Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File: pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier: YRQfm681VsWMaDKdcherhyBaZP7dp1Cw5quO91D/SQ8=
Subject key identifier: 3A:44:26:23:9B:BC:C6:97:D3:7A:72:A7:48:DB:23:0C:89:19:EC:84
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 019777C1AEE7CCB0C21F6FA3F0BF8FC6E32E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number: 0C29
Signing time: Mon 16 Jun 2025 08:01:11 +0000
Manifest this update: Mon 16 Jun 2025 08:01:11 +0000
Manifest next update: Tue 17 Jun 2025 08:01:11 +0000
Files and hashes: 1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: YBs7SSWU9tIIsiqPIibGJ9J5uHA1WbxEJ/pFYJTKc5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:ae:e7:cc:b0:c2:1f:6f:a3:f0:bf:8f:c6:e3:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Jun 16 08:01:11 2025 GMT
Not After : Jun 17 08:01:11 2025 GMT
Subject: CN=3a4426239bbcc697d37a72a748db230c8919ec84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c6:90:8f:6e:7f:86:c8:13:35:3d:70:34:f1:
23:25:53:6e:12:37:3d:74:27:3a:ba:4d:85:57:65:
e3:ed:06:9c:e4:34:f5:e0:79:29:6a:d5:02:44:c2:
6b:30:99:f6:d3:f9:85:dc:00:8b:b4:f7:a5:e9:b7:
0d:91:cc:35:85:2c:38:81:68:e7:d4:f0:40:ea:ff:
84:5f:9c:49:4e:04:96:53:bc:cc:54:22:02:0c:fa:
7e:b9:47:3a:fb:50:c3:49:85:f6:5e:05:db:2c:f6:
7b:55:73:e5:f6:85:39:1f:1b:0c:8d:6f:c1:3f:18:
b4:e7:34:60:f5:94:ab:04:30:09:6e:07:cf:83:3b:
f3:6e:86:ef:4f:3c:21:1f:48:d4:e5:74:b7:57:cf:
72:9b:61:ac:70:8d:79:be:8c:28:4c:17:a6:1f:89:
98:60:a3:74:87:be:be:59:59:a7:a3:e1:40:a6:65:
fc:cb:55:24:2a:5b:42:47:66:a5:a4:37:b0:27:1f:
e9:2e:3b:a0:10:ec:ac:db:6d:0b:c3:65:5b:6b:b5:
67:9a:eb:60:1f:19:92:cc:f8:d1:01:86:d6:8a:59:
4b:b4:6e:ab:f6:de:e7:1b:e0:f9:5c:02:30:04:17:
c8:e7:cd:0d:da:ad:1c:ed:26:64:05:6c:76:3d:f0:
98:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:44:26:23:9B:BC:C6:97:D3:7A:72:A7:48:DB:23:0C:89:19:EC:84
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:7e:b0:54:8a:49:17:0b:15:a9:a4:6e:bc:05:31:2d:e1:62:
8b:47:5b:b0:3e:44:8b:47:cd:91:fd:f2:36:9c:f3:72:43:17:
c5:38:50:3b:c8:58:61:29:70:09:94:06:4e:b5:5a:22:5f:86:
33:63:01:11:a6:c9:14:13:6a:a1:42:21:ff:4b:82:89:e3:ee:
4f:98:ae:61:65:f2:d9:50:0f:dd:40:49:92:df:9c:dc:dd:63:
c2:73:37:5a:7d:93:2d:f9:33:9f:1c:72:d6:02:ec:7d:81:7a:
8f:68:4d:3f:70:9a:82:8e:2f:88:b8:c2:b6:2c:da:ef:1c:31:
46:4d:90:ab:09:67:be:47:fd:36:0d:b4:85:db:38:02:ae:2d:
ea:fd:d4:9f:1e:a9:c6:98:3a:89:9b:f8:e7:ab:85:ad:2f:50:
ff:c7:8a:91:83:9d:8a:f9:f9:e7:17:c0:31:02:45:43:3c:ff:
48:fc:70:b7:17:8d:5e:1a:f4:5e:bf:9d:c0:0d:f6:01:64:7b:
28:11:32:40:93:14:96:ad:f2:39:d6:bd:29:95:9e:93:70:ec:
51:3f:54:a8:f1:50:40:5a:d2:17:69:aa:cd:be:82:ca:44:cb:
88:2c:d2:67:9f:12:c1:a4:75:10:38:ac:1f:d6:e2:05:f0:bd:
6d:7b:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:42:11 2025 by rpki-client