Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
File: PI_isZvT639wpO7atha1MlABFSA.mft (raw, json)
Hash identifier: udfm9HLOLS8fCH9XEgtwmy1da5k3FRpULbbHdurEJis=
Subject key identifier: B7:BF:9C:2C:82:2E:3D:62:14:C1:C4:60:4A:96:8A:73:F0:14:C3:A2
Authority key identifier: 3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
Certificate issuer: /CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Certificate serial: 01984A41863A50A4AB1A7D0603EC5905AA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
Manifest number: 02D4
Signing time: Sun 27 Jul 2025 05:01:04 +0000
Manifest this update: Sun 27 Jul 2025 05:01:04 +0000
Manifest next update: Mon 28 Jul 2025 05:01:04 +0000
Files and hashes: 1: PI_isZvT639wpO7atha1MlABFSA.crl (hash: OxEPYlvm+r6o0Tu1WzGZYiP4os1FDLreWDodQcftpGA=)
2: iTxg6a45pQs6yguLKNzKJpXtu1I.roa (hash: IbbuNrBXDC3r/NQaAU8s873gXp019KR8EegJpijUcwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:86:3a:50:a4:ab:1a:7d:06:03:ec:59:05:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c8fe2b19bd3eb7f70a4eedab616b53250011520
Validity
Not Before: Jul 27 05:01:04 2025 GMT
Not After : Jul 28 05:01:04 2025 GMT
Subject: CN=b7bf9c2c822e3d6214c1c4604a968a73f014c3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:da:cf:18:93:18:11:e3:2b:e1:0e:b2:ae:
3f:89:73:2d:f9:d7:01:cf:68:c3:ac:2c:bb:ec:95:
90:ee:ef:1a:ba:39:16:2f:1f:52:c6:bf:83:0e:3e:
54:dd:2d:4d:42:73:b9:92:87:67:75:da:d0:5b:de:
20:e0:9d:1c:85:b1:fa:9a:37:67:69:ba:ed:e4:a7:
33:60:45:95:c9:90:14:e4:5c:c6:60:bd:db:3e:a4:
ea:49:5e:e1:c4:05:95:7a:a0:25:0b:f8:cd:64:08:
10:ab:9e:ea:d5:1b:e7:e2:0e:fa:60:3d:f7:cd:a4:
2c:9f:85:af:13:4c:95:f5:70:bc:72:56:5d:be:9f:
5e:19:f1:42:b7:4a:08:b1:d8:a3:d5:24:e8:0a:ab:
5f:18:3d:dd:8b:8b:1b:d0:ec:01:39:36:e7:c1:b8:
20:0a:0b:de:34:06:3a:7b:51:ae:b6:0a:d1:17:db:
d8:d9:3d:13:f2:df:ad:e9:d6:b6:53:36:26:3d:40:
d4:37:7a:78:19:dc:21:f5:fc:8b:88:cf:1e:56:02:
d3:99:b8:6c:6e:b5:e6:14:39:7e:2c:b9:36:f2:8a:
8c:50:43:e8:88:39:fe:d0:63:18:51:a5:01:25:46:
98:33:9c:aa:4c:a0:79:c8:16:0f:05:7e:d4:27:11:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BF:9C:2C:82:2E:3D:62:14:C1:C4:60:4A:96:8A:73:F0:14:C3:A2
X509v3 Authority Key Identifier:
keyid:3C:8F:E2:B1:9B:D3:EB:7F:70:A4:EE:DA:B6:16:B5:32:50:01:15:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI_isZvT639wpO7atha1MlABFSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e7edd1-c79f-4890-a175-12e6a6edd124/1/PI_isZvT639wpO7atha1MlABFSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:45:bd:7a:34:d4:22:43:8d:bd:c6:46:2f:d5:1d:a8:a6:69:
d8:90:bc:da:29:a6:8f:8a:5a:09:c8:0f:98:72:4b:4a:5d:0d:
5a:00:e7:71:bb:40:27:b4:33:54:d1:5a:51:95:fa:88:f8:ef:
82:fe:68:13:77:1e:3b:3a:7a:1f:47:9d:48:87:52:6f:d4:62:
aa:07:b9:4d:3b:ee:59:4f:29:27:a3:4a:06:30:ad:8f:40:f7:
50:d7:24:39:5d:51:cd:e7:ff:d0:11:91:33:4f:24:d2:0d:58:
93:3a:ab:db:a7:2a:d4:d2:82:86:7d:2e:6e:23:77:6d:af:9f:
f8:f9:54:81:5d:98:cf:be:ca:d6:1c:06:2d:c3:f2:9b:8f:5f:
97:7f:07:ec:b1:4b:c7:9a:50:26:bc:e5:d5:72:b5:12:d9:69:
28:5c:41:57:d4:90:6c:52:71:60:b1:fb:bd:ee:dc:56:b4:fa:
f0:8c:6a:d3:5f:46:4c:f6:41:2c:a4:99:21:7f:87:c4:7b:d9:
a6:e5:4a:bb:6a:a8:18:78:81:34:7e:d2:6b:17:40:e1:ef:b3:
58:39:80:07:89:a1:61:75:9d:7e:3a:f7:c6:5e:36:c4:3e:cf:
ec:fb:b2:1a:69:b3:3b:9e:c7:81:03:09:8e:2f:7c:94:f6:f7:
e1:5f:07:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:00 2025 by rpki-client