Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier: W8HLs/hgJj3hrWsXaCKK/WcvxAg5s5pllgYj0ksx+lk=
Subject key identifier: E7:7B:8C:12:B6:97:0F:84:8C:93:31:EA:CB:DF:3D:CD:8C:F0:7F:EE
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer: /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial: 019921B24FEC4207FF23D7A0DEAB0A36DC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:37 +0000
Manifest this update: Sun 07 Sep 2025 01:02:37 +0000
Manifest next update: Mon 08 Sep 2025 01:02:37 +0000
Files and hashes: 1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: vSnRW4D6uFWovwo/EFJZ+XEQ9tjuyteMezJ+/wNaHBU=)
2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:4f:ec:42:07:ff:23:d7:a0:de:ab:0a:36:dc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Validity
Not Before: Sep 7 01:02:37 2025 GMT
Not After : Sep 8 01:02:37 2025 GMT
Subject: CN=e77b8c12b6970f848c9331eacbdf3dcd8cf07fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:68:1d:db:de:fd:59:ce:41:85:68:db:bc:
39:d6:09:1e:3b:f9:fb:0d:dd:22:e1:2e:1a:0d:c0:
25:98:11:75:ec:3a:46:c5:61:2f:75:9d:1f:bf:eb:
7f:19:ff:79:95:6f:bd:0d:ee:4f:cc:97:61:20:65:
5b:fc:a6:54:1f:87:03:a7:0c:2d:bf:bf:2f:b2:9c:
f9:2a:c5:78:3f:96:74:50:01:2e:4a:a0:a0:37:81:
c9:97:fd:8a:53:3c:84:c5:a8:17:24:f0:c5:84:0e:
75:e1:40:f5:49:24:2e:1a:7f:ea:92:40:c5:0c:b8:
c3:07:5b:6d:e7:78:b3:e7:18:a8:25:a9:bd:51:03:
57:a7:c4:34:30:d6:a7:e5:db:5c:92:33:64:0c:cb:
58:36:fc:2a:a6:2f:e8:62:bc:69:f8:dd:53:f1:f9:
d9:de:f6:22:75:2d:3d:3a:e9:0b:40:82:8a:7a:3e:
67:a5:22:af:06:60:b7:f7:b9:ce:54:42:42:1f:8f:
0b:02:18:f7:ed:c9:95:a8:35:17:cd:c2:3c:fa:4d:
d6:6e:15:83:a1:a6:a2:97:81:22:87:8b:b6:e3:fd:
ec:5b:ba:50:a5:7f:73:05:5d:db:6b:f1:f7:a7:33:
f4:82:b8:7c:9a:46:7a:e0:78:a8:62:a1:7b:24:cc:
a5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7B:8C:12:B6:97:0F:84:8C:93:31:EA:CB:DF:3D:CD:8C:F0:7F:EE
X509v3 Authority Key Identifier:
keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d2:49:28:7b:c5:b0:dc:11:da:e8:73:19:bd:bf:57:c2:e3:
b7:cd:eb:4d:df:46:04:61:e9:b2:54:23:b5:43:8b:05:34:d6:
10:e8:10:ec:1f:16:4e:47:03:7a:e2:27:61:d8:aa:56:07:94:
aa:7b:64:c8:16:ca:db:3d:58:50:7e:7d:2f:f6:b0:5b:96:44:
73:da:23:ba:1a:44:b9:3a:77:9d:47:42:1c:61:20:3d:83:37:
54:1a:29:4b:a9:61:31:68:fa:17:59:4e:17:8d:b2:0e:27:db:
1b:42:2a:d8:99:24:85:68:ca:f2:81:2e:0e:0c:1a:ac:95:61:
45:56:5f:2c:eb:96:cd:64:e2:dd:25:08:d2:96:2b:4a:59:df:
0a:fd:ad:6d:f9:79:1a:27:53:be:7d:d8:c9:a5:a5:9b:32:e4:
c3:07:81:f1:c7:82:14:b5:f6:a2:b2:7d:02:a9:5f:17:c3:c3:
ce:a7:98:3e:87:fe:77:94:ae:18:e1:a2:aa:82:11:c0:4a:09:
bc:80:bb:9e:50:1d:67:54:12:cc:f5:d1:cc:96:b2:db:ab:82:
15:4a:2b:3d:5e:51:eb:de:fd:52:d4:46:50:30:34:57:a9:e6:
11:ed:ae:82:f7:8d:94:dd:de:51:b7:05:02:5b:74:11:23:ef:
62:51:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:10:23 2025 by rpki-client