Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier: XlRoGxc0Y1AmQRfWHx3aikqU+mjk/gSBUh40tLlO+JQ=
Subject key identifier: 3F:C8:E6:03:1E:37:2D:EF:53:39:45:13:0B:6C:06:3F:4D:F6:11:6E
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 019845F691B32A34E69E7778EDCF7DC2FB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 09:00:43 +0000
Manifest this update: Sat 26 Jul 2025 09:00:43 +0000
Manifest next update: Sun 27 Jul 2025 09:00:43 +0000
Files and hashes: 1: DpBq14ju-sMiK3daEy8ixQQfVTk.roa (hash: i+DQu9MJOrZ5CdMAuj/sQPS/Zyr6reglqbrHWvbkyx4=)
2: DqUoj4sK_ahE1s2i6xM85mI1I6k.roa (hash: ghiG8Oanf8lruQ8GxgH5btsaEet/0QjBhkR1Sn2dFKg=)
3: Fnl-4WGHpZ5LXFARfr2ATzp8vLk.roa (hash: ux6nyEJd1cHyE1av/8nhZIQD47mVZkeQGG+DrMwKlok=)
4: QX-JX3Qu6B9dGH2bgHRHXCFQSGM.roa (hash: Libk/j+UTy/9cJUk+hwXMnFM9cOquglWjTlufdsoMkE=)
5: bDPZ2IR6ImcRHKaCKb1DFYZSPeU.roa (hash: C/oWZRw0Dl261ZToD4X2GP0Mb4nYzslAlII1IzygPX8=)
6: jG76lLUgQYaSZsB__7tXEnh7-_I.roa (hash: fSIH28hM1SyCenkx+Z6chI8MtQGu7VXq7U7d1upY0CQ=)
7: lipPE0ZW42V7IEiCduQOBOaBQRM.roa (hash: nPRnjF3dKcW3adjgIBLS/OZJ6pE6pjg9DlJLpdzKt78=)
8: ma5oVolydUxkukW1x1dx0oRVMTk.roa (hash: vE8qPyFhzLzPBn/Dd5S1DZU12rMMyEbmBmsnKLuenBI=)
9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: WwCfTPfAnyuJBlw2sFpqF/xhx6L9j+ax+yw/nLet910=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:91:b3:2a:34:e6:9e:77:78:ed:cf:7d:c2:fb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jul 26 09:00:43 2025 GMT
Not After : Jul 27 09:00:43 2025 GMT
Subject: CN=3fc8e6031e372def533945130b6c063f4df6116e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:de:6b:21:8e:ab:5c:9b:39:ad:e0:7f:39:
c9:d6:d4:8e:59:c6:a8:31:93:d5:dc:c9:f6:ab:77:
54:6c:cc:be:5a:67:3b:23:29:3a:23:d0:80:c7:09:
b2:6e:c3:6a:18:2f:a6:21:2b:03:77:e5:3b:35:36:
89:57:5f:4c:e7:71:d8:a7:64:1d:a9:a1:37:7d:a5:
b4:63:e0:7c:24:30:b7:98:84:04:f0:96:b6:88:fb:
db:a3:70:48:f7:df:59:fc:6e:6d:6e:db:fb:c9:70:
43:df:bc:44:80:b8:c1:cf:ed:c6:5d:55:4b:73:ae:
33:04:37:f4:85:85:e7:f3:35:be:f5:af:dd:a1:35:
65:02:63:69:84:0f:47:b6:d3:e8:6e:48:de:47:48:
77:14:7e:8f:5b:f7:6a:91:45:f6:df:45:3d:9b:a8:
16:b2:a3:c2:fd:79:27:2a:1c:7e:b4:bd:ef:97:ad:
2e:23:62:17:95:6a:60:3f:12:9d:6a:9f:1e:b3:0e:
66:a0:93:cf:b1:3f:e0:8f:f3:e5:21:ff:7a:f3:4b:
59:ef:b3:7f:bb:55:4e:bf:0d:64:f5:e7:56:5c:65:
20:0d:62:0b:51:a9:1d:ba:98:92:89:74:74:eb:8b:
b2:bf:0c:c1:be:6c:ac:1e:87:c8:64:13:37:8d:52:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C8:E6:03:1E:37:2D:EF:53:39:45:13:0B:6C:06:3F:4D:F6:11:6E
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b0:86:fa:fb:69:26:80:ee:49:42:58:f8:6a:31:21:6a:03:
29:0e:03:81:fd:ec:bb:68:82:57:06:0b:f5:c2:32:2c:9c:db:
49:0a:ec:6c:8b:0b:d7:1b:57:6a:36:76:64:3c:ea:ba:fb:c7:
87:3b:5f:a0:1c:19:03:4d:ae:9d:5d:6e:3d:f1:d1:4a:3d:9d:
04:31:8f:de:8c:e4:1f:a2:53:09:a8:cd:7b:b8:3e:a0:8a:7f:
5d:ac:fd:3f:5e:e9:c2:14:38:8d:40:dd:5c:3f:a3:4f:95:43:
bd:28:cb:29:7c:82:a1:d7:27:15:af:8f:47:7d:17:43:f7:e0:
7d:01:4b:0a:8d:08:7a:c4:fe:23:42:73:b6:3c:97:84:de:95:
49:d6:ed:db:23:fd:b5:c5:ec:4a:a0:69:9e:b9:ca:c7:e4:79:
de:ef:94:2d:45:c4:b1:20:b7:fe:6f:b9:18:4f:0f:92:af:76:
35:c9:58:bc:fc:28:c5:04:b3:a7:8f:e1:9f:c6:7b:0d:fe:a7:
19:13:1d:6f:5c:e8:50:08:81:c9:36:86:b1:52:c4:da:44:a9:
2c:9f:b2:e9:26:c6:e4:42:91:e3:1c:02:e8:50:82:52:b5:d4:
0a:70:80:5d:e1:89:38:fb:63:1b:ad:b3:d4:a8:77:3c:01:c8:
67:4c:df:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:35 2025 by rpki-client