Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
File: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft (raw, json)
Hash identifier: SUoXGD1qtrCWMn1oKsmq/s7WdE8N7lvRRy00wxkOfsU=
Subject key identifier: 22:E4:46:AA:78:17:7E:DF:EB:25:11:2B:AB:CB:42:6E:BF:C4:95:1A
Authority key identifier: 3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
Certificate issuer: /CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Certificate serial: 0197B70E60035F3271B1AEA7A5A1576AFB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
Manifest number: 0D2F
Signing time: Sat 28 Jun 2025 15:01:01 +0000
Manifest this update: Sat 28 Jun 2025 15:01:01 +0000
Manifest next update: Sun 29 Jun 2025 15:01:01 +0000
Files and hashes: 1: 9-fbWWjNC4mOvVefigl9UV2UFJs.roa (hash: tWgz0w4Sqnk4S40gqRVMtTMDJNe1eyYOZFDB5oZ2xOA=)
2: PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl (hash: 9s3sY3NNEbKHzMiiRnqfJUziWCZRamRzJS0KBlHf7E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:60:03:5f:32:71:b1:ae:a7:a5:a1:57:6a:fb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca6fa999e8a674aa5332deb71f1bad0245c8dc1
Validity
Not Before: Jun 28 15:01:01 2025 GMT
Not After : Jun 29 15:01:01 2025 GMT
Subject: CN=22e446aa78177edfeb25112babcb426ebfc4951a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:25:ab:38:25:c1:b9:5d:79:d5:f5:5e:e2:
39:f3:f1:8e:e7:14:51:92:1e:b8:40:f8:da:45:0a:
f1:cb:2c:0a:19:8f:04:24:75:37:51:28:05:e8:12:
df:58:91:80:04:19:44:90:38:19:24:6a:a9:9e:87:
1d:dc:8e:24:ce:5a:8f:7f:10:5a:ac:8e:9e:07:f1:
e8:51:a8:87:44:4b:2c:c1:93:1a:08:0d:67:f5:5d:
4f:83:03:5f:b7:f6:8d:40:5f:ac:14:f2:7d:ca:b7:
64:d2:32:79:b2:21:88:fc:b9:15:f5:a2:72:d6:ac:
70:70:a3:3b:8d:27:5f:8c:96:0b:46:c0:a2:ac:c4:
d0:0f:fa:35:8d:1b:ab:eb:40:f3:89:90:cf:c2:21:
dc:0c:29:cc:ef:67:de:4b:1d:28:b0:51:94:4e:da:
f8:74:cc:c0:3d:3e:5d:b7:57:e0:c9:b3:f4:7f:7f:
3c:8b:e9:9f:09:be:ee:ae:ad:35:6e:17:b5:2b:1d:
ad:5b:00:06:c2:17:b6:8b:96:9b:a4:a3:12:2f:6f:
71:02:e5:a9:b7:ff:31:e1:88:d4:58:e8:01:51:c9:
57:26:1d:24:45:44:da:25:cf:a9:c5:db:6e:9e:d2:
fc:d3:8b:e2:52:5b:02:42:8b:47:13:50:fb:e1:d7:
5c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E4:46:AA:78:17:7E:DF:EB:25:11:2B:AB:CB:42:6E:BF:C4:95:1A
X509v3 Authority Key Identifier:
keyid:3C:A6:FA:99:9E:8A:67:4A:A5:33:2D:EB:71:F1:BA:D0:24:5C:8D:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f97d3d-ed64-40b7-8b7c-152b0abd7c0c/1/PKb6mZ6KZ0qlMy3rcfG60CRcjcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:44:1a:44:5b:66:af:b1:76:26:61:d2:fe:c6:da:e3:31:f2:
82:be:f0:8d:7f:1a:67:3c:a9:11:2c:08:07:00:68:30:b8:41:
5e:47:0f:cd:94:15:c6:6a:c5:3f:76:7e:1d:5b:4a:22:2c:1b:
48:16:4c:af:f2:55:cb:d8:84:b5:d5:99:58:dd:5e:bf:5c:70:
b7:6e:f7:3e:a9:8f:2f:03:5b:cb:72:58:1a:97:01:77:d1:bb:
e3:c7:46:0c:96:46:fe:c4:fd:cb:8e:4f:34:8a:e3:ec:e2:d8:
4b:89:06:6b:40:7f:6f:d4:77:86:02:dd:bc:cd:02:4e:5c:10:
b9:86:cc:b0:02:ce:fb:c7:9a:88:4c:5c:00:87:cb:06:95:08:
0b:a9:ca:f2:c9:2a:d4:73:c3:0a:60:ab:76:a1:cc:a3:39:54:
40:8e:66:65:1c:4c:4b:0c:82:b2:61:f4:3f:84:da:73:0d:ff:
b8:fc:2d:5e:96:0a:91:d8:63:11:20:61:a7:66:50:78:3f:6e:
66:15:b2:95:de:6e:36:f6:2f:5f:07:5f:2a:e6:5c:7d:88:07:
27:c5:f5:bd:03:4a:c5:06:5a:70:45:b9:d2:bd:9a:a2:8a:53:
ba:db:86:87:ae:cd:0f:c5:28:a6:1f:dc:6a:54:5a:b1:e2:70:
30:34:82:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:28 2025 by rpki-client