Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: cf4A9z7JJyqHC4hGRKl9+Nx7SS93FELhxTmTN1De3W4=
Subject key identifier: FC:70:77:DE:2A:F9:CB:11:CC:0C:BB:44:24:73:28:54:15:B0:A2:A6
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 01976C98F39C282190CAB7955AADE4DAE242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 04:00:52 +0000
Manifest this update: Sat 14 Jun 2025 04:00:52 +0000
Manifest next update: Sun 15 Jun 2025 04:00:52 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: ZfjX17FV+tM2lo4WSeBk+Y+C1XDdbE5ExwY8tf7lWZA=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f3:9c:28:21:90:ca:b7:95:5a:ad:e4:da:e2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Jun 14 04:00:52 2025 GMT
Not After : Jun 15 04:00:52 2025 GMT
Subject: CN=fc7077de2af9cb11cc0cbb442473285415b0a2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5b:94:9a:57:e5:d8:59:87:6c:51:df:01:45:
14:10:df:10:2f:98:c9:ff:2c:e7:d3:b5:4d:8d:0f:
27:46:36:8b:45:0b:dd:1f:27:47:fc:0f:ff:17:f0:
f6:5b:22:d2:74:ab:f1:db:ac:15:f3:8d:45:c4:c1:
4e:c6:01:95:93:08:dc:07:23:a4:72:2d:cf:c2:ed:
c9:89:28:97:42:ce:2a:13:8c:9f:19:46:42:01:07:
fb:ae:1c:6f:2e:b2:c1:9d:e6:02:0e:33:61:15:21:
e9:9b:b8:56:6d:07:f1:7a:9c:1e:51:bf:01:de:be:
4f:9b:28:2c:7d:74:6d:a0:f1:8d:b5:78:15:76:2d:
c1:4d:d6:71:47:3b:3c:1f:ba:2b:c0:a3:59:8a:a3:
1f:a3:f8:09:38:79:5a:32:da:d8:52:37:68:88:63:
b9:f8:fb:50:a2:ac:ca:ac:f1:2d:04:d6:f9:d1:77:
4f:e6:87:eb:a6:59:3d:2a:45:c9:2f:a9:b2:7b:e8:
85:11:3d:1d:e9:ba:88:f2:3b:81:82:d0:9c:4c:76:
37:10:ae:03:22:c2:94:d3:1c:b1:26:8f:99:b0:72:
dd:05:89:48:3d:d3:d7:d9:c2:a9:fa:ac:c3:49:3e:
8e:7d:85:83:fa:ac:87:57:9c:d4:37:84:3c:66:83:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:70:77:DE:2A:F9:CB:11:CC:0C:BB:44:24:73:28:54:15:B0:A2:A6
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:a1:de:c4:3a:4e:8d:ac:10:8b:1b:f1:ba:b8:8a:45:9d:
a0:71:da:6a:16:42:9d:70:70:12:e7:77:d6:1e:a0:c7:59:ff:
65:56:44:a0:b2:61:4e:f9:65:03:a8:46:cb:0a:0b:8b:08:b7:
9e:90:7d:56:ac:a6:45:90:4e:91:d5:52:9a:47:4d:db:66:19:
c9:59:a9:bf:79:ea:a2:09:fd:70:c0:9a:75:13:98:c6:0d:b3:
fc:62:c0:0b:48:be:33:46:90:fb:94:b5:95:29:4a:0e:b7:cf:
a2:21:a2:51:41:25:fc:c3:bd:15:fc:c7:4a:e3:c5:5d:95:b0:
49:ef:0e:a8:c1:7b:a2:ec:cd:c6:d5:ec:c3:93:06:2a:f9:d3:
c8:b0:41:dc:e8:9a:f5:80:52:92:f9:3c:b8:f5:11:cf:46:24:
e5:f6:ee:79:ed:55:d2:d4:1a:ad:63:df:8f:7f:78:5e:3f:5a:
0d:2e:52:05:90:ec:cf:ab:a3:43:2b:fb:8d:9b:bf:76:a0:f8:
fe:db:40:c6:00:3e:3d:71:f0:37:a2:5b:51:f6:69:23:9a:b4:
e5:fa:0b:71:a3:23:65:ab:2e:f4:00:1e:45:4b:37:96:4c:10:
55:8c:c1:87:e0:ac:4a:f0:a0:4b:a7:71:32:ed:16:de:e1:c4:
6f:11:44:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:05:50 2025 by rpki-client