Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: OUf1NBGkLuiwauOImTW9H24Um80K/LRoEj0deW+bO/s=
Subject key identifier: AE:01:80:95:1E:B2:29:6A:60:8B:F6:0F:94:DD:6D:59:41:F1:43:65
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 01977075776C2D914DBE91ADE44295438647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 22:00:35 +0000
Manifest this update: Sat 14 Jun 2025 22:00:35 +0000
Manifest next update: Sun 15 Jun 2025 22:00:35 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: ULBgS8xM3nAPxTP710Y0vq5mJP0bqOYpiFdVrm2v+bo=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:77:6c:2d:91:4d:be:91:ad:e4:42:95:43:86:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Jun 14 22:00:35 2025 GMT
Not After : Jun 15 22:00:35 2025 GMT
Subject: CN=ae0180951eb2296a608bf60f94dd6d5941f14365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:d4:5f:a1:3e:5c:a3:c2:e8:ce:db:84:a5:
6a:d7:50:22:40:8c:91:87:29:c1:22:36:ed:22:be:
da:f2:74:42:3e:67:69:68:05:8c:1c:0e:2e:f3:2d:
9a:bc:5f:b1:f0:07:bd:64:60:30:af:b6:22:cd:20:
1f:22:bd:bc:e9:56:cd:98:c3:9d:cf:6a:8a:9d:8e:
38:2a:8d:eb:62:7a:08:52:7b:5f:7a:d7:66:cd:72:
b9:8a:ff:22:d6:a3:67:8c:54:2e:45:c4:52:3a:06:
25:10:5d:e0:42:6d:9d:e6:bf:cb:54:79:88:55:98:
72:76:43:65:a9:f0:53:af:7e:2c:a1:90:ea:03:d7:
4e:48:db:43:35:7a:7d:b8:fc:c1:ce:27:b9:f2:b4:
aa:17:15:3c:a2:93:d1:77:8f:49:10:63:38:d6:f5:
98:57:be:da:76:d8:80:af:70:f2:53:98:24:ca:1e:
a2:de:09:4e:61:16:90:f8:c7:a5:83:92:d5:57:0c:
3f:61:0f:fc:d0:eb:90:5a:c4:c1:ee:8e:28:c0:22:
5f:bc:82:24:55:8a:f1:c1:af:f4:4f:04:42:52:39:
dd:d4:17:96:d4:a5:92:3c:14:d9:0b:81:ed:77:06:
b0:fc:00:a8:d7:9d:c4:6e:34:98:72:ae:ce:20:2a:
15:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:01:80:95:1E:B2:29:6A:60:8B:F6:0F:94:DD:6D:59:41:F1:43:65
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:27:a4:4e:d6:32:b0:4d:da:40:41:e7:4f:c4:e3:c1:06:6f:
7c:39:eb:b0:6b:46:28:2f:46:72:58:60:02:6e:aa:cf:0a:53:
de:87:b8:17:8a:51:2c:57:30:72:54:34:34:1b:f9:b8:a9:6b:
fb:9a:ea:29:2a:aa:87:75:16:1c:34:3b:5c:e9:02:24:6b:08:
33:e8:c4:99:11:52:6d:8d:b8:e3:d3:79:8c:c8:e7:63:bc:a8:
2e:02:c1:53:1b:35:e3:b5:2a:ac:71:c2:33:15:db:cd:6f:e9:
20:0c:42:01:58:c1:27:52:31:ee:92:f8:26:37:5f:81:0c:29:
c0:01:50:fe:19:e3:0d:d2:10:c3:29:60:17:0e:69:9f:a5:6a:
fd:9f:cb:f6:c5:2f:54:54:63:c8:16:e1:d9:d0:cd:2b:76:5c:
2d:7d:54:5e:a2:bc:03:9c:62:8b:7a:0e:11:d1:b6:db:d1:6c:
62:6c:d1:72:47:01:d7:f8:bf:b2:32:c7:31:ce:be:f8:bd:45:
90:e2:77:a9:a7:4c:96:03:83:2d:58:80:54:a5:14:4b:14:96:
2d:21:ad:fa:3d:fc:f8:dc:3c:ad:b4:02:aa:3e:16:54:ad:bb:
92:6a:c9:b6:c1:f7:f8:d5:36:cb:d2:f3:15:1d:9c:29:76:1c:
f6:9e:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:05:10 2025 by rpki-client