Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: o7u1B04jr8Fi0BH+R1LPLDQSlYBhsNyMh+YUttIouaU=
Subject key identifier: 57:36:18:DC:F6:B7:12:19:B0:B1:4D:A8:9C:00:16:01:23:60:D3:DD
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 01988BEAAB82F5516E4A49315A7E6DC77E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 0561
Signing time: Fri 08 Aug 2025 23:01:09 +0000
Manifest this update: Fri 08 Aug 2025 23:01:09 +0000
Manifest next update: Sat 09 Aug 2025 23:01:09 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: UI8sU/HSKjWrv27Ph4IFoNfzn6Kc9pWz+fnADManzL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:ab:82:f5:51:6e:4a:49:31:5a:7e:6d:c7:7e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Aug 8 23:01:09 2025 GMT
Not After : Aug 9 23:01:09 2025 GMT
Subject: CN=573618dcf6b71219b0b14da89c0016012360d3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:83:57:f1:a2:00:9c:d0:79:13:c8:e9:d8:
04:36:e2:79:a4:a4:78:94:40:a5:05:08:66:ef:10:
c3:ad:fa:f9:77:85:af:e0:cf:c1:55:3a:f3:b7:13:
53:dd:e1:19:35:f5:b5:2d:cb:03:87:99:d4:39:fd:
56:f3:cb:9d:49:1f:03:23:0e:72:31:0c:94:77:5b:
51:18:20:de:cd:61:9b:fa:42:9e:42:ca:0c:44:79:
94:21:e2:2d:ef:8e:b0:d0:80:70:d6:ae:b4:f2:27:
72:11:c1:fa:b1:24:79:de:bb:43:ac:23:26:70:d6:
bf:aa:47:67:29:15:22:fc:4c:ae:f2:ab:cd:e6:5d:
a6:e5:ea:a7:71:d0:3c:8b:93:95:16:96:ee:0d:87:
22:8b:9d:df:e8:c4:50:b6:8b:c5:e0:de:09:64:a4:
62:7f:33:5e:a6:84:76:54:f5:50:43:03:1d:58:89:
e7:f3:61:a6:01:1b:07:23:07:bb:70:40:8a:6d:05:
ce:7b:8a:c8:4f:de:00:7e:ac:8f:27:41:18:a4:63:
fb:64:61:87:25:99:92:bb:7f:75:cc:45:5a:b2:e1:
ab:c6:24:12:d1:20:e8:2e:27:c1:aa:db:a9:1b:0f:
b5:f6:0e:6a:9d:13:63:fe:87:20:31:38:a0:de:d0:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:36:18:DC:F6:B7:12:19:B0:B1:4D:A8:9C:00:16:01:23:60:D3:DD
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8f:36:a1:48:e3:f3:72:10:35:01:0f:e9:a3:6d:13:94:20:
ce:8c:01:05:0e:2b:d8:f0:01:3d:b5:d9:17:01:f9:2c:e4:ab:
91:cf:4e:f9:32:82:a9:09:87:cd:7c:28:ee:8c:1e:41:fb:24:
45:0e:1d:8c:9c:b7:8f:a1:95:4b:3d:1d:9a:80:88:d0:58:07:
d6:12:83:a3:63:70:f5:25:02:05:9c:47:73:20:46:da:9f:2e:
85:11:f6:3f:1e:65:e9:a8:d5:1d:ab:c5:42:45:89:91:33:67:
e5:57:7b:91:4d:fc:9f:87:07:2b:6a:5b:9b:48:ca:b6:1d:cb:
c6:05:d1:e2:48:19:52:53:3b:89:9d:4b:c7:34:10:eb:b9:7c:
47:40:cf:41:4b:c0:d5:b1:15:8d:f3:ed:d8:24:c8:13:d8:fe:
be:2b:66:6f:05:56:c8:bd:3b:0b:ef:87:42:63:54:a1:da:f3:
37:b2:f6:4f:6c:c3:15:aa:14:41:cd:e0:d1:2f:d7:dd:92:cc:
fe:f4:ab:e4:53:82:25:c0:8f:99:a7:9e:45:06:dc:f6:dd:69:
1b:3d:64:c1:47:3e:73:71:2a:e7:59:87:60:f0:22:fe:ee:28:
fc:d9:18:50:64:be:04:57:78:75:68:e8:6e:b3:80:fa:3a:dd:
ee:d9:59:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:36:29 2025 by rpki-client