Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File: PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier: 6ND7uuM4aP7n6gz9mAGdx6Ie05JAFqeCgtLyRTPNEv8=
Subject key identifier: D1:E9:16:BD:9E:5D:1D:60:68:77:55:33:53:6B:E2:34:91:EC:69:49
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer: /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial: 019838DF72B1E9E49551A17125F247703389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number: 1608
Signing time: Wed 23 Jul 2025 20:00:24 +0000
Manifest this update: Wed 23 Jul 2025 20:00:24 +0000
Manifest next update: Thu 24 Jul 2025 20:00:24 +0000
Files and hashes: 1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: 0pZg2XZBYyI6M7CVV0FlkGRcwWJQbQpO2SfvOnNAJGE=)
4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:df:72:b1:e9:e4:95:51:a1:71:25:f2:47:70:33:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Validity
Not Before: Jul 23 20:00:24 2025 GMT
Not After : Jul 24 20:00:24 2025 GMT
Subject: CN=d1e916bd9e5d1d6068775533536be23491ec6949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:e1:70:d6:87:c7:f8:3f:d4:5b:02:73:4f:
58:71:d5:9e:b3:e4:1a:f1:46:7f:cb:11:41:d7:dd:
ed:c7:8b:f1:e2:29:9e:ad:00:69:cf:17:ae:3e:42:
61:46:ae:2c:57:5e:ef:19:bb:52:ad:66:eb:e9:b2:
cd:d5:d4:24:02:76:00:66:6b:b6:1a:dd:e2:2a:46:
e0:06:30:a5:e5:48:a6:45:4d:a6:e7:bf:50:5e:f5:
78:1e:f8:0f:05:35:91:ea:1b:ba:76:3b:f3:30:24:
cf:88:94:e4:dc:c2:4e:6e:3d:da:c1:33:8c:c3:c7:
fb:48:01:3e:b6:a2:15:20:cd:b8:07:9e:03:b6:aa:
19:c3:58:5c:54:78:ad:4b:f3:77:19:6c:3e:42:a8:
3a:18:d5:cf:2b:f6:06:ad:f5:a5:1e:aa:71:8e:6d:
39:ea:0b:a9:d9:b6:ff:dc:6f:0a:28:38:6d:5e:5f:
94:53:76:f1:7c:0b:55:f0:b0:a5:0f:4d:99:67:62:
34:28:01:af:a2:4a:9e:ca:46:e0:cf:1f:b9:ba:44:
e3:71:0a:96:0a:db:d2:fa:7f:74:e7:ea:31:d8:1a:
c7:19:8b:67:23:09:20:b5:3e:ee:5b:b1:6f:95:70:
2c:de:bc:d4:6b:2f:be:73:0c:5e:89:af:6e:f2:59:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:16:BD:9E:5D:1D:60:68:77:55:33:53:6B:E2:34:91:EC:69:49
X509v3 Authority Key Identifier:
keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c1:e4:18:cd:b1:d8:c3:2b:bc:5d:7d:17:83:19:36:90:59:
a8:a3:54:6e:fb:40:b9:a7:c6:07:66:d0:61:ad:c9:3b:4c:88:
14:fc:94:de:8f:4e:48:0f:7f:53:6c:55:f0:3e:c4:e6:18:c3:
b7:bd:7b:29:6f:12:ad:ed:42:24:39:09:61:a9:66:e4:61:e1:
ce:67:10:67:c6:c0:87:bc:2e:47:07:08:c3:91:84:05:ec:74:
d9:34:86:32:d3:f4:00:04:8d:2f:9a:12:d5:b4:e6:72:87:af:
4e:11:88:54:6a:bb:96:4a:33:4b:43:c7:b5:6e:51:8c:4b:25:
e0:ea:9c:c8:5a:7d:b0:11:58:ca:51:13:44:d5:03:1b:c9:06:
b6:54:da:92:4c:b5:d5:67:50:9f:2b:c1:b7:8b:1d:5d:da:91:
12:ce:d6:13:ff:b4:f5:4c:61:aa:a2:98:dc:81:8c:25:82:6a:
05:09:cd:9c:1f:42:fa:60:b1:55:33:20:6f:69:03:f7:96:34:
86:48:06:83:69:36:cd:6a:42:04:58:85:42:b9:3a:19:9c:71:
c0:22:f4:0e:e1:d8:b0:bd:9b:1e:07:73:f1:4a:a4:2a:10:da:
70:a7:93:80:d8:6f:24:17:3f:1a:e8:a7:cb:ab:ef:cc:30:07:
b9:bb:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:51:44 2025 by rpki-client