Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: 5H/Zhgo4rcTBJUcciDJ+I+JObk2QfQZOQ2Zuz35JqJc=
Subject key identifier: EA:8B:96:AE:4A:BD:D2:D8:08:B4:FB:28:78:1D:FC:B8:78:A6:2C:2B
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 019769CEECCAD983596663E20DD485B12284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 1299
Signing time: Fri 13 Jun 2025 15:00:58 +0000
Manifest this update: Fri 13 Jun 2025 15:00:58 +0000
Manifest next update: Sat 14 Jun 2025 15:00:58 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: HrW1utinp55lT7Z1RktI3sOxRb2cABcYFGgd36Tk8bE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:ec:ca:d9:83:59:66:63:e2:0d:d4:85:b1:22:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Jun 13 15:00:58 2025 GMT
Not After : Jun 14 15:00:58 2025 GMT
Subject: CN=ea8b96ae4abdd2d808b4fb28781dfcb878a62c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:b4:a7:ca:96:14:1c:5c:4a:ad:40:09:83:
3c:11:3f:bf:e5:6a:45:8e:51:6d:83:44:ba:03:b0:
14:0b:bc:7e:83:e3:69:76:7c:42:e0:40:f4:2b:b9:
0b:c9:fb:9b:14:f6:2e:e4:e3:d1:20:64:04:7f:24:
8d:9f:53:a2:5a:4a:b8:71:99:11:22:bd:bd:f2:11:
87:d5:d7:18:46:f4:df:1a:34:b8:52:00:de:ce:d9:
a6:99:49:97:c9:c4:c6:32:53:88:95:ba:75:f3:cf:
f5:02:15:04:70:db:f8:5c:31:8a:5c:9e:3d:44:94:
18:62:5e:4a:07:e1:15:82:25:a9:d4:da:75:de:38:
9d:c0:a7:9d:f3:9f:fc:4c:c6:75:87:df:60:2d:dc:
cb:c8:7a:26:46:3e:2e:0d:e5:d3:d1:ca:4f:38:6d:
26:5d:2f:57:69:4f:f8:46:8b:20:5b:5c:36:e4:bc:
b4:04:4f:23:7f:43:0c:c5:15:fc:f0:11:19:71:41:
82:04:52:e6:58:d3:97:10:f8:c3:ff:70:fb:0c:0f:
31:4d:c7:e3:f3:9e:a7:a1:f6:bc:c6:a7:70:98:10:
a6:31:03:80:d4:7a:ca:03:92:5b:d5:89:5b:e0:58:
d8:73:c8:93:24:5d:e1:a1:e3:b8:5b:22:2a:66:37:
7e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8B:96:AE:4A:BD:D2:D8:08:B4:FB:28:78:1D:FC:B8:78:A6:2C:2B
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:05:2b:31:4c:ee:5a:51:8f:72:2a:71:bb:61:56:c1:7b:2c:
f9:a9:af:58:f9:46:b8:8e:8e:3e:77:50:f0:99:77:43:5a:f5:
09:98:de:bc:37:56:e4:cb:4a:6b:9d:cc:e0:b4:03:75:29:af:
5e:93:16:52:e0:f6:73:d4:a1:36:1d:c8:75:18:fc:81:b8:cf:
cc:56:9b:5e:9b:d9:34:c3:3a:d5:c6:38:4c:29:af:a7:39:9f:
2a:5c:f0:4c:8f:f1:6f:94:be:1c:2c:3b:c6:95:3b:53:13:2c:
af:b9:4c:c5:8e:e2:cd:04:78:55:fd:f5:e4:67:77:b9:7e:24:
05:a9:f3:fa:13:86:82:a2:4e:82:df:83:87:6e:d3:db:9f:70:
5e:64:34:82:a6:b8:d1:e3:dd:dc:17:1c:3c:c8:a5:c8:c2:70:
16:94:ce:25:b1:bb:12:31:15:e9:bf:dd:82:ca:1c:74:96:4a:
4d:56:71:48:53:b7:96:c8:28:de:12:0d:33:08:4a:2c:4e:f6:
9c:7a:40:c6:7b:38:80:08:4a:9f:46:a8:fa:4f:d2:56:42:1f:
2d:53:ee:d4:30:b0:38:a1:37:d9:c3:a5:c3:de:c9:2e:1b:72:
1f:26:71:e4:17:87:ca:28:06:fa:0f:1b:00:a3:4f:3f:b3:86:
67:12:e8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:28:21 2025 by rpki-client