Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File: PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier: AlIYoTF7+9YgyKd776JZCWu2Xly/hnOOeB0k2xxt9DM=
Subject key identifier: E6:A1:3B:1E:59:76:EF:10:43:30:C1:78:A8:A8:A1:CB:C5:34:7C:C4
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer: /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial: 01974931149895E55BEAD74E943CA80B79B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 07:00:42 +0000
Manifest this update: Sat 07 Jun 2025 07:00:42 +0000
Manifest next update: Sun 08 Jun 2025 07:00:42 +0000
Files and hashes: 1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: B3ywFTkRLd6gapW/Fw7MUgHhdmm/dbLAPPi0W0mkkWU=)
2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:14:98:95:e5:5b:ea:d7:4e:94:3c:a8:0b:79:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Validity
Not Before: Jun 7 07:00:42 2025 GMT
Not After : Jun 8 07:00:42 2025 GMT
Subject: CN=e6a13b1e5976ef104330c178a8a8a1cbc5347cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:60:47:3a:2d:a7:16:4c:1e:d8:13:82:a2:6a:
e5:ec:90:95:67:73:3a:c2:46:8f:3d:b1:9e:49:72:
6b:58:70:98:1a:5a:eb:39:a8:db:1b:cb:7f:95:44:
a6:37:62:df:c9:b1:ef:b1:0e:61:e3:02:0d:83:50:
15:13:1d:3d:9d:54:2f:1e:5f:a3:51:f9:53:a3:93:
03:2f:bf:4c:ef:35:29:e0:85:3f:d3:e7:d9:f6:18:
31:06:1b:0a:ca:c2:b7:81:16:b4:ab:de:eb:80:f6:
28:10:76:7e:2f:cd:43:eb:92:d7:06:38:3b:b2:50:
ae:c3:88:41:ca:34:4d:f0:6f:5a:7a:90:5a:c0:6a:
04:79:4b:11:65:c3:e4:86:18:22:f0:78:49:68:58:
d9:f7:a5:23:cd:bd:e5:93:f4:5a:26:2d:63:eb:14:
41:34:86:ec:68:10:4b:7d:d6:1d:7b:c9:11:07:f8:
aa:b8:ce:4c:75:72:32:b1:89:4b:ae:26:a2:9a:bf:
45:fa:16:61:89:5b:fc:ad:78:02:4f:27:8a:c6:f6:
c1:01:53:31:b4:aa:e1:a4:e9:87:58:d2:48:9a:cb:
6f:08:d1:7d:d8:b7:88:14:d3:e5:49:2c:ec:48:50:
fb:da:86:80:f2:d4:89:49:03:da:d7:73:c0:ac:78:
c7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A1:3B:1E:59:76:EF:10:43:30:C1:78:A8:A8:A1:CB:C5:34:7C:C4
X509v3 Authority Key Identifier:
keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:cb:8e:88:40:d3:e1:1c:f3:71:d6:ab:14:18:1f:6a:12:
55:e0:9e:f3:32:fd:cf:82:fd:b3:20:ed:69:e3:e4:7e:71:4a:
58:25:f3:b8:73:6f:97:70:07:86:18:1e:78:9b:74:86:91:26:
4f:dd:10:36:53:bf:b3:90:48:d2:56:de:39:77:0e:da:88:7d:
28:46:b5:5f:d4:6b:9b:2e:61:7b:85:df:eb:35:69:d7:d8:29:
8f:1a:0e:b8:a5:32:5b:1d:6e:ec:35:2c:66:bb:37:aa:2f:6a:
8f:a6:4a:65:16:b4:7a:e2:a1:f6:95:77:28:0e:0b:96:08:5e:
5f:62:f6:e1:f8:51:54:f0:0a:cf:27:a2:f9:c5:9c:d8:ed:89:
d3:80:12:d8:d6:f8:9a:f6:b0:64:4b:f2:93:10:7d:a5:18:2f:
f7:ec:7f:db:cf:73:68:9b:fe:94:d8:13:1a:0b:69:7b:fd:fb:
ac:f2:b3:af:34:53:0c:a8:74:f6:56:ac:59:23:fe:00:98:79:
c7:26:80:1f:a0:92:b1:d3:f3:82:c6:1d:6e:49:9c:2a:19:b2:
d7:2a:f0:a5:7a:9c:b2:9a:fc:ce:5d:eb:0e:24:e2:2c:b3:77:
dc:49:09:c7:5e:ea:61:40:45:e3:e4:26:ce:c3:6d:70:02:39:
66:97:3c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMRSYleVb6tdOlDyoC3myMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTIxM2YwMmE2NzBiMDUzNzBjNTVlY2NjZTkwZmUxYWQ3
MGM0OWIwHhcNMjUwNjA3MDcwMDQyWhcNMjUwNjA4MDcwMDQyWjAzMTEwLwYDVQQD
EyhlNmExM2IxZTU5NzZlZjEwNDMzMGMxNzhhOGE4YTFjYmM1MzQ3Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2BHOi2nFkwe2BOComrl7JCVZ3M6
wkaPPbGeSXJrWHCYGlrrOajbG8t/lUSmN2LfybHvsQ5h4wINg1AVEx09nVQvHl+j
UflTo5MDL79M7zUp4IU/0+fZ9hgxBhsKysK3gRa0q97rgPYoEHZ+L81D65LXBjg7
slCuw4hByjRN8G9aepBawGoEeUsRZcPkhhgi8HhJaFjZ96Ujzb3lk/RaJi1j6xRB
NIbsaBBLfdYde8kRB/iquM5MdXIysYlLriaimr9F+hZhiVv8rXgCTyeKxvbBAVMx
tKrhpOmHWNJImstvCNF92LeIFNPlSSzsSFD72oaA8tSJSQPa13PArHjHCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOahOx5Zdu8QQzDBeKioocvFNHzEMB8GA1UdIwQY
MBaAFD2iE/AqZwsFNwxV7MzpD+GtcMSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEt
N2RiOGViYTc5ZWYxLzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEtN2RiOGViYTc5ZWYx
LzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdPLjohA
0+Ec83HWqxQYH2oSVeCe8zL9z4L9syDtaePkfnFKWCXzuHNvl3AHhhgeeJt0hpEm
T90QNlO/s5BI0lbeOXcO2oh9KEa1X9Rrmy5he4Xf6zVp19gpjxoOuKUyWx1u7DUs
Zrs3qi9qj6ZKZRa0euKh9pV3KA4LlgheX2L24fhRVPAKzyei+cWc2O2J04AS2Nb4
mvawZEvykxB9pRgv9+x/289zaJv+lNgTGgtpe/37rPKzrzRTDKh09lasWSP+AJh5
xyaAH6CSsdPzgsYdbkmcKhmy1yrwpXqcspr8zl3rDiTiLLN33EkJx17qYUBF4+Qm
zsNtcAI5Zpc8sw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:52 2025 by rpki-client