Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
File: pCzz6j9GGa3XsfheXbx2jNPRdC0.mft (raw, json)
Hash identifier: c5P9e122zWIPTwk0iGGAmxoajAEUNmSQcCfHXkiuyq0=
Subject key identifier: 81:08:3D:B8:E4:C8:F8:50:D6:BC:25:33:B7:88:CF:21:E6:CB:7D:CF
Authority key identifier: A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
Certificate issuer: /CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Certificate serial: 01985456CA48F80540DB4739622A7F3B905D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 04:00:30 +0000
Manifest this update: Tue 29 Jul 2025 04:00:30 +0000
Manifest next update: Wed 30 Jul 2025 04:00:30 +0000
Files and hashes: 1: SNV_1VpgwAmnXneSKWb5jRq8ToE.roa (hash: WATnXIVshclXFF3TBwoPfH1QR7+uJEv7hk540ZBWOkc=)
2: lVzggsEuwHNUmwDhZ4XQcolHpDk.roa (hash: eA/BupKOc3qojEoZ8E13TwJIMViSsM3/KaYEEgTR1Jc=)
3: pCzz6j9GGa3XsfheXbx2jNPRdC0.crl (hash: c9yfqWFV6skTEap8kbtcYrypdpk6PVpi8h3uIEb6NYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:ca:48:f8:05:40:db:47:39:62:2a:7f:3b:90:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42cf3ea3f4619add7b1f85e5dbc768cd3d1742d
Validity
Not Before: Jul 29 04:00:30 2025 GMT
Not After : Jul 30 04:00:30 2025 GMT
Subject: CN=81083db8e4c8f850d6bc2533b788cf21e6cb7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:98:fa:4d:21:ea:a0:23:1a:6e:2d:33:c3:
96:5c:88:6f:5c:48:09:82:74:cd:3a:ac:dc:e6:47:
a9:3f:b8:7d:8a:d0:53:2b:11:9f:5d:07:97:7e:12:
4a:84:1b:ff:f9:3d:f7:0c:48:1d:e3:61:78:29:3c:
9e:40:58:ca:f0:92:b8:8d:9b:20:7f:49:28:8b:8a:
f5:d4:85:57:31:2d:9e:ac:c3:42:71:dc:e8:bd:4a:
a9:42:33:d6:85:41:de:05:97:69:6a:ba:bb:a8:d2:
2a:8c:a2:a7:c4:fd:d1:3e:af:20:39:6e:ce:4c:84:
66:d7:74:76:85:59:7b:9a:d7:53:8a:4e:12:45:a9:
0d:b3:34:2f:04:7a:e5:68:ca:03:c9:2e:3b:d9:2e:
5f:46:14:de:76:98:6c:57:24:16:48:c8:51:9e:4b:
cb:16:2c:14:53:e2:0e:81:22:14:d6:af:ac:b6:41:
86:a8:e5:db:a3:ba:cf:a5:98:89:01:92:8a:2f:26:
26:99:46:77:ac:86:cc:80:37:90:be:0c:df:b9:9b:
28:10:e6:3f:bf:16:22:62:75:fc:39:82:fe:00:b4:
d7:74:e1:93:c0:4f:30:1d:50:2b:d4:e9:52:11:47:
03:e2:8e:75:b6:ae:79:f1:d8:87:c2:1f:81:ae:a3:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:08:3D:B8:E4:C8:F8:50:D6:BC:25:33:B7:88:CF:21:E6:CB:7D:CF
X509v3 Authority Key Identifier:
keyid:A4:2C:F3:EA:3F:46:19:AD:D7:B1:F8:5E:5D:BC:76:8C:D3:D1:74:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCzz6j9GGa3XsfheXbx2jNPRdC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/57269b-0f70-46cf-bce2-c7775159fc82/1/pCzz6j9GGa3XsfheXbx2jNPRdC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:78:3e:a6:f6:9e:2b:d8:6a:a5:0f:1b:49:48:e6:55:89:20:
24:ef:a9:4c:20:5e:8f:fd:45:20:fc:48:c6:59:42:c6:19:b6:
45:cf:94:fd:ed:cd:a9:c2:f1:5f:3a:67:fb:46:06:45:aa:74:
e2:82:ff:fd:1e:20:22:90:34:9e:7f:76:04:1d:41:8e:81:b1:
12:9d:62:93:10:f2:d0:9b:83:87:12:d7:6d:1d:ef:85:33:a1:
7e:e6:06:4e:c6:d7:c5:2a:86:fc:a1:f8:4c:54:c0:b8:09:38:
e3:df:51:2f:6a:20:15:9f:aa:2f:92:96:ea:27:90:c9:48:bc:
ff:b2:cd:a4:fd:1f:88:a4:a9:00:5a:eb:32:a3:2b:ec:5f:c8:
db:b3:ca:37:7d:c2:6a:a9:26:9a:ba:8d:3b:fd:36:a7:b4:0f:
c3:c6:2d:97:cb:33:eb:1e:0f:35:75:94:03:65:46:ed:5e:30:
01:cd:db:d7:9c:4d:77:4c:4a:0e:7a:dc:ff:66:78:b7:1e:ec:
b9:ef:ea:54:50:4e:e2:37:0d:0f:88:e7:f9:58:2f:df:e5:95:
36:59:04:49:4f:b1:bb:dd:f8:6f:b7:6c:6e:2c:d3:e7:69:46:
7f:4c:80:7e:50:eb:e0:ec:2b:c9:20:fb:d7:92:b3:de:ce:f3:
f0:6a:d7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:51:04 2025 by rpki-client