Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: Y2C3Fg4/tjSlsyHcdTDWj/dCrpRen+e99HP+dvQ+NvU=
Subject key identifier: 39:96:91:23:40:38:8F:8F:4E:3D:AE:1E:51:A7:A3:18:A1:E4:52:1E
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 019768F2EB5C79CE16ADB9475CB4BDE05AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 0F97
Signing time: Fri 13 Jun 2025 11:00:39 +0000
Manifest this update: Fri 13 Jun 2025 11:00:39 +0000
Manifest next update: Sat 14 Jun 2025 11:00:39 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: 4NupfLzGPaxkxBge/hhv3/tOmZD8p6JGMlRiQl7ZKYQ=)
2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:eb:5c:79:ce:16:ad:b9:47:5c:b4:bd:e0:5a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Jun 13 11:00:39 2025 GMT
Not After : Jun 14 11:00:39 2025 GMT
Subject: CN=3996912340388f8f4e3dae1e51a7a318a1e4521e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:52:65:fc:00:74:18:d4:59:e2:54:d7:f9:
84:cc:ab:5d:1a:be:12:64:c6:b7:2e:46:85:35:61:
35:1d:0f:0f:ea:58:72:17:c5:a2:dc:2b:12:9e:e5:
3c:9e:98:17:e9:f0:c5:98:e9:11:0a:90:5d:b2:ea:
77:8d:96:cd:a5:e5:66:3e:74:47:e5:01:60:4b:a6:
ec:af:9e:2e:fa:e6:93:08:6d:27:b6:8b:2e:ff:68:
65:f7:10:25:6d:3f:89:3b:18:a0:3e:4e:61:a8:ba:
69:03:b4:39:19:1b:f3:4d:35:41:d8:02:b5:7f:5e:
49:4a:eb:3a:20:1c:1f:cb:fb:84:3e:ab:63:ef:6f:
7f:f7:e6:cc:c5:b4:ed:1d:91:10:ab:62:86:ea:dd:
dd:c2:43:d9:1d:50:d1:1c:0f:43:8c:51:a7:89:55:
ee:ce:53:bc:a4:71:22:eb:f1:87:d7:4c:c1:84:8b:
9d:92:dd:a6:70:31:5a:40:d4:3b:2b:c4:ef:cf:2d:
36:18:94:87:64:40:f0:87:f9:42:80:28:04:3c:6c:
14:ad:47:e0:0b:ff:37:11:39:d5:10:81:4a:bf:19:
56:d5:04:2f:87:ea:68:2b:b7:e9:20:69:ce:43:90:
8b:c8:c6:ae:e6:a5:e3:f0:c1:ba:cf:f9:17:65:13:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:91:23:40:38:8F:8F:4E:3D:AE:1E:51:A7:A3:18:A1:E4:52:1E
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b8:31:f1:92:f9:4a:55:73:5f:fe:17:38:e1:8c:0b:43:c2:
9b:02:58:46:3b:d9:c6:3c:17:f9:dc:6b:71:0d:7b:9b:b4:5f:
2c:89:91:14:cd:8c:b2:3b:f9:a3:13:c1:43:73:b1:95:0d:f6:
95:75:7f:a5:3b:91:bc:c4:8e:d0:d1:71:ca:c2:3b:cd:91:1a:
19:2a:f5:5f:0e:40:2b:ef:65:bb:6d:44:26:92:c4:f6:d1:ca:
4b:9d:95:e8:41:a8:e5:9d:8b:ab:de:de:65:e0:e4:11:d0:e2:
f3:39:48:31:46:1b:05:f5:ac:c0:9f:32:64:e9:73:1b:20:44:
32:e8:be:78:b8:d7:c1:c8:53:b9:4a:01:de:77:f1:de:76:e3:
49:fe:11:bd:93:54:5f:84:6c:6a:84:cf:26:d6:bc:07:2d:a6:
d4:a1:18:1c:88:dc:74:ea:78:ce:fe:9b:cf:9d:38:c9:b7:94:
a9:cb:08:2c:f9:58:a7:27:96:84:c8:80:7d:be:e1:1b:8f:81:
52:56:4c:87:3d:4d:53:57:3c:dd:38:22:c2:b9:19:b6:88:57:
06:16:c8:13:4c:6c:65:ad:c6:dd:50:73:dd:8b:a4:e8:d4:a6:
67:71:d5:9e:dd:55:00:f2:9f:f0:5d:a0:1e:81:14:3d:c5:e2:
34:9d:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:07 2025 by rpki-client