Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: /DOE90F6PMfZpc23movpMJU70+NyHT+rkSyecC+8Ens=
Subject key identifier: 7C:5A:4B:52:B1:28:AF:BD:6E:5E:D0:D2:42:5F:8A:D0:AB:1E:4A:94
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 0197B8FCBDDA1E9261CD7CC90642C1B54F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 14C2
Signing time: Sun 29 Jun 2025 00:01:00 +0000
Manifest this update: Sun 29 Jun 2025 00:01:00 +0000
Manifest next update: Mon 30 Jun 2025 00:01:00 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: 4s9324Q4Ns/Gnm02tL+pBgjvzAFq8x5SLuezjeUFxM0=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:bd:da:1e:92:61:cd:7c:c9:06:42:c1:b5:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Jun 29 00:01:00 2025 GMT
Not After : Jun 30 00:01:00 2025 GMT
Subject: CN=7c5a4b52b128afbd6e5ed0d2425f8ad0ab1e4a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:59:68:b3:7d:5f:e6:ec:8c:bb:e3:8d:9d:67:
a0:02:84:b6:60:a0:38:45:02:ee:7c:92:36:be:e5:
cc:40:26:75:7f:02:77:08:94:8c:5f:d4:61:48:2b:
ef:34:5b:bc:ca:18:2e:e3:5a:03:63:4f:13:e2:ec:
2d:53:a1:b4:40:4f:89:97:36:32:c5:1c:83:f3:1b:
06:8b:04:af:fd:9d:1c:59:3d:ce:d0:28:0e:89:79:
6a:34:33:8b:de:42:4f:79:ef:76:bc:93:09:7b:ce:
2f:d6:a1:f3:a7:a2:36:c6:82:45:fe:1f:c9:d0:ff:
04:6a:2f:a7:f7:c1:a0:f0:68:b2:b5:ee:02:87:14:
b4:09:80:39:3c:78:90:f9:e3:7f:7f:0e:2c:44:49:
f8:cc:54:af:b1:48:da:47:45:e4:fe:2f:35:3d:d7:
1a:16:a2:40:0a:a7:07:69:80:a3:c0:99:8e:2b:8f:
e0:f9:ec:60:aa:98:4d:c6:a0:8c:b5:a9:d6:21:4c:
17:76:66:a5:75:a3:34:d3:ed:4b:87:2f:88:9d:b6:
a7:1e:dd:cf:77:1b:14:91:d2:c6:ef:d5:ce:cd:76:
c7:d9:1b:0c:d5:f2:ac:9d:60:31:b7:f5:14:69:14:
97:58:b9:f7:cd:dd:e7:69:43:0e:08:34:5d:93:83:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:4B:52:B1:28:AF:BD:6E:5E:D0:D2:42:5F:8A:D0:AB:1E:4A:94
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1f:23:07:ea:74:23:0f:ed:82:af:97:d9:02:7b:55:6c:83:
2f:90:11:78:8a:e0:c8:88:94:34:3b:ff:bf:b0:48:f9:56:f5:
8f:77:a0:1f:90:c0:1f:2b:97:89:a6:ef:b1:91:89:bf:89:78:
aa:e6:57:e6:ab:8b:86:10:0d:23:90:33:cc:b5:74:72:eb:f8:
fe:b5:b2:3c:56:62:2d:42:26:e5:e6:6a:7c:e7:43:1a:d3:90:
d5:d0:15:8a:f5:dc:0a:d7:5a:cc:31:6f:37:17:12:e8:99:00:
9e:2e:6f:38:c0:7a:cb:c3:be:54:0b:97:af:c8:98:91:6b:c2:
cc:a8:bb:f4:86:46:02:47:fe:f6:11:3e:36:13:d4:23:26:8f:
29:63:3a:2e:52:f0:42:e7:b7:ad:60:51:8f:d1:5f:6d:db:e1:
c9:0f:73:99:9b:4d:95:fb:34:14:ef:f8:dd:04:5d:58:8e:a7:
62:39:58:a9:d1:77:46:fc:93:5a:d9:b1:80:dc:67:08:b9:c5:
72:0e:55:97:b7:64:58:50:64:9d:3a:70:7a:99:66:1c:01:11:
9f:d6:2f:c9:36:a7:b9:e2:1a:c6:91:6b:1a:63:0f:e7:65:98:
7d:42:3b:dc:7a:fc:61:06:42:f5:18:06:7f:37:27:93:0d:d9:
19:21:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:58:27 2025 by rpki-client