Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: OLTZ7NhtK3vBgVHShlKB1Xm2Ah5809HERJa7rZRLpJw=
Subject key identifier: 6E:92:4E:D0:01:D4:DA:94:2C:85:79:19:A8:9D:EC:49:8F:45:2E:73
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 01967679D6D703E38F026198F9BCB1D68626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 121B
Signing time: Sun 27 Apr 2025 09:00:18 +0000
Manifest this update: Sun 27 Apr 2025 09:00:18 +0000
Manifest next update: Mon 28 Apr 2025 09:00:18 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: p2lE4wX1DtJ0tFOXzzCM5lfkJsnPXwdGuPZ7IeEXWLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:d6:d7:03:e3:8f:02:61:98:f9:bc:b1:d6:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Apr 27 09:00:18 2025 GMT
Not After : Apr 28 09:00:18 2025 GMT
Subject: CN=6e924ed001d4da942c857919a89dec498f452e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:11:9f:d5:8f:b8:f2:58:f0:9d:07:11:4c:
bf:b7:2e:51:ae:3f:af:84:70:af:06:ff:d2:59:e4:
87:6e:3d:4b:d6:b0:91:d7:1c:d0:48:03:fa:63:5d:
bd:a5:29:85:79:bb:db:8f:62:f2:4a:25:a6:11:ce:
1a:f5:c3:2e:03:9d:67:03:6f:fe:68:89:99:f2:60:
7a:79:78:61:47:d1:24:6f:71:0b:bd:49:7c:67:82:
22:dc:bf:07:90:a5:15:60:8e:c6:0c:e9:e9:91:47:
f0:88:44:f9:c5:d5:df:95:18:a8:6f:d3:96:59:42:
15:2b:b7:28:90:73:c6:61:e6:08:03:87:0d:fb:1e:
88:1c:f1:11:06:74:f8:59:2c:15:ba:e2:fb:74:09:
3b:6b:2c:c8:4a:d7:d9:dc:c8:c8:62:9b:d9:63:d9:
40:c4:b3:2e:e9:52:17:10:0d:67:58:8e:9c:58:34:
f8:68:3a:6d:bc:fc:57:21:39:72:a2:4a:8e:71:cb:
70:66:f2:49:be:ad:e1:e7:ea:cb:33:e1:72:49:d4:
9b:77:b3:6d:dd:ec:7d:10:7b:94:b7:49:5a:fd:71:
20:9f:d9:11:80:4e:7e:f0:f0:72:65:b8:69:eb:d3:
3b:c4:3b:95:3a:19:a7:2b:3f:dd:ce:c0:35:6a:52:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:4E:D0:01:D4:DA:94:2C:85:79:19:A8:9D:EC:49:8F:45:2E:73
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d2:06:e4:dc:94:e6:3a:f9:2b:f4:07:3c:f9:20:4e:70:e9:
8f:5a:66:e4:57:22:48:ca:3f:3b:55:a8:cb:a8:3b:28:1e:72:
dd:5a:fe:07:f6:48:81:66:a8:aa:f9:d5:34:71:60:7c:ce:7c:
fb:b0:24:67:01:43:35:47:d3:e7:de:f3:d5:4f:12:fc:79:70:
a9:9f:5e:0c:9a:5a:c2:d2:27:55:43:7a:9b:99:8c:21:37:53:
f0:32:a6:89:18:9e:86:f8:3f:47:4d:30:26:3f:86:46:7d:3b:
d1:f0:eb:1b:79:4b:72:a7:c5:ff:90:c6:0d:bc:84:8c:5c:cb:
c3:16:ea:f2:6f:08:4a:66:70:8a:dc:e6:3a:45:47:f0:5a:c4:
b7:2e:7a:cf:9a:47:86:dd:03:ee:1f:2b:dd:a3:3a:26:ae:7e:
21:e7:7c:6c:3a:79:5f:f6:66:90:e4:81:7a:fe:f7:f0:fd:b2:
2d:7c:ca:36:5c:3d:ec:45:40:d1:c1:2d:a3:3b:15:50:44:3e:
dd:48:8b:17:56:8c:3e:c1:b3:56:8e:f7:f5:bc:41:0f:48:f0:
63:4f:e2:1a:ed:1d:a3:06:a3:e4:8d:71:81:af:67:51:80:86:
27:02:7f:3a:d5:36:79:6b:b7:4b:7b:7f:03:99:44:8f:81:e9:
5a:f0:df:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2edbXA+OPAmGY+byx1oYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTJkNjg1MGJiYzQ3MjA1NTdhOTE3NGRjYmM5NzYwYWVj
YzBiMWEwHhcNMjUwNDI3MDkwMDE4WhcNMjUwNDI4MDkwMDE4WjAzMTEwLwYDVQQD
Eyg2ZTkyNGVkMDAxZDRkYTk0MmM4NTc5MTlhODlkZWM0OThmNDUyZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokgRn9WPuPJY8J0HEUy/ty5Rrj+v
hHCvBv/SWeSHbj1L1rCR1xzQSAP6Y129pSmFebvbj2LySiWmEc4a9cMuA51nA2/+
aImZ8mB6eXhhR9Ekb3ELvUl8Z4Ii3L8HkKUVYI7GDOnpkUfwiET5xdXflRiob9OW
WUIVK7cokHPGYeYIA4cN+x6IHPERBnT4WSwVuuL7dAk7ayzIStfZ3MjIYpvZY9lA
xLMu6VIXEA1nWI6cWDT4aDptvPxXITlyokqOcctwZvJJvq3h5+rLM+FySdSbd7Nt
3ex9EHuUt0la/XEgn9kRgE5+8PByZbhp69M7xDuVOhmnKz/dzsA1alKtUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6STtAB1NqULIV5Gaid7EmPRS5zMB8GA1UdIwQY
MBaAFD+i1oULvEcgVXqRdNy8l2CuzAsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQt
OWM2NWQxODhlNTRlLzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQtOWM2NWQxODhlNTRl
LzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdIG5NyU
5jr5K/QHPPkgTnDpj1pm5FciSMo/O1Woy6g7KB5y3Vr+B/ZIgWaoqvnVNHFgfM58
+7AkZwFDNUfT597z1U8S/HlwqZ9eDJpawtInVUN6m5mMITdT8DKmiRiehvg/R00w
Jj+GRn070fDrG3lLcqfF/5DGDbyEjFzLwxbq8m8ISmZwitzmOkVH8FrEty56z5pH
ht0D7h8r3aM6Jq5+Ied8bDp5X/ZmkOSBev738P2yLXzKNlw97EVA0cEtozsVUEQ+
3UiLF1aMPsGzVo739bxBD0jwY0/iGu0dowaj5I1xga9nUYCGJwJ/OtU2eWu3S3t/
A5lEj4HpWvDfzQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:12:53 2025 by rpki-client