Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier: cZBUh3ui3moKlSSFJKGeAy31DJdQvhC2lduyeqYYB+0=
Subject key identifier: 2F:0D:8B:60:77:34:D5:DB:E8:AB:6B:FA:F5:67:9F:B0:C9:75:B3:2A
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial: 01976471CC9C90CA9A7CDA1C1D4CBE056799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 14:01:08 +0000
Manifest this update: Thu 12 Jun 2025 14:01:08 +0000
Manifest next update: Fri 13 Jun 2025 14:01:08 +0000
Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: EVEgIRGmzisqdDxi2d88gMCLkDzoetxqbMQw5RdPQec=)
2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:cc:9c:90:ca:9a:7c:da:1c:1d:4c:be:05:67:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Validity
Not Before: Jun 12 14:01:08 2025 GMT
Not After : Jun 13 14:01:08 2025 GMT
Subject: CN=2f0d8b607734d5dbe8ab6bfaf5679fb0c975b32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:8e:e4:08:f8:3a:af:6e:73:d9:58:b6:73:
80:ed:7d:f2:42:36:8a:30:23:17:6e:56:8b:e8:2e:
bb:c2:2f:f5:25:30:2f:27:30:f1:c3:c4:e5:c4:b7:
d9:b3:fd:52:26:25:62:04:28:ed:ef:0c:8d:42:d9:
8d:97:01:9e:25:45:ce:91:78:fc:9a:d0:37:28:78:
1e:3b:15:4b:cb:8e:c9:3d:68:9b:b2:2e:16:9c:28:
ef:f0:59:2a:92:d6:1b:61:a7:41:d2:7e:8b:a1:ae:
e7:8e:f4:0b:80:ac:13:ae:3b:73:b5:4c:36:10:ce:
28:bd:9b:e0:c8:79:3a:37:c3:54:86:35:b0:b8:6d:
fa:5c:bb:9c:80:e7:96:72:a0:55:bc:d3:8f:78:f7:
d2:49:76:61:4c:ec:8d:28:c4:c4:6d:30:d7:7d:79:
79:7e:f8:f1:93:66:1a:2b:c2:c8:1d:05:d6:d2:fc:
d9:82:73:ac:7c:39:2d:4e:63:fd:42:cb:fa:b4:d2:
8c:e8:9b:7a:42:fe:d2:d1:8a:5a:67:d7:f0:cd:b0:
d2:f7:e7:e5:0c:6f:9b:cf:4a:38:5a:df:60:94:60:
55:47:2e:f6:8e:75:52:8c:ca:53:7f:0d:53:b3:58:
e0:72:be:75:ee:a9:cb:42:c0:eb:65:49:39:be:61:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0D:8B:60:77:34:D5:DB:E8:AB:6B:FA:F5:67:9F:B0:C9:75:B3:2A
X509v3 Authority Key Identifier:
keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dc:ef:07:45:a2:fc:55:c7:44:38:8e:8f:98:9d:e7:af:55:
0a:50:f9:0d:d7:27:9f:70:7f:06:d9:a3:24:65:09:45:d9:dc:
cc:ca:70:ab:91:c4:86:22:7a:25:a3:5c:59:e8:f1:b6:5a:9d:
ed:33:f4:ff:16:21:f9:f8:dd:b4:f4:b9:d4:12:23:c9:88:6c:
75:bc:77:cd:59:e3:fd:bf:19:a7:a9:73:86:7b:1f:d7:d9:71:
6e:d8:2d:bc:25:d0:5b:84:df:df:cc:95:c7:c4:6b:2d:98:46:
b6:8e:30:b3:5f:ad:b6:0f:00:2a:9d:b5:b5:85:39:a6:27:71:
1d:d2:de:ae:a3:04:21:dc:39:23:44:6e:34:6c:9c:d4:12:5a:
92:98:40:30:33:16:7b:3c:c8:16:54:e8:65:db:75:2d:7e:c9:
40:26:19:68:ae:99:3b:84:e7:a4:a8:6c:ee:6b:51:b1:92:af:
96:53:53:74:76:53:f2:93:ea:31:19:c2:20:91:50:b6:7c:65:
24:0f:82:b3:7d:85:2b:08:f7:9c:3e:af:15:2c:4d:56:cd:f3:
b1:60:c3:42:4a:24:42:af:d1:8f:82:11:32:1d:51:09:23:14:
70:ce:01:e8:78:88:c4:4b:f5:e5:d9:ad:cd:d1:bc:31:e4:e0:
6d:48:5c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:49:37 2025 by rpki-client