Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: 9HUNKqkcZ4PUUyyEk/7/JPSqQo556HsRHZZyvmIRiUY=
Subject key identifier: F8:1A:CA:36:1A:6A:F8:80:C3:70:16:30:EE:15:79:F9:77:E7:3E:D8
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 01976D06B439B35A1E458605778CA213AEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 05D8
Signing time: Sat 14 Jun 2025 06:00:45 +0000
Manifest this update: Sat 14 Jun 2025 06:00:45 +0000
Manifest next update: Sun 15 Jun 2025 06:00:45 +0000
Files and hashes: 1: He25UWkTLLFKhTHFzz-APm0o_4c.roa (hash: qf89l1jhdOX3RHCcx3FCmLLItRgQ6aCJ5/hEoWKez8g=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: a8F3Dw+FdWn0Gak7Z0f/td/5/ebpyJLGIm+ICU8AZ9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:b4:39:b3:5a:1e:45:86:05:77:8c:a2:13:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Jun 14 06:00:45 2025 GMT
Not After : Jun 15 06:00:45 2025 GMT
Subject: CN=f81aca361a6af880c3701630ee1579f977e73ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f4:09:a3:77:87:84:8b:5a:2b:4b:3b:7a:ad:
90:4c:ac:8e:40:9d:bd:b4:dd:e6:95:03:21:d1:91:
e9:1c:06:b7:22:c1:5e:69:fb:00:d9:f1:d4:00:17:
45:45:d8:39:fa:55:61:87:b3:b3:76:a5:88:51:81:
d5:bb:88:c8:7c:0e:e7:c7:7b:c4:6a:29:66:57:49:
f1:fa:af:35:7b:c9:bf:9a:eb:46:9f:b4:d7:01:44:
f9:ea:ec:32:81:04:73:d8:d1:4e:36:5b:6e:60:ad:
3b:a4:53:01:a8:ba:f2:d1:70:12:38:c1:34:6b:6d:
0a:4d:79:7f:c5:8d:d3:85:8b:9b:67:c0:84:de:da:
d5:bc:78:74:70:06:95:2d:8d:0a:5c:54:96:1e:44:
1f:cf:65:31:b4:d1:40:3d:0d:ad:df:47:c3:68:cb:
71:ec:71:8f:fc:cf:f2:a8:6a:1c:68:b2:3b:28:c3:
6b:4f:dc:be:70:4b:74:b8:2d:cf:53:0e:55:95:d0:
10:a6:b1:0d:07:48:e6:5b:6c:8d:0b:ee:37:05:6c:
38:4f:13:a6:f5:9f:8e:67:95:5f:ae:c4:1c:95:b9:
cd:be:c9:37:95:2c:f8:45:26:fd:28:fe:f1:14:73:
65:32:a5:8e:27:56:61:97:5c:eb:a3:2e:96:ee:cf:
96:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:CA:36:1A:6A:F8:80:C3:70:16:30:EE:15:79:F9:77:E7:3E:D8
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:8e:fa:6a:de:a7:51:69:30:18:4d:9b:c8:50:ed:9a:3f:
ca:a2:b7:85:3a:ef:82:66:fb:3f:27:e6:cd:f3:3a:0b:87:8e:
ff:a5:01:ff:49:43:8e:19:2d:fb:3a:45:9d:90:2f:19:f2:7c:
6a:25:aa:4b:84:46:e6:5e:6a:e8:64:d6:fe:fe:81:46:b6:41:
a7:ce:e2:b4:04:94:58:64:86:13:ad:e8:aa:5f:f5:b8:9d:51:
66:9a:19:9a:a1:16:f6:be:92:6d:47:05:23:04:61:b9:29:54:
3d:ef:81:0f:1e:f8:c1:58:57:eb:ba:cb:7a:fd:d1:5e:5b:9b:
72:bf:88:da:76:7b:93:07:1d:5c:d5:13:d2:eb:2f:3e:5b:c4:
fb:86:95:d3:d7:ce:bd:56:a4:06:69:db:06:e2:fd:36:8a:71:
70:0e:e0:ea:df:03:81:6d:58:ab:0f:f8:f7:77:7d:09:e1:9d:
3b:5f:c5:2e:8c:3d:3c:2a:f0:82:bf:57:91:67:5d:48:52:f6:
a3:11:22:a0:e4:4f:b1:ea:fe:54:e3:27:31:7d:c7:dc:0b:e3:
50:26:72:ee:a9:fd:19:fe:60:37:77:68:2e:40:df:69:80:c8:
8f:c8:5e:92:e3:ed:ea:43:08:b2:65:d8:4f:7b:ac:5c:bd:ea:
4d:c8:91:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:43:43 2025 by rpki-client