Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: Lme2fYKIgFIIlOVJ+F2Pkwtf3DVS0I8V5ESx4NEI/2E=
Subject key identifier: A2:39:31:44:A4:59:C5:0E:D6:E3:A9:16:22:44:63:47:CB:AF:B5:90
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 0197B8213B9F03FD77D9A8575015A9EC0562
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: +SJXkd2477iZxerzSGIzKg01CLIff1z5+99PJB5j7sY=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3b:9f:03:fd:77:d9:a8:57:50:15:a9:ec:05:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=a2393144a459c50ed6e3a91622446347cbafb590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a2:f0:13:37:91:26:7a:9d:51:5e:0f:d3:21:
1a:8d:9f:bb:0a:b6:7c:2b:b1:a3:56:c5:66:c7:fa:
ad:61:0b:c6:9c:ed:5e:56:1b:62:17:ba:f2:ca:0a:
66:4b:9d:01:a5:05:c8:1a:5c:0d:29:30:aa:1b:3c:
01:cb:cd:a7:3e:1e:28:d9:41:ab:4f:1d:20:9c:99:
0c:2d:9f:2f:ea:50:be:e3:59:62:43:1a:e1:6b:33:
f1:a9:64:0e:2f:fe:fe:0e:bd:9e:3d:bc:fb:bb:d1:
c6:e4:e6:b3:da:f8:95:b1:f5:3b:2e:6b:c4:b2:b6:
d2:f5:69:b2:f6:8e:06:e7:3d:f1:4c:5e:05:04:13:
14:62:51:15:59:9f:7b:db:9a:79:d0:ec:95:6f:ea:
b8:00:bd:b8:82:20:05:c0:91:c3:9e:a2:19:b8:00:
0e:5a:9f:14:6a:2b:89:71:fb:63:e5:55:ad:db:2c:
3b:26:38:0a:ae:ce:e8:41:5f:bc:65:cb:30:2a:59:
15:ed:24:37:60:7f:e8:8a:14:c2:98:7a:7d:cb:f0:
76:d1:6e:c8:5f:06:fd:c8:c6:11:ae:76:bd:69:75:
ae:6e:45:03:05:16:8c:3f:b4:5c:f5:4a:f1:36:12:
fd:f2:b4:2a:d6:40:61:7e:fd:a0:7f:1e:c5:00:5d:
18:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:31:44:A4:59:C5:0E:D6:E3:A9:16:22:44:63:47:CB:AF:B5:90
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:3c:25:22:d1:b2:86:09:8b:0b:30:46:ec:38:3e:dd:14:15:
ec:1a:0d:92:58:80:1f:68:65:e8:7f:0a:9a:06:78:e8:36:df:
d3:13:92:33:9a:9d:d7:9e:75:80:c1:6b:18:3f:12:12:bd:b2:
5a:5c:4c:9c:6b:e9:58:55:63:3f:56:4b:7a:4f:41:73:82:40:
5a:55:89:47:32:01:51:31:07:52:9f:db:57:75:81:fa:e0:28:
7d:e9:88:92:93:2f:b0:23:ae:21:8a:83:0a:9c:28:cf:e9:0e:
b6:48:d6:ec:ec:78:5f:af:ec:31:2d:86:96:87:68:cd:9c:99:
3f:9c:16:40:3e:08:5d:3d:28:82:94:d8:b9:3a:03:3d:e8:08:
fc:f7:93:77:bd:c4:0b:a8:e5:a7:08:db:88:bd:b2:16:6d:37:
6c:4b:23:58:58:e7:c6:8d:e0:a8:05:c8:42:0a:20:78:6e:68:
6f:ed:fb:a5:a2:6c:83:c1:a6:3c:28:cd:eb:80:28:03:8b:79:
86:38:3a:85:2a:e6:45:cc:42:75:21:b2:cc:ad:17:9d:2d:01:
92:77:a3:b2:3a:0f:1d:09:bd:c2:df:3a:5a:6a:d9:9e:48:59:
c6:08:4c:d0:ee:6a:00:ff:22:78:6a:a1:ad:ae:c0:a1:81:a7:
dc:f8:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:31 2025 by rpki-client