Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: NKsXn4DKns9Y6OFQDlSGnFr6OdUR/8fJ7shW8gARHTM=
Subject key identifier: 8C:7E:5C:6F:40:C6:EE:6F:29:C3:55:46:A6:FB:51:D9:AF:E6:62:40
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 01976C99299750A27951E6ACBB831051FC40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0FC5
Signing time: Sat 14 Jun 2025 04:01:06 +0000
Manifest this update: Sat 14 Jun 2025 04:01:06 +0000
Manifest next update: Sun 15 Jun 2025 04:01:06 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: vBQgb4A5FxBLAw+Fhq+0ov7rX/HxqLbWAyVS7Hx/hu4=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:29:97:50:a2:79:51:e6:ac:bb:83:10:51:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jun 14 04:01:06 2025 GMT
Not After : Jun 15 04:01:06 2025 GMT
Subject: CN=8c7e5c6f40c6ee6f29c35546a6fb51d9afe66240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:47:d6:88:ce:6e:60:59:8a:99:45:e6:50:
2d:ae:18:92:24:1b:13:b3:cb:83:eb:5e:34:ef:c6:
d7:96:62:a5:3c:53:de:66:0a:36:a6:c4:39:5f:68:
20:f3:15:4e:ec:93:27:2a:eb:8f:a7:9c:49:88:5f:
14:e9:8c:08:52:db:2e:51:d3:90:f3:a9:00:fd:67:
00:7a:50:93:26:29:a3:38:eb:c2:2b:da:e7:5e:6e:
a2:80:39:36:bb:8b:b8:af:0d:61:d9:13:62:1a:02:
5d:ea:41:cc:1c:a1:c5:e9:d4:20:6d:80:04:dd:9b:
55:7f:60:7d:38:5c:ec:44:39:73:ac:b8:e7:76:a7:
d2:44:22:ef:86:67:0e:84:6d:ce:16:ae:41:18:b1:
fb:3c:86:81:33:5a:aa:f9:45:32:c4:e9:22:1c:31:
e7:ef:7d:1c:7d:ed:54:f8:4f:0f:17:04:89:3e:bd:
51:fe:51:25:5a:e5:5e:bc:b7:39:72:c8:d1:af:1c:
08:83:f5:25:64:9a:f1:ed:1f:8d:0c:d4:d5:55:bd:
15:09:5c:b4:62:77:d5:c3:83:0c:fa:f4:82:b5:1a:
80:0b:e7:e5:05:1f:74:88:ed:5d:0b:84:9e:01:56:
74:85:be:57:0c:20:26:e0:76:f4:42:18:92:91:01:
31:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:5C:6F:40:C6:EE:6F:29:C3:55:46:A6:FB:51:D9:AF:E6:62:40
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3f:61:1f:27:48:5b:0e:5b:a1:67:5d:47:a3:64:04:8f:b5:
9f:9f:02:28:4c:51:79:6e:47:89:40:a7:84:8a:99:08:66:2e:
e7:c6:b5:f4:c3:a3:d0:85:c6:d4:2f:14:eb:0f:5e:80:20:dc:
13:86:02:71:ba:b3:51:1e:2f:c9:99:35:f2:e7:e5:c2:4c:42:
cf:3f:ff:82:cf:b2:8a:fd:21:60:1e:d8:f7:54:f2:53:06:05:
be:12:a5:00:d7:8b:c3:a9:d2:a7:61:84:75:fd:28:51:e0:d1:
66:e3:ca:27:e0:aa:2d:9d:55:25:2f:c8:bf:94:12:53:d4:bd:
74:1d:c4:26:d9:82:07:84:e7:ea:46:96:69:3b:6e:5a:11:fd:
eb:41:0d:00:74:9a:34:a7:04:ee:38:1d:0a:99:33:fb:ae:cd:
0e:9a:b6:fa:11:ad:43:64:90:d4:9f:cc:af:a4:a9:41:35:b8:
09:12:21:da:5e:e9:14:1a:3f:eb:41:ac:3c:fa:17:ff:8d:34:
61:1f:ed:22:de:8d:97:f4:13:dd:fe:1a:4c:8a:a6:c2:5b:e4:
8d:95:89:e4:1e:fc:34:4b:4d:c3:9c:97:56:ff:bc:2d:8b:87:
e4:6d:e9:76:78:d9:08:04:bc:1a:8b:f1:d3:b1:7d:f0:84:b6:
8e:06:ae:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:36:33 2025 by rpki-client