Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json)
Hash identifier: sXr4cNl93DQu9p/ZTTZiabyDYYJlUI0r7zHUeTavQX8=
Subject key identifier: 91:9B:90:B4:31:E9:4F:05:98:86:B0:94:16:68:03:D2:A2:0B:CD:C8
Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Certificate serial: 0197499F5DE649941269CF441A44035510CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
Manifest number: 0642
Signing time: Sat 07 Jun 2025 09:01:10 +0000
Manifest this update: Sat 07 Jun 2025 09:01:10 +0000
Manifest next update: Sun 08 Jun 2025 09:01:10 +0000
Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=)
2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: nzConQHPFq0xehx+lR0AEq1FGlsCjM7ERYMBi5ZfXBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5d:e6:49:94:12:69:cf:44:1a:44:03:55:10:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c
Validity
Not Before: Jun 7 09:01:10 2025 GMT
Not After : Jun 8 09:01:10 2025 GMT
Subject: CN=919b90b431e94f059886b094166803d2a20bcdc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:a1:9c:d0:4b:d8:7d:49:40:85:83:c9:95:
df:6e:1a:f6:06:f0:c9:64:80:d1:8a:78:8c:52:84:
dd:16:02:83:2f:c3:93:00:8c:0c:35:e1:6f:55:b1:
8f:8c:f9:6e:09:10:dd:f3:b4:3d:48:3c:e1:82:f5:
e0:36:b1:1b:8c:22:f6:67:52:2d:af:96:27:2a:bd:
be:82:e3:0a:fd:92:3b:1f:e4:5f:71:78:ad:b6:b2:
7e:ee:9e:3d:ce:24:d5:05:04:dc:a8:52:5e:85:16:
63:e8:f3:fd:de:6d:e9:bb:84:36:48:cc:53:6f:2e:
1c:dd:31:5b:cf:26:f9:2a:7c:39:8d:1a:15:1b:79:
47:cf:48:8b:94:b8:c8:d9:a8:89:59:61:14:af:16:
2c:32:7b:05:d6:71:d0:c9:7f:46:81:e2:8a:15:84:
8e:bc:a9:29:61:1a:87:9e:93:4f:fd:16:60:3f:23:
b6:cf:9d:da:ba:3a:21:a5:ec:00:d9:6e:99:ec:dd:
03:9f:a8:61:33:5d:a5:23:e4:b2:e7:41:55:3e:8e:
48:6e:6f:2b:37:a6:35:de:35:32:00:42:eb:15:7e:
b2:f0:7b:70:21:6a:94:47:13:91:7f:57:8f:33:74:
0c:ac:fc:b0:06:2c:f6:c1:4c:fd:e0:c5:af:5c:ce:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9B:90:B4:31:E9:4F:05:98:86:B0:94:16:68:03:D2:A2:0B:CD:C8
X509v3 Authority Key Identifier:
keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:1f:ab:b9:d2:22:48:04:bf:5f:db:6c:98:65:2c:18:d4:
3e:c8:28:31:82:7d:29:9a:ac:65:db:2c:8f:f2:d2:af:09:49:
56:98:63:10:ee:09:61:87:bd:1c:d5:b3:1c:de:bb:65:de:21:
ef:74:fd:2b:e5:d3:20:cd:5d:a5:24:14:62:c7:47:92:fa:63:
c8:eb:ef:75:98:af:9f:1e:fc:94:5e:46:81:70:8a:d0:64:82:
98:1f:04:2c:cf:07:4c:b2:44:c7:5b:26:47:80:54:3c:aa:a9:
85:5f:32:fd:d9:76:6c:6f:f6:52:58:9e:9f:55:a6:17:f2:89:
42:3e:ee:ba:f1:da:dd:cc:6b:ce:5b:29:6a:7f:3c:e7:bc:35:
63:4e:aa:67:0e:bd:1b:8d:d1:ec:45:70:b2:e2:df:1f:40:9a:
5d:42:af:eb:1e:24:ac:42:2d:31:01:df:63:ac:56:c4:b1:97:
b0:7c:14:39:04:28:94:1b:2e:53:6a:99:5c:5f:18:d0:d2:46:
54:9f:7f:ae:fe:f9:15:83:8c:f4:9a:cf:b4:12:f3:00:67:48:
91:e0:13:ab:f6:ec:d6:5a:5d:b1:b0:fa:cd:25:2c:a1:7d:60:
d5:c9:be:18:44:a4:2d:50:35:5e:2a:54:8c:50:48:81:b9:eb:
12:5e:9b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:31 2025 by rpki-client