Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: x5+koGObpyG6lMmDeQgdf+cnrFvkfLB9HJVXRsRu9KA=
Subject key identifier: 78:76:0F:DB:74:BB:20:AF:81:44:3F:68:C8:F9:F1:6B:95:F1:39:89
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 01977DFA232E2F1BC4F2FC36B3257C45702A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 159A
Signing time: Tue 17 Jun 2025 13:00:34 +0000
Manifest this update: Tue 17 Jun 2025 13:00:34 +0000
Manifest next update: Wed 18 Jun 2025 13:00:34 +0000
Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: CphEcoy4j8awqq581RMewrgpmhWx9U6eK6bobrCtS8o=)
2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:fa:23:2e:2f:1b:c4:f2:fc:36:b3:25:7c:45:70:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Jun 17 13:00:34 2025 GMT
Not After : Jun 18 13:00:34 2025 GMT
Subject: CN=78760fdb74bb20af81443f68c8f9f16b95f13989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1d:f5:a3:3f:cf:d7:56:da:6e:7e:e9:8e:31:
6c:30:6a:cc:ae:11:6b:0b:42:8f:41:52:45:5d:92:
1c:9e:64:45:ae:df:d8:e2:70:7a:53:07:18:83:d8:
2e:53:1c:3f:c0:3a:41:3c:d9:ad:ed:1a:eb:bd:4b:
f4:8e:ef:d9:9d:5a:9e:aa:6b:11:96:a2:c9:80:37:
f0:b9:9d:3e:7b:f6:60:b0:a9:29:62:6d:93:8d:39:
0c:9d:ac:5a:96:a6:26:21:6a:77:c1:a1:90:a9:b7:
28:1d:86:3b:bc:13:b5:fd:28:81:a0:db:2f:55:5f:
7c:cb:af:44:6f:eb:82:3f:fb:62:3c:db:00:a1:99:
9f:2b:44:31:67:d5:0b:71:f9:fd:58:eb:57:27:b1:
e3:8c:70:1a:cd:e3:ab:99:60:df:0c:f1:0a:52:f3:
3b:c7:ef:38:58:91:09:60:7a:9a:7e:e9:a8:36:16:
45:2e:b8:7d:37:bf:e7:e5:e0:16:fd:7c:86:28:e8:
e4:27:29:97:d2:4b:ec:4a:79:98:95:bc:43:0b:1a:
b1:7e:d0:11:03:ea:e9:da:8f:84:d8:60:31:90:12:
05:f1:ac:3e:9d:f0:e2:7e:03:92:fc:38:8f:ab:d6:
87:6b:c3:ca:22:3e:cd:23:2d:91:a5:ad:c8:4c:ca:
47:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:0F:DB:74:BB:20:AF:81:44:3F:68:C8:F9:F1:6B:95:F1:39:89
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5f:4d:fd:f9:55:56:cf:e4:9e:79:e2:d5:e7:28:27:81:2e:
c3:1a:d8:43:32:38:93:c9:6f:4e:03:14:76:5a:95:c2:42:cd:
14:a6:ef:b1:79:ea:bf:4b:6c:0b:ba:b8:93:70:c3:8b:e1:6f:
d9:ff:c1:0f:36:c3:0a:b3:ab:ae:2f:4c:28:a4:57:cd:07:5e:
2e:19:3b:13:9b:3b:3e:2a:30:c1:ba:96:75:d6:33:76:d4:2b:
e1:31:1f:0b:d5:b2:5c:c9:6f:1f:e1:b2:b5:3e:95:38:f8:7c:
09:f7:e0:e7:bd:36:c7:11:3f:da:86:f6:14:6e:8a:55:9d:af:
05:48:7c:08:d2:35:f4:41:9a:81:01:ff:2a:a6:a3:69:c9:53:
e1:55:bb:ea:85:35:8f:47:20:32:eb:7e:cc:2c:62:fd:4c:35:
47:aa:e7:db:7a:23:47:3e:91:49:49:3e:8a:00:75:8a:88:8f:
a5:47:54:53:8f:6a:93:cc:44:65:5d:c0:e2:d1:66:83:96:58:
9c:eb:e7:19:42:df:0d:0d:85:88:e8:6e:9a:0e:53:fd:2f:f2:
c1:85:11:51:cd:07:5b:fe:40:a7:5a:05:87:d8:57:de:db:11:
da:62:11:c7:9b:16:ba:10:6a:b6:41:cc:ef:b3:ac:0e:69:83:
95:b1:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:32:08 2025 by rpki-client