Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: kIwVRH++U6gykV2ynaMnevsu2J/xFWF0+91PCH5om80=
Subject key identifier: BC:51:AC:A7:70:C5:0F:13:02:D3:C2:C2:93:CB:02:50:C6:F2:0E:28
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 0196C427B05E440EADAE8007D404A4B5CBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 0475
Signing time: Mon 12 May 2025 11:00:57 +0000
Manifest this update: Mon 12 May 2025 11:00:57 +0000
Manifest next update: Tue 13 May 2025 11:00:57 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: Jikb9Tl+hfmPYScCtAL/rxoT/w/PspfitnB7Z66iv9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:b0:5e:44:0e:ad:ae:80:07:d4:04:a4:b5:cb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: May 12 11:00:57 2025 GMT
Not After : May 13 11:00:57 2025 GMT
Subject: CN=bc51aca770c50f1302d3c2c293cb0250c6f20e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:ab:01:af:87:38:82:e2:6a:76:c3:e1:b3:
18:e0:34:75:f4:23:b3:df:d0:6b:06:fd:b7:09:ad:
b9:83:8d:91:51:69:41:c4:d5:0b:00:1e:96:5a:89:
ba:86:da:6e:e5:86:04:ce:1e:18:2e:57:6f:71:22:
35:8d:2f:8a:ed:49:fe:9c:77:aa:2d:5e:81:e3:9f:
5b:63:dc:1d:fd:ac:08:96:0f:8f:1b:ed:2d:1c:32:
f9:80:5d:97:c7:c1:7c:c6:62:6e:91:58:17:d7:14:
ce:f2:6c:da:43:0f:02:2b:e9:7b:17:95:3b:ab:3f:
90:26:8f:98:ee:73:51:0c:2f:04:ab:6d:ad:95:49:
73:6e:fa:bd:7c:3c:ea:72:4f:60:85:a2:c8:0c:e3:
84:25:10:ac:58:b6:d7:81:20:e9:2b:4e:f8:2f:11:
6c:80:e1:7b:a8:f4:ae:da:6d:9a:31:c9:dc:3f:67:
94:79:4e:77:81:74:c8:4d:cd:95:cc:f3:fe:66:3c:
3c:e7:f1:80:03:7b:2e:ee:be:49:e5:ff:2e:62:3c:
3e:de:4f:a6:2f:09:a5:1a:02:54:17:08:1b:b7:3e:
3f:d1:e7:2b:18:8a:b1:cd:4f:2c:71:f5:b4:9e:aa:
fd:4c:b6:40:0d:d3:6a:4d:d2:86:28:3c:c4:12:37:
a0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:51:AC:A7:70:C5:0F:13:02:D3:C2:C2:93:CB:02:50:C6:F2:0E:28
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:94:e1:0e:4f:7b:ef:e7:78:96:b1:cc:8a:51:8f:71:54:85:
4e:67:33:d8:e6:61:6e:86:44:18:39:21:b8:dc:0a:4e:b1:cd:
80:69:aa:f6:33:2c:38:f7:2d:74:25:d2:68:64:76:18:6f:a9:
4c:d0:a9:0c:64:76:f7:5b:b7:ee:69:df:46:77:a4:98:e7:93:
35:04:3c:71:b9:6e:ec:76:05:65:da:78:53:ae:11:8b:00:62:
91:a0:8d:0e:68:9d:fc:a5:d4:db:98:b1:ec:fe:e8:08:cd:f5:
51:8b:16:a1:9f:6c:00:17:76:69:34:34:6c:3c:35:af:de:e6:
16:73:68:1c:a0:66:a9:db:8e:43:66:29:3b:3a:eb:5b:0b:9a:
a9:9f:40:0e:b4:4a:2d:83:f4:de:d0:40:a5:98:d0:6e:2c:d2:
30:bd:81:fd:fd:50:f6:3f:53:57:af:37:31:01:17:dc:40:76:
02:5e:fe:ce:cb:ba:59:30:dd:66:44:57:ef:45:90:1b:2e:8f:
fd:bf:1e:fd:4d:eb:82:e3:03:92:bd:c2:51:2b:e6:67:17:69:
89:bd:32:17:46:9a:05:e2:93:c0:48:70:f7:f0:40:58:f1:54:
df:cc:94:e8:d4:88:a2:04:5a:35:68:b4:fd:ee:40:c6:f8:77:
31:c3:29:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:07:33 2025 by rpki-client