a:e7:22:2e:67:ad:05:ce:
1a:b9:8d:1c:0b:53:e1:4e:71:b9:1c:35:7d:2f:40:68:67:23:
47:5a:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:02 2025 by rpki-client