Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: I4POlYDfmIAxjTpxVu5ZYyrF4SRGGu6Q4v6wBn1TJcw=
Subject key identifier: C7:57:8F:61:ED:7F:67:04:02:E3:A3:AF:12:11:22:05:11:96:AE:B1
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 019922FA1A98999543FE0FA04E172DAB9D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 0770
Signing time: Sun 07 Sep 2025 07:00:40 +0000
Manifest this update: Sun 07 Sep 2025 07:00:40 +0000
Manifest next update: Mon 08 Sep 2025 07:00:40 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: AljgFgPLI6zIbwCFY34cmTV04ohmAtVskdgfOQET3Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:1a:98:99:95:43:fe:0f:a0:4e:17:2d:ab:9d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: Sep 7 07:00:40 2025 GMT
Not After : Sep 8 07:00:40 2025 GMT
Subject: CN=c7578f61ed7f670402e3a3af121122051196aeb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:42:0c:d2:1a:69:36:df:f6:fd:87:11:65:
26:d2:e0:58:d0:49:11:67:f1:f8:e9:1b:ef:64:b1:
1f:7a:a0:31:83:be:96:d5:8c:2c:46:f3:fc:56:bb:
e1:93:85:32:b4:e0:c8:cd:8e:c0:f6:bf:d9:c3:ed:
12:c3:5b:bf:2c:97:26:ce:32:de:90:cb:de:b8:15:
57:3a:3b:3e:cd:dc:ca:9b:c2:d3:59:30:71:f9:78:
73:5f:87:52:9d:39:fd:ff:ad:ed:77:0e:a8:49:c4:
78:e5:84:d3:5f:21:69:99:07:28:48:09:d9:1e:67:
1e:62:8c:f9:f2:a6:1d:0e:08:6d:10:85:6d:41:d0:
09:49:ee:2b:76:50:d7:78:46:19:51:89:d5:63:13:
67:05:67:1e:c8:97:6d:dc:62:a5:e4:25:78:02:e1:
51:5f:b2:69:96:26:7f:69:65:07:ea:a4:d2:54:59:
af:1b:a4:46:71:6b:34:e3:30:f6:c8:65:65:54:0f:
81:a2:cf:44:99:99:ad:ea:a2:42:d0:4f:04:5d:10:
66:d4:e7:47:19:54:7d:fe:b2:04:fd:1a:70:74:c3:
ef:02:1e:5d:16:a6:b3:d1:c5:d7:0d:fc:84:74:0e:
70:b6:2d:cf:03:46:71:c2:32:3c:c9:65:c8:64:e7:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:8F:61:ED:7F:67:04:02:E3:A3:AF:12:11:22:05:11:96:AE:B1
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c6:48:e4:04:6b:5f:c0:99:40:fd:a8:69:13:4b:9a:e3:71:
d2:97:09:11:c8:ca:76:a6:8c:99:9d:b7:90:f3:bf:61:62:fa:
05:d4:5d:cb:e1:34:fe:5e:67:0c:7c:4d:6b:47:c6:33:d8:d2:
62:36:bd:a8:a9:34:81:5b:05:3f:fe:14:1e:69:9a:9a:a4:9d:
e9:60:6a:05:09:d4:fe:61:fd:d5:0e:7f:24:70:ba:ae:b4:97:
75:eb:ae:b3:17:f8:33:d1:3a:86:60:bc:6b:09:38:c0:f2:4c:
6a:9f:df:ac:4d:f7:6b:02:76:8f:41:57:7d:1d:15:55:85:17:
39:7a:29:b9:7f:3e:fa:ca:9d:5f:58:90:2e:a8:6e:37:42:f7:
60:f6:a2:70:5f:b2:5d:57:f7:56:9c:53:5d:e1:ee:2d:76:db:
5e:36:5d:54:22:48:ac:9e:50:4a:b7:ce:85:03:ba:27:8d:37:
6e:af:44:d5:dc:05:f0:60:b4:fa:ef:30:e2:87:ac:72:f0:f9:
0e:b7:08:f6:b8:f4:4a:c6:db:2b:d4:ac:c0:d7:25:c1:fb:80:
f7:8d:23:28:8b:10:97:52:b4:4d:ea:0a:e8:70:0e:02:cb:bf:
0c:fa:1b:bc:37:23:dd:85:3e:a5:87:17:b5:46:ce:75:c9:fa:
52:96:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:44 2025 by rpki-client