Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: wATdqHU53S8jgKykppG3lN7w2JTkOmHEowcKevF6+zE=
Subject key identifier: 0C:D2:CD:CF:62:9F:53:8B:1B:57:65:52:77:E0:1D:F9:AA:C0:6A:4B
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 01967454E4671C3BEFF43629F969BADD5543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: FF
Signing time: Sat 26 Apr 2025 23:00:42 +0000
Manifest this update: Sat 26 Apr 2025 23:00:42 +0000
Manifest next update: Sun 27 Apr 2025 23:00:42 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: jNkrI5BJknYi6RFK8UVG2NDpxIFJ1uE7UEycJ9Pe2jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:e4:67:1c:3b:ef:f4:36:29:f9:69:ba:dd:55:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Apr 26 23:00:42 2025 GMT
Not After : Apr 27 23:00:42 2025 GMT
Subject: CN=0cd2cdcf629f538b1b57655277e01df9aac06a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:eb:f8:22:5a:7a:fd:e1:56:4f:fe:39:9b:
35:2d:8a:ec:7a:60:0f:fc:5a:25:6b:9e:8e:5d:9e:
f7:62:e2:b4:00:64:11:36:fe:38:32:86:7e:2d:ea:
18:bc:02:0e:60:c4:de:67:22:2a:51:f9:45:6c:ca:
f0:d5:29:53:3a:a5:c2:04:42:83:1c:f6:df:6c:cd:
90:8f:95:7e:85:64:b9:e0:9a:27:87:3f:f3:b6:de:
18:86:ea:ce:62:30:f2:5e:83:84:49:e3:75:e2:9c:
57:cc:ea:13:e8:12:b0:fa:6c:f6:f6:dd:2b:a7:a4:
bf:5f:70:c1:67:4b:88:cc:34:6c:9f:76:63:25:ce:
e4:2d:74:0f:0a:d8:1c:7d:eb:0f:53:24:26:32:03:
ce:97:f8:9a:1e:8f:53:12:e1:64:8b:11:5e:3c:34:
e6:fa:69:80:7e:f0:84:a8:0f:fe:2f:e5:8e:47:e0:
7b:34:13:87:1c:85:73:2a:c4:1c:e7:7c:d7:3e:9c:
03:c6:92:24:b2:77:f4:a2:be:30:6a:36:e0:c9:85:
61:74:e0:84:ae:55:38:35:95:4b:b1:5d:7c:ca:bf:
6e:7a:95:5c:4b:ea:63:ee:46:81:29:ef:73:69:a8:
79:2e:c1:72:63:d5:e3:1a:87:a3:76:71:27:9c:69:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:CD:CF:62:9F:53:8B:1B:57:65:52:77:E0:1D:F9:AA:C0:6A:4B
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f8:2a:b7:4d:0e:48:94:9a:2f:cd:f8:f7:b9:49:f8:13:bb:
5b:bf:cf:46:1f:fa:21:79:13:e1:79:f2:20:ef:43:aa:fb:cf:
12:b0:5a:93:c1:ed:3e:1a:43:fd:43:cf:7c:b1:3e:66:d9:f7:
20:82:6a:3b:32:fb:06:f7:6c:4b:84:a2:ab:57:2a:30:74:1c:
7d:8d:ac:84:bf:26:8d:c9:f6:1a:09:59:7b:82:69:13:02:ac:
7b:7c:6b:cb:49:7e:22:0f:dc:9a:c2:d6:c4:02:a0:47:41:65:
fa:58:16:62:2e:9e:1e:14:0a:53:1d:19:cf:31:45:34:44:e5:
36:88:31:a1:bb:fd:92:90:76:d3:8a:3d:4b:3b:8b:57:76:e6:
13:0c:c5:25:9e:d1:18:a6:8c:f2:3f:87:6a:79:d5:fd:8d:bf:
45:be:b2:4b:ea:c8:23:a6:8c:3b:bd:9e:34:ff:e9:55:a0:5c:
f9:4a:74:33:e4:d0:5e:98:7a:32:ad:07:17:d0:f7:df:78:cb:
e4:81:27:ff:99:6b:e6:f0:b0:a9:61:a5:67:3e:dc:3c:b0:43:
9e:e5:11:c8:2a:f7:e9:ed:31:2e:e7:ad:58:8f:85:1a:5f:a5:
35:5c:71:35:72:78:c0:57:dd:cd:b7:65:1b:fc:90:91:44:ba:
8b:2f:2b:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0VORnHDvv9DYp+Wm63VVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYWM2OGY5MTIwNWM0NGU3MzAzMzZlNjAwYjYzMzRmOGM4
MWU4YzIwHhcNMjUwNDI2MjMwMDQyWhcNMjUwNDI3MjMwMDQyWjAzMTEwLwYDVQQD
EygwY2QyY2RjZjYyOWY1MzhiMWI1NzY1NTI3N2UwMWRmOWFhYzA2YTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsXr+CJaev3hVk/+OZs1LYrsemAP
/Fola56OXZ73YuK0AGQRNv44MoZ+LeoYvAIOYMTeZyIqUflFbMrw1SlTOqXCBEKD
HPbfbM2Qj5V+hWS54Jonhz/ztt4YhurOYjDyXoOESeN14pxXzOoT6BKw+mz29t0r
p6S/X3DBZ0uIzDRsn3ZjJc7kLXQPCtgcfesPUyQmMgPOl/iaHo9TEuFkixFePDTm
+mmAfvCEqA/+L+WOR+B7NBOHHIVzKsQc53zXPpwDxpIksnf0or4wajbgyYVhdOCE
rlU4NZVLsV18yr9uepVcS+pj7kaBKe9zaah5LsFyY9XjGoejdnEnnGnouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzSzc9in1OLG1dlUnfgHfmqwGpLMB8GA1UdIwQY
MBaAFD+saPkSBcROcwM25gC2M0+MgejCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEt
ZmVhNzRlODEwNTFhLzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lM2U0MGYtMTUwNS00MmU5LTk2ZjEtZmVhNzRlODEwNTFh
LzEvUDZ4by1SSUZ4RTV6QXpibUFMWXpUNHlCNk1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvgqt00O
SJSaL83497lJ+BO7W7/PRh/6IXkT4XnyIO9DqvvPErBak8HtPhpD/UPPfLE+Ztn3
IIJqOzL7BvdsS4Siq1cqMHQcfY2shL8mjcn2GglZe4JpEwKse3xry0l+Ig/cmsLW
xAKgR0Fl+lgWYi6eHhQKUx0ZzzFFNETlNogxobv9kpB204o9SzuLV3bmEwzFJZ7R
GKaM8j+HannV/Y2/Rb6yS+rII6aMO72eNP/pVaBc+Up0M+TQXph6Mq0HF9D333jL
5IEn/5lr5vCwqWGlZz7cPLBDnuURyCr36e0xLuetWI+FGl+lNVxxNXJ4wFfdzbdl
G/yQkUS6iy8rfw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:17:25 2025 by rpki-client