Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: Cf5eoE5q1JfNroO+3lGGBexGhlpyGJZ2lrbrtMNuDwY=
Subject key identifier: 36:6B:05:59:F8:F9:BC:95:50:8D:DF:72:EC:5A:5E:A4:50:45:38:7B
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019773771E3B79A9C415B3CFE7D5CCA1986C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 149E
Signing time: Sun 15 Jun 2025 12:01:15 +0000
Manifest this update: Sun 15 Jun 2025 12:01:15 +0000
Manifest next update: Mon 16 Jun 2025 12:01:15 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: qCBEcH/Eb4DSUt//nsDzmz6INqQyWZ6pVusSgQCDzh4=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:77:1e:3b:79:a9:c4:15:b3:cf:e7:d5:cc:a1:98:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Jun 15 12:01:15 2025 GMT
Not After : Jun 16 12:01:15 2025 GMT
Subject: CN=366b0559f8f9bc95508ddf72ec5a5ea45045387b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:05:d9:81:83:53:85:10:20:d6:78:a8:4b:e0:
a2:e0:71:e0:3e:bf:ed:33:74:20:b3:dc:d9:ff:b2:
59:83:77:ab:5d:03:21:e5:14:27:60:de:0a:cd:ec:
5e:3b:7c:ab:7e:64:51:a7:b2:98:99:b8:5e:a8:a0:
51:f8:66:ac:76:5c:ce:86:c6:69:58:68:e6:a0:92:
1e:b9:99:a1:56:27:4e:6c:62:27:97:00:eb:d0:66:
64:88:85:da:36:59:5b:8d:c7:ff:86:ce:c6:d5:1a:
b2:6b:e9:1e:73:9d:fd:8f:85:8e:29:cd:06:e4:86:
37:7c:99:a6:95:2d:0d:55:26:0c:11:28:6b:a2:03:
24:03:ac:66:f5:da:58:a0:fb:51:1c:1c:dc:7d:ae:
ca:15:03:90:20:32:61:54:2f:86:a3:57:2b:7e:15:
90:6e:62:62:d0:ea:25:e6:83:f0:0b:23:7b:ea:64:
2f:f1:6d:7f:87:93:2a:15:7e:43:d8:3e:7b:88:6c:
2f:b2:61:b4:7f:47:c4:f0:c4:02:26:69:7f:63:0f:
1d:f2:0c:92:05:39:2d:61:90:eb:3a:cb:c5:7b:0d:
bf:63:71:07:a4:65:d0:73:42:32:1d:bf:ca:56:09:
bd:46:fe:fc:56:9d:cc:4f:ed:9e:25:06:23:f5:89:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6B:05:59:F8:F9:BC:95:50:8D:DF:72:EC:5A:5E:A4:50:45:38:7B
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bf:21:35:c9:eb:42:97:79:3e:3b:d5:cf:51:c1:b9:06:dc:
3b:83:0f:72:55:91:59:37:ae:1e:d7:2f:31:e4:a6:f4:51:da:
41:02:34:77:bd:18:50:71:85:8a:40:a8:35:f4:7b:ac:25:22:
29:81:66:d1:79:c4:b5:2c:ab:9e:dd:08:8f:d7:5c:63:2e:20:
54:ca:46:ae:12:48:0d:63:e1:e2:cf:34:3d:e8:f6:3b:bb:c7:
11:2f:1a:c4:b4:63:e2:f7:96:b2:20:ea:c6:16:3b:42:a4:74:
c1:ab:17:ed:54:54:dc:97:36:de:08:92:99:35:59:e0:a1:c6:
7b:e6:99:74:77:e2:10:1d:63:37:1d:02:fa:73:c0:e1:87:3f:
06:dc:ee:3f:52:18:da:15:58:f2:bb:d3:d6:2c:22:d5:d9:ec:
87:4e:2e:fc:b8:3b:03:6f:14:5a:e5:71:48:87:81:f7:47:80:
b4:bb:e4:d6:d0:63:de:0e:3e:2b:f9:6a:f1:97:13:63:21:8b:
a7:2b:ea:d9:25:ef:36:fe:03:65:c5:ae:34:62:8e:9a:5b:20:
03:2c:ce:51:0d:50:34:88:c5:29:e2:c7:8b:be:2b:d9:61:ff:
7c:38:eb:81:32:ee:a5:f8:c4:49:f4:a2:54:6f:ea:f8:79:d4:
3b:17:eb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:57:07 2025 by rpki-client