Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
File: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft (raw, json)
Hash identifier: FTW9RfXtatuiWSXAhQ7juHFRh1z+L3VuceFO7dSNj28=
Subject key identifier: FE:D9:5B:12:CD:F2:BD:8E:B3:87:13:D8:01:CE:C0:C5:8F:5F:D6:6A
Authority key identifier: 3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
Certificate issuer: /CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Certificate serial: 019748FAA64468888D6FAA9B1BE88E4E548A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: 1adP5-NZ3OGm9i9jXo5g2DtuEHg.roa (hash: 4GXA+o0SJCtO2Bu0u+0CpRTj3wJJBPSJUEdoH/BzRg4=)
2: Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl (hash: iplVC/N+o5v/hF/+MwLgzvLrWI2SDcxAHRS1vqVBLfw=)
3: XfcUo_pFgzzQK3LpHanDAL6qsm8.roa (hash: PqM9+rcTrXNoQwaCLTQL6oXgVIvAF+akxeev/02act4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a6:44:68:88:8d:6f:aa:9b:1b:e8:8e:4e:54:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f273b6861cf7cf4646cc5e04275d6617635f07b
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=fed95b12cdf2bd8eb38713d801cec0c58f5fd66a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:3c:a7:b6:46:53:7b:fc:9d:7b:62:48:00:
32:96:e9:b9:ce:eb:8c:8a:c1:e6:8b:7a:db:21:ff:
03:a4:0c:e3:32:e2:69:64:d9:0c:0c:7f:37:ca:eb:
da:56:a8:b8:a0:42:56:3b:06:9b:3e:3e:d0:4b:50:
43:f4:50:d9:4b:4f:00:98:8d:54:9f:3e:64:6a:26:
e5:3d:dc:40:86:65:be:32:a8:1f:ac:9b:ed:c8:a5:
df:c0:1f:0d:7a:3e:02:9e:52:76:34:87:6e:f9:0c:
f3:43:98:9d:d8:b2:ec:ce:cc:b2:f0:20:15:a0:3c:
9e:0d:8d:32:51:60:c3:4e:5b:17:62:c2:58:c6:a9:
58:eb:81:17:95:6f:27:32:7f:a8:c4:6f:af:0f:ea:
cb:f3:56:38:8c:13:db:2c:b6:00:e9:66:f1:d5:0c:
94:1d:3c:63:f0:6e:cb:f9:8e:c9:a7:af:cc:18:35:
2b:ec:40:4f:63:9c:12:fb:03:46:fc:00:45:b2:fe:
d7:75:6b:a7:67:36:82:54:7f:92:32:86:d7:f9:19:
b8:e0:e6:f1:82:8f:fb:c4:ad:34:5b:4e:a1:3a:2c:
67:a4:9a:dd:49:f7:fa:0b:36:71:ed:b4:7e:34:fa:
1a:ef:68:ad:3e:97:27:fe:d8:73:07:25:33:ca:8b:
36:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D9:5B:12:CD:F2:BD:8E:B3:87:13:D8:01:CE:C0:C5:8F:5F:D6:6A
X509v3 Authority Key Identifier:
keyid:3F:27:3B:68:61:CF:7C:F4:64:6C:C5:E0:42:75:D6:61:76:35:F0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/75465f-6797-4141-b961-8b7c57c56215/1/Pyc7aGHPfPRkbMXgQnXWYXY18Hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:aa:04:c7:49:68:4a:f1:99:59:7c:0e:57:1f:82:4e:5a:bd:
02:f1:f9:25:62:57:e4:98:86:d5:93:ca:95:2f:48:27:a6:87:
19:f4:eb:7d:e5:8b:a1:99:25:da:03:30:1e:67:bd:68:ec:31:
46:b3:5c:ec:77:5a:da:9d:cd:dd:aa:42:fd:c4:26:00:e0:8f:
13:2a:83:41:19:b5:99:8b:9c:2b:aa:ab:2a:8f:5b:77:30:62:
bb:02:9f:6f:de:ef:eb:98:f0:86:bd:91:e7:0d:5d:0a:c7:78:
72:d2:5a:ac:76:8d:01:ba:19:c5:05:12:c2:23:25:2f:7d:86:
1b:27:43:f5:48:55:ff:9a:6d:db:fc:f0:42:9b:48:42:98:49:
95:d7:1a:12:4a:74:00:6c:19:4a:a3:3e:2d:4c:88:55:dc:f6:
e1:5d:6e:3d:47:a9:dd:00:7d:e5:62:f4:6a:5b:76:9a:24:87:
8b:ea:f0:23:e1:77:55:f1:0c:35:87:e4:8a:e4:fd:d2:f3:97:
7f:ab:c7:6d:c3:1e:43:d7:dc:ae:3a:93:b7:85:ea:7f:51:55:
fe:2e:05:3a:96:fc:9a:53:ec:b0:45:bf:12:61:0a:1f:45:86:
9f:a7:b7:23:59:76:22:02:26:c9:d8:1d:5c:6b:97:aa:ce:c0:
cd:94:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:28:50 2025 by rpki-client