
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
File: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json)
Hash identifier: kehJFmBTad4xSrUpqzfeQ0zLb7FWhZ9gI3AKuriopnk=
Subject key identifier: 29:82:97:1F:91:56:A5:E7:AC:A1:78:2C:5B:15:BF:58:D7:71:72:34
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial: 0198A0BABBF83CF11C825E89BEF00D630BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
Manifest number: AC
Signing time: Wed 13 Aug 2025 00:00:48 +0000
Manifest this update: Wed 13 Aug 2025 00:00:48 +0000
Manifest next update: Thu 14 Aug 2025 00:00:48 +0000
Files and hashes: 1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: FJiv+zMv4ei2JLlWNslyx6Y4t92p38z+f4udX7IGi7Y=)
2: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (hash: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:bb:f8:3c:f1:1c:82:5e:89:be:f0:0d:63:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Validity
Not Before: Aug 13 00:00:48 2025 GMT
Not After : Aug 14 00:00:48 2025 GMT
Subject: CN=2982971f9156a5e7aca1782c5b15bf58d7717234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:e0:e8:1b:ed:e2:20:92:6e:c9:06:0f:43:
d6:37:a3:37:d6:e5:0d:c5:2a:7b:e5:cb:7d:03:44:
7c:cc:96:b1:6d:0c:7c:63:3d:1d:1f:4c:ae:6a:96:
ac:b6:a2:f8:79:86:5b:f0:4b:26:09:53:e8:13:b8:
84:0e:66:00:16:65:f3:de:7c:ff:67:3f:e7:76:55:
35:cd:ac:0c:18:a1:be:94:e7:52:36:60:b1:32:f1:
95:50:3c:eb:bc:69:01:6f:0b:86:be:1d:96:b1:cd:
34:bc:94:c6:7a:54:b3:25:96:c9:a5:3f:1c:3e:35:
ee:7d:2f:37:92:32:35:4b:b5:dc:17:af:0e:20:e6:
45:17:d7:71:f5:1f:93:17:4f:f6:7e:a1:40:4c:d2:
f2:77:c3:19:f6:9e:69:b9:3a:cd:61:b2:38:41:1a:
92:dc:c4:6a:4b:6f:b5:31:b3:c6:2f:0e:b8:ff:cb:
df:d6:2c:a9:08:7d:7d:0d:51:02:1c:ec:46:d3:91:
56:32:14:c0:76:c9:9b:a3:e8:2b:a5:f1:08:b5:db:
22:07:f6:02:3d:1c:5e:b3:82:77:13:2d:f7:a2:a0:
a6:2b:9b:74:f8:43:db:e9:bc:d2:5e:a9:6f:cb:16:
01:fc:8b:0e:3e:a7:de:14:34:ee:e6:aa:42:d4:42:
71:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:97:1F:91:56:A5:E7:AC:A1:78:2C:5B:15:BF:58:D7:71:72:34
X509v3 Authority Key Identifier:
keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d2:20:77:b6:85:3a:1e:23:3c:e6:e9:19:a2:3b:2c:97:44:
ea:fa:4f:1c:d9:9e:0d:69:2a:a3:e1:88:e1:31:f6:7d:6c:e6:
f9:7d:9a:67:82:fb:76:d0:fe:a3:24:f3:61:ec:16:e3:52:66:
63:54:b1:6c:ce:07:e8:03:6c:ce:de:59:25:58:27:36:d2:aa:
8c:65:fd:90:9f:e8:f5:82:16:1e:b0:4b:16:d2:51:d5:fa:b0:
d1:7d:5d:f4:84:e9:d0:92:72:51:c5:4c:c8:80:d7:64:fc:39:
bb:9c:50:a5:3e:0f:9b:61:20:d5:a5:3e:23:34:b5:b3:c5:70:
dc:a4:8b:b4:e3:a9:70:c9:85:a7:99:07:ff:64:dc:dd:d8:d7:
b8:f6:d7:0e:e8:b3:7e:2e:5f:96:3a:85:4e:78:63:eb:c8:2e:
f9:bc:0c:2d:3d:c4:9e:d4:6b:20:ae:a1:76:12:55:85:5f:4c:
db:be:9c:45:3b:e0:4d:c5:97:f2:18:73:ee:4a:92:79:5e:28:
64:62:64:74:f1:8d:f6:60:74:21:e2:f3:23:14:27:8c:73:f9:
c3:cd:f7:9f:4e:7f:a5:54:81:26:39:aa:4e:fa:a4:c3:aa:a6:
8b:8f:e2:11:6b:bb:c2:2b:93:be:44:9a:38:b4:1e:69:ed:53:
af:97:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:41 2025 by rpki-client