Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
File: P_WH5OB6zfs4niWRYdoYazhrT2M.mft (raw, json)
Hash identifier: 6/PyWbPz3ijI+pnvKV1vr4F+2in7HeCZi6Nrct91Eqc=
Subject key identifier: 41:26:C8:1E:33:96:F6:5E:DF:43:D9:41:FE:11:59:80:B5:7B:C8:78
Authority key identifier: 3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
Certificate issuer: /CN=3ff587e4e07acdfb389e259161da186b386b4f63
Certificate serial: 01976F2BF6E51DE61C02A6618814D0F09971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
Manifest number: 3E
Signing time: Sat 14 Jun 2025 16:00:41 +0000
Manifest this update: Sat 14 Jun 2025 16:00:41 +0000
Manifest next update: Sun 15 Jun 2025 16:00:41 +0000
Files and hashes: 1: P_WH5OB6zfs4niWRYdoYazhrT2M.crl (hash: 7j/ZFPLqDvJ3nS9GZQ48zly2IN1dKCM3nprfpevMpJ0=)
2: SOJJoBTyyJua9tdu4tZ2B31g56k.roa (hash: YMViz3GkzFQZUT08/Yf5mLb5Z5Bzg+msMTH8wr8BZ0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f6:e5:1d:e6:1c:02:a6:61:88:14:d0:f0:99:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff587e4e07acdfb389e259161da186b386b4f63
Validity
Not Before: Jun 14 16:00:41 2025 GMT
Not After : Jun 15 16:00:41 2025 GMT
Subject: CN=4126c81e3396f65edf43d941fe115980b57bc878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:5b:1c:1b:10:f6:be:42:c9:bc:b7:fc:67:
f1:13:b2:75:a9:fd:f3:da:bf:72:12:32:10:a9:13:
08:f4:90:3a:6f:82:65:5f:b1:80:57:49:c4:b0:84:
e1:74:1f:6c:32:6b:d6:7d:8e:7a:d5:0b:ed:48:a2:
d3:64:22:a2:5d:de:2f:64:e6:5b:e4:27:8f:91:d2:
f0:bf:75:67:dd:9d:f2:a6:20:cc:1f:69:9e:20:88:
0b:ef:8b:65:76:39:f0:09:0f:5a:4c:80:dc:4c:2c:
67:08:96:ac:6a:ea:b6:85:29:9d:fb:0c:98:b3:11:
b1:3d:36:15:1d:03:26:9d:bd:d8:25:3d:8a:84:44:
3a:ca:67:af:14:9f:cb:12:28:10:ce:8e:d2:5b:12:
0d:68:f0:69:ff:23:f1:3c:e0:75:b0:a7:79:44:6b:
a5:31:f0:95:ae:46:ae:9b:4a:51:ec:e4:71:c4:4f:
f1:b8:98:ed:bc:63:65:cb:ce:6d:e2:c7:f8:a9:f7:
a8:87:25:b5:c4:fd:a7:71:be:5e:81:13:fa:57:61:
4f:c3:98:b8:df:7c:ba:19:ae:80:f6:3b:cb:2b:d8:
c4:09:45:ae:4c:9e:fb:90:7f:03:07:de:9b:dd:53:
3e:df:17:9e:06:19:82:31:81:04:db:5c:91:b0:b3:
b4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:C8:1E:33:96:F6:5E:DF:43:D9:41:FE:11:59:80:B5:7B:C8:78
X509v3 Authority Key Identifier:
keyid:3F:F5:87:E4:E0:7A:CD:FB:38:9E:25:91:61:DA:18:6B:38:6B:4F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WH5OB6zfs4niWRYdoYazhrT2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f917c2-fc6d-4468-a121-56fa06c43180/1/P_WH5OB6zfs4niWRYdoYazhrT2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:57:c2:ee:59:01:28:06:e0:16:c1:09:d8:73:dd:6a:b5:
59:e9:08:31:33:75:67:b8:a3:95:dc:58:e7:61:72:7c:1f:83:
6d:2a:00:09:58:80:4c:a1:af:49:af:37:48:37:27:60:82:b4:
19:2d:a9:ef:12:fa:a5:15:37:20:1f:c2:fe:66:19:23:27:f9:
59:28:10:5c:e8:7c:59:c4:df:03:22:80:aa:2e:d2:2c:0b:f1:
76:2c:81:54:37:a8:a4:c7:2e:73:b6:be:48:64:79:5e:b2:96:
94:b7:6a:d3:90:5d:07:4e:65:e6:06:83:83:72:1b:a1:98:a2:
de:a9:42:3e:47:7e:6d:bc:72:24:39:46:82:c6:24:f3:f3:02:
92:75:2c:23:3d:be:9e:3b:47:3f:66:89:30:80:5a:a9:87:0b:
9d:c0:22:3d:eb:88:20:1e:62:37:1d:12:36:78:5a:4b:f5:98:
d4:3d:17:6d:5c:2e:39:4c:3d:c3:d2:69:00:bf:5f:71:03:a0:
9f:d5:19:3b:ed:42:5f:10:15:2c:3b:89:f2:e5:8f:c2:70:da:
87:25:4a:84:2e:cf:60:06:82:b0:e4:3a:65:41:85:1e:d7:d2:
d1:54:23:cb:64:26:cc:a0:31:1c:77:b3:57:24:51:6f:cf:69:
88:d0:1b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:53:07 2025 by rpki-client