Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json)
Hash identifier: 8pot5WLP9uUIHYHxLuTSRTXrIs7bTvtxjUujYbbFYrI=
Subject key identifier: 0B:AA:DD:17:00:E1:2F:0A:D1:F4:EF:63:52:D1:E2:00:B1:64:E3:04
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 0197499F485C96E903D03C31B89A6D6F517C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
Manifest number: 1192
Signing time: Sat 07 Jun 2025 09:01:04 +0000
Manifest this update: Sat 07 Jun 2025 09:01:04 +0000
Manifest next update: Sun 08 Jun 2025 09:01:04 +0000
Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=)
2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=)
3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: +mxYr+UWy/Wr/gAe9PJZdW1mBcmnKfcPQhuho7jkqIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:48:5c:96:e9:03:d0:3c:31:b8:9a:6d:6f:51:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Jun 7 09:01:04 2025 GMT
Not After : Jun 8 09:01:04 2025 GMT
Subject: CN=0baadd1700e12f0ad1f4ef6352d1e200b164e304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:22:86:52:96:d4:ce:ad:50:40:23:10:bf:
77:01:61:d4:4f:e8:e9:5c:49:7a:ec:bd:71:fe:c9:
b5:31:b1:10:47:1b:d6:85:c0:be:9a:f8:9d:59:71:
b9:1a:fc:5c:05:bc:1f:76:6e:66:59:fd:6f:f8:8b:
81:ae:36:f4:34:98:e6:c8:99:30:e0:1f:03:b4:94:
17:10:8e:4a:26:a8:78:ca:10:8c:89:0b:7d:18:a7:
58:49:b0:2c:e7:ca:85:31:be:95:8a:d1:ce:31:a3:
9c:35:a5:fc:72:b4:73:4e:bf:b9:4c:eb:00:a5:1c:
ea:a6:4c:14:57:f0:6e:b1:e0:0c:1e:db:66:1d:db:
d7:78:98:e5:f6:2c:a8:9f:3b:85:77:f5:33:d2:da:
5d:56:e4:a2:53:81:d1:c8:09:0a:83:65:95:ac:b5:
73:42:44:a0:06:ff:c0:cd:4c:0a:e4:bb:9e:1b:42:
23:80:8f:f2:97:89:1d:e2:85:96:b2:1f:ff:c8:e4:
6b:b4:66:f7:dd:86:03:e8:73:9c:2d:3c:7c:aa:83:
28:37:88:29:7c:73:b7:e3:8b:08:bb:da:52:82:74:
56:cd:83:24:dd:0b:f0:e5:0e:b3:6e:1e:bc:d2:f7:
26:4e:3f:d3:37:ce:d8:fa:a4:88:56:68:99:dc:73:
8f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AA:DD:17:00:E1:2F:0A:D1:F4:EF:63:52:D1:E2:00:B1:64:E3:04
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fa:8c:5d:ba:1d:0b:14:7f:fe:8e:86:16:a3:ac:44:71:d6:
f7:41:1d:17:93:b7:05:82:65:3b:3e:ae:f7:9b:98:4d:d9:a7:
32:88:5f:76:99:4d:47:57:c6:69:d2:0d:9e:7c:c5:6a:74:45:
ce:0f:30:c2:02:90:20:83:ee:4c:30:e6:4e:c7:22:82:7d:c5:
5a:f0:2b:21:1b:92:14:24:bb:0a:2f:2f:8c:85:be:aa:d9:34:
d3:80:59:02:68:56:d9:10:9d:c4:a9:6a:0f:b1:b8:21:0e:e1:
67:6d:13:b7:12:fe:77:9f:72:86:8f:31:c0:d2:50:f2:a6:df:
5a:07:ca:0e:f5:64:6b:ec:b0:06:9b:9b:f6:f6:e4:1c:52:96:
d7:97:c7:bb:7a:8e:fc:16:2a:74:d8:78:d8:37:34:6f:df:a4:
07:8e:c7:13:9b:7e:56:28:7a:9b:ea:e7:f6:c4:d0:ae:ab:2e:
31:da:72:53:a2:97:9e:22:42:50:12:ad:87:71:31:d4:64:bf:
c0:b8:ab:99:af:c7:1a:99:0a:c5:5c:5d:bb:ad:5b:cc:df:de:
59:73:53:9c:99:98:e1:1a:d2:0d:05:3c:79:98:68:b9:6f:15:
ba:9e:05:d5:41:f3:2a:23:6e:8f:34:3c:d3:06:1d:23:3f:fe:
14:89:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:30:35 2025 by rpki-client