Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier: 6Yw7RJ+rI90Wk6uVSUDA2/a8XR1s620hPhLATP6MmsU=
Subject key identifier: 9E:14:C3:C5:AE:85:99:E8:98:A5:C8:E1:64:9D:A8:88:18:5D:39:04
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial: 019851C36244C0122F4E774516259BA1E94C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number: 1330
Signing time: Mon 28 Jul 2025 16:00:15 +0000
Manifest this update: Mon 28 Jul 2025 16:00:15 +0000
Manifest next update: Tue 29 Jul 2025 16:00:15 +0000
Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=)
2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=)
3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: 5oY3Dhtxp3XMIQIaFN9XBA21gX510mXmR4Sv6fu6C6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c3:62:44:c0:12:2f:4e:77:45:16:25:9b:a1:e9:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Validity
Not Before: Jul 28 16:00:15 2025 GMT
Not After : Jul 29 16:00:15 2025 GMT
Subject: CN=9e14c3c5ae8599e898a5c8e1649da888185d3904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:fb:ea:54:e7:f9:cf:ba:a6:8d:e3:be:d8:
83:ab:10:d1:1e:0f:b3:7c:37:c4:15:f7:56:27:6d:
2d:de:d9:89:02:61:0f:66:3b:17:67:f1:a6:fc:1e:
b0:68:ee:41:d4:4b:0d:12:3b:35:51:f3:58:97:56:
4f:db:97:d9:9c:32:13:e7:9f:bf:b3:ab:19:56:3c:
ae:e0:8d:06:18:9c:1e:20:67:2d:2b:46:49:d3:3a:
1e:19:d8:a1:d1:03:40:1d:47:56:17:be:f7:4c:f1:
6c:4f:90:d9:bf:c6:73:4e:67:5c:6c:aa:5e:a0:0d:
be:b2:c5:39:e0:4d:ad:ee:39:6e:a6:c3:e9:67:ae:
b4:56:6b:68:81:78:aa:4c:f5:02:59:78:30:84:2a:
8f:2c:b5:af:9a:c5:4b:c3:04:0c:84:00:b9:8f:75:
76:ae:e0:8e:84:b6:50:d4:f8:8c:4e:6b:d8:06:a0:
97:39:46:7b:f2:79:c9:ac:d3:a7:fb:97:3c:b5:4b:
98:90:30:e4:b9:00:86:bb:79:35:02:25:db:a3:0b:
42:f6:20:0c:d7:25:14:e4:0e:84:d7:77:a2:10:c0:
e4:b5:75:f5:8b:84:56:66:20:b6:42:6e:2c:40:7a:
9d:ba:53:a0:93:d7:dd:89:36:6e:37:68:d6:51:ff:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:C3:C5:AE:85:99:E8:98:A5:C8:E1:64:9D:A8:88:18:5D:39:04
X509v3 Authority Key Identifier:
keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:96:d4:b8:58:ba:a2:a2:88:7e:a3:da:dc:c3:69:62:fa:
3e:48:3d:01:27:13:50:ae:97:4f:e1:e9:76:30:ab:9e:e3:30:
13:62:4d:c6:e9:a8:b8:af:cc:95:91:f1:45:45:f8:66:b0:29:
6c:08:05:e6:58:fd:b7:e7:9e:ee:d4:56:3c:75:db:9f:b8:c6:
c5:b5:49:20:17:7f:0b:8e:2e:32:36:31:6e:ed:ee:48:78:d1:
be:fd:6d:98:5c:1c:e1:dc:30:c9:fa:2d:78:a7:8f:03:8a:6b:
ac:51:2c:4b:ee:79:74:2e:df:d7:60:f9:8a:a4:cd:6b:19:a5:
4c:b3:94:9f:d6:73:a6:76:d8:c0:dc:f3:dd:04:b8:1a:e1:57:
c6:4a:bb:a4:7b:65:ce:b9:62:79:e2:51:13:0f:96:7b:3e:21:
54:bd:10:da:67:88:b9:e9:55:6e:a0:56:02:e9:eb:98:0c:be:
02:da:ac:83:b8:ad:62:81:7b:81:6c:45:f4:23:33:7c:d5:3c:
9e:be:88:08:3b:ec:24:c9:88:0b:21:0c:3f:7e:a8:bf:5f:b4:
cf:41:3f:06:7a:17:cf:4a:e4:7b:16:dc:b4:89:53:46:20:03:
5c:05:d0:5c:2c:b9:3c:96:96:51:e4:49:b3:7d:94:10:c9:69:
3d:3d:2e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:51:59 2025 by rpki-client