
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: onDzN58FD7RDKLwq8oGkHTZ50QNP91e/mZR/SZhbeG4=
Subject key identifier: 81:F7:D8:F9:01:D9:A7:8D:50:D3:F3:67:AB:58:0B:22:79:04:10:63
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 0199454FC1A450DFDACF0A43BCCE70006B23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1693
Signing time: Sat 13 Sep 2025 23:01:18 +0000
Manifest this update: Sat 13 Sep 2025 23:01:18 +0000
Manifest next update: Sun 14 Sep 2025 23:01:18 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: rwQ/FYXCs7LdnUv7G/Iv+wy9Bgkf6TRwa2qvZlMK9o8=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:45:4f:c1:a4:50:df:da:cf:0a:43:bc:ce:70:00:6b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Sep 13 23:01:18 2025 GMT
Not After : Sep 14 23:01:18 2025 GMT
Subject: CN=81f7d8f901d9a78d50d3f367ab580b2279041063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:ba:e8:be:6a:73:2e:de:da:13:23:64:12:
11:e7:e5:5d:bd:5a:f3:67:31:48:5d:50:a0:41:71:
32:69:37:72:94:4d:46:04:67:a5:26:d6:37:d9:58:
78:36:b6:55:de:23:a6:62:27:50:d9:f1:95:7c:95:
ff:48:2f:e2:a5:1e:55:0b:62:62:81:0a:d7:5a:46:
c3:ee:15:36:c2:85:e0:51:2a:10:75:5f:26:d7:ae:
65:ff:51:30:d8:a9:5f:b9:04:58:81:b1:41:8d:1f:
37:69:84:aa:12:af:df:36:59:af:c4:00:2d:46:80:
6c:15:11:97:14:ca:46:a5:38:3b:87:05:ea:f7:2d:
5f:f7:17:ab:d3:4e:5a:bd:40:24:95:26:ba:0b:db:
f5:b8:e5:81:3e:e3:83:ac:80:a5:da:dc:01:30:8f:
1e:f9:2e:91:1f:e8:c8:6b:cc:81:09:31:a8:36:5b:
df:b3:3f:2e:fb:68:93:f8:bc:4b:51:bc:3a:49:12:
e0:86:0f:4a:59:f8:da:da:ca:9d:55:3d:59:bd:93:
cd:87:be:cc:36:3d:72:c8:95:fe:00:4c:07:e4:87:
ce:97:57:c4:c9:42:d6:62:ce:46:19:cd:dd:a9:8c:
f3:31:cd:73:a4:5c:d2:49:75:91:05:dc:6d:91:8d:
33:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:D8:F9:01:D9:A7:8D:50:D3:F3:67:AB:58:0B:22:79:04:10:63
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:de:fb:02:ce:c3:1e:15:69:5a:1a:0b:f7:93:bf:4a:ea:9b:
77:18:76:c0:ee:c6:e9:1e:ae:1e:0d:1a:fe:9c:74:84:39:51:
80:5d:3e:13:42:81:13:14:e1:63:c8:cb:d5:6c:1a:fd:c1:61:
b6:7e:7e:a5:1d:43:03:51:b6:a5:6e:c9:82:29:24:a4:4c:26:
5d:91:d6:86:85:24:eb:0f:c2:b4:83:33:71:52:d0:91:1d:54:
dd:35:e6:c4:e8:00:ca:b7:f6:29:0c:27:c7:cb:13:f8:61:f1:
92:fa:e3:bd:59:dd:b3:7a:b6:17:74:f9:de:97:0c:f6:76:36:
cd:3c:88:56:d8:0b:e3:81:b8:fb:29:76:da:8e:a0:92:d9:56:
5b:35:d3:79:70:49:f5:53:46:95:fa:ec:27:1b:9a:f4:83:d1:
ae:1e:66:c3:bc:ca:46:7e:18:b5:e6:2d:a1:f6:30:66:35:22:
e9:f6:0a:77:5a:4f:c6:3e:45:47:92:01:ee:64:4a:f8:35:db:
2f:26:ca:3c:cc:19:03:60:b4:ca:be:da:d4:9f:36:07:5a:ef:
19:c3:ea:07:fb:b1:8c:17:58:ea:bd:9d:ec:a1:ca:04:0a:6a:
45:91:99:ca:ee:2d:44:dc:ae:06:a0:dd:2b:21:a6:1d:d3:58:
2d:a7:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 14 01:54:39 2025 by rpki-client