Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File: PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier: 1sT8j4W9OrB4FfhDLzloSfmsvlZeFHUyKUMSzJwHzyE=
Subject key identifier: E2:D6:9A:EF:1B:7A:8A:C5:3D:F0:41:36:C7:65:56:A2:54:3F:08:AF
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer: /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial: 019749D5F4ACFA4777F98E11A16A042D8740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:47 +0000
Manifest this update: Sat 07 Jun 2025 10:00:47 +0000
Manifest next update: Sun 08 Jun 2025 10:00:47 +0000
Files and hashes: 1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: PqadZQXDT7RWenH/GXCTDLOZvhBolJnXxA9JfhT4zUA=)
2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:f4:ac:fa:47:77:f9:8e:11:a1:6a:04:2d:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
Validity
Not Before: Jun 7 10:00:47 2025 GMT
Not After : Jun 8 10:00:47 2025 GMT
Subject: CN=e2d69aef1b7a8ac53df04136c76556a2543f08af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:c6:94:64:cd:a2:82:87:df:28:2d:51:2e:
c7:1a:a8:40:2e:da:98:9b:de:f6:1d:8b:21:37:4f:
b6:a1:ce:68:8b:f9:d7:b2:b5:92:b4:f8:6f:2b:b0:
0e:fb:34:29:0b:83:26:c8:58:a4:ef:db:cb:c9:65:
07:82:30:bc:98:70:c8:ed:34:d7:87:4b:f1:c8:94:
4e:db:00:58:d3:1e:60:f8:7f:65:19:f0:ef:6f:ca:
36:15:de:ef:13:6b:43:91:ae:13:8c:85:e6:2d:90:
c2:56:b8:5d:75:62:1b:9d:d8:ea:a6:2a:cb:1b:cd:
93:15:41:80:c3:9a:36:5e:44:e5:c9:3b:f2:16:dd:
bf:28:a1:6c:46:02:ed:cb:98:8e:3e:64:30:77:8d:
4d:c3:1e:f9:9a:8c:a0:ea:e9:78:09:7f:a2:62:55:
4d:9a:99:ff:f3:cc:76:2f:90:a1:b5:0b:bb:85:72:
77:4d:d6:fb:3d:3b:81:b2:40:d1:1f:53:89:06:7f:
07:72:4e:16:a9:1d:1d:27:90:d9:5d:6e:d8:3d:de:
eb:f0:0f:2a:34:38:ae:68:27:6b:38:f2:ed:72:d1:
cc:f5:e3:05:aa:9e:84:b1:92:59:c1:0c:b1:67:5a:
db:dc:50:0e:6a:97:15:1b:90:e3:60:3e:88:b8:c2:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D6:9A:EF:1B:7A:8A:C5:3D:F0:41:36:C7:65:56:A2:54:3F:08:AF
X509v3 Authority Key Identifier:
keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:34:f3:24:fa:b7:30:9a:a1:77:c5:8f:d2:49:d1:2a:c7:
23:08:27:c1:85:78:b5:81:de:9b:22:5c:2a:5b:a9:7b:9f:55:
48:24:f6:0f:ef:71:ea:63:d5:6c:04:10:95:e6:91:20:3b:59:
4d:e2:48:7a:31:fe:64:ca:e4:2a:72:03:7a:b9:ed:e4:22:42:
84:34:f3:12:6b:87:14:45:01:5e:a8:e5:b7:45:77:ca:3b:0b:
84:0b:82:15:7f:61:3d:fa:e4:45:f5:e3:0c:17:c1:c5:81:11:
36:b6:bb:e8:43:23:be:7c:98:0e:2a:39:17:6f:4d:71:fe:68:
16:e1:51:0e:5f:1a:e5:82:59:5f:ac:43:43:d1:78:a9:e8:35:
b7:6b:3a:6f:88:e0:22:8e:95:b8:df:ae:c4:3c:ad:13:7c:d6:
08:a3:74:ff:d0:67:b8:60:aa:84:f3:63:92:ef:f8:50:76:0f:
7a:0c:24:fe:02:bf:20:21:ee:06:2b:f3:fd:a5:fb:c3:51:3f:
4f:0e:4b:58:e1:6c:fe:d2:11:0e:bd:6f:a3:3b:76:7f:8d:14:
b4:f5:7b:d8:70:30:bd:71:ae:be:d2:a2:af:f4:17:70:db:5b:
50:73:4e:c2:a4:c6:7e:21:a8:b1:90:ba:39:41:37:65:28:ee:
70:1a:0a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:34:11 2025 by rpki-client