Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: G1CCcQEyQvxxUDvEsK/nh4mNhw2PVCpCNqsFf+HC7Ek=
Subject key identifier: 07:57:CC:31:8F:99:7E:F8:AE:24:5E:A2:0E:B4:E1:2D:94:2F:76:45
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 01987DF8618F35DBE40BE4E759E457996FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 0666
Signing time: Wed 06 Aug 2025 06:01:26 +0000
Manifest this update: Wed 06 Aug 2025 06:01:26 +0000
Manifest next update: Thu 07 Aug 2025 06:01:26 +0000
Files and hashes: 1: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: uzsDdwNoP98XINiP13lLGo32+djKcq4EzDBZa/FK3SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:61:8f:35:db:e4:0b:e4:e7:59:e4:57:99:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Aug 6 06:01:26 2025 GMT
Not After : Aug 7 06:01:26 2025 GMT
Subject: CN=0757cc318f997ef8ae245ea20eb4e12d942f7645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:f3:3e:cb:44:b0:ec:59:93:3f:04:fc:e6:
87:a3:eb:6e:10:10:3d:8b:66:af:8f:dd:06:4c:56:
60:c9:b1:91:47:6e:42:96:b6:4e:92:bf:d2:93:95:
9b:19:93:de:37:4b:12:f8:05:b0:ca:2c:68:8c:6b:
2a:cd:02:29:53:20:6e:13:27:7e:60:87:70:88:51:
8e:6b:1a:49:c8:b1:d6:61:1e:96:8d:fe:57:1a:74:
39:b5:5e:1e:54:f3:2d:df:b1:90:76:55:e7:9d:56:
b2:77:aa:4e:75:30:05:71:cf:3c:0b:b7:f2:1f:08:
8e:7e:30:ed:dc:7e:b8:b4:c3:0c:22:ab:f4:37:47:
9d:8f:26:50:e2:b6:8e:63:2c:4a:e1:c6:c9:17:a9:
e0:3b:ad:be:49:3d:d7:b8:c6:7b:12:19:e5:d2:fe:
66:02:04:f0:25:b0:c5:62:01:55:f2:e1:7e:4e:66:
69:3e:47:3f:26:89:00:a4:cf:2e:50:2c:99:5a:6f:
90:28:f7:60:d0:f7:62:7d:00:bd:62:57:4b:fb:aa:
4a:cd:86:9f:17:20:a4:96:8d:35:d6:9a:69:fc:b4:
ed:7c:09:1c:cc:e0:d0:3d:f8:56:48:50:94:d8:c7:
52:ec:2d:98:8f:50:e5:f0:2f:d8:d9:ba:ec:b2:d8:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:CC:31:8F:99:7E:F8:AE:24:5E:A2:0E:B4:E1:2D:94:2F:76:45
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cb:db:06:de:3c:e3:dc:cf:8b:1b:4d:01:c7:a2:92:0c:54:
1f:45:29:1b:eb:e0:8c:9d:a4:32:f8:e6:c9:32:d4:89:11:51:
31:a7:8e:85:ee:37:84:87:ca:b9:cc:02:3c:df:bd:75:6d:cf:
19:bd:dc:ac:74:36:ba:47:2f:5f:54:42:a6:78:76:8e:34:30:
06:a6:5c:c2:d9:1d:fd:ee:e8:79:6c:b4:67:38:c1:d4:de:15:
78:50:fb:68:d5:14:28:c0:00:e4:11:71:75:e5:d9:ce:b5:c2:
2f:57:5f:52:81:57:08:0e:2a:c0:e1:da:0b:2e:73:30:28:cf:
77:e0:c2:cb:6b:14:ea:97:66:96:43:98:a9:36:57:34:2f:db:
8b:08:c8:52:2c:00:ce:1f:d1:52:1a:3d:fd:47:c7:fe:1e:2c:
d8:9b:70:0a:7c:0d:d2:11:16:e5:ca:30:bf:6f:b9:a0:f3:00:
69:62:ad:54:30:31:37:b5:ec:5d:0e:05:67:a9:03:b1:7a:a5:
90:5c:c5:6a:9c:6b:11:7d:f2:a7:a4:9c:fc:b6:b0:ce:f9:58:
d4:9b:ae:09:bf:12:f6:7a:df:d0:93:85:70:fe:91:cc:21:6b:
4b:bd:2c:19:dc:72:25:c8:60:7b:89:4d:b9:eb:46:bc:dd:d4:
f6:79:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:44:59 2025 by rpki-client