Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: mEZ4k6+pQci7PmLYZ4P/fNe9d8ystL1OFSZDHiw15pg=
Subject key identifier: FA:F5:65:46:D4:25:56:33:8F:CA:AC:A2:4F:8C:84:1D:36:0B:3A:98
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 0197B77CF8C5C234B2244A2507092D74E908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 04F3
Signing time: Sat 28 Jun 2025 17:01:50 +0000
Manifest this update: Sat 28 Jun 2025 17:01:50 +0000
Manifest next update: Sun 29 Jun 2025 17:01:50 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: Jm8kTd6qoO1ojUtyOISYp3Q9a/dZOdtig10kvpXdVl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:f8:c5:c2:34:b2:24:4a:25:07:09:2d:74:e9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Jun 28 17:01:50 2025 GMT
Not After : Jun 29 17:01:50 2025 GMT
Subject: CN=faf56546d42556338fcaaca24f8c841d360b3a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:9b:db:67:89:bd:26:8b:68:d5:eb:59:1e:
f3:3b:79:65:dc:f6:2c:ce:39:61:9a:40:79:61:ee:
12:16:64:2f:f3:14:6b:0b:e1:5b:7b:36:a7:5a:14:
27:0e:d3:c8:b4:d0:a1:86:ff:ea:f7:77:4e:7f:75:
cb:e0:46:a0:37:fe:60:ce:07:5b:ef:73:31:8a:ac:
36:d2:96:33:80:35:58:f2:fe:ea:82:71:19:34:91:
63:0a:e3:2e:85:3b:22:10:be:cf:39:8f:c5:8a:b8:
13:0c:4b:44:ed:0f:b9:b5:47:cd:46:d8:ad:e4:24:
75:f3:69:1c:49:13:48:88:c5:ec:06:27:85:d2:bf:
df:c8:ba:07:ef:69:7f:a5:01:7e:38:2e:cb:70:37:
74:74:3b:ec:69:02:ec:e0:d3:1d:00:ce:d3:84:b3:
99:cd:25:7d:6b:cc:3b:28:10:9b:4c:07:63:75:25:
20:7d:ca:75:17:78:4e:c7:fa:4a:94:bc:38:a6:ed:
8c:98:1b:e9:86:51:cb:de:d8:ad:9d:30:7e:6c:cf:
4c:a4:17:6b:ad:ab:73:fd:57:b0:70:35:d1:fa:3d:
12:e3:53:0f:a2:df:cb:1e:bc:27:11:d8:e0:f6:56:
67:38:cf:2b:cd:62:57:57:f0:be:67:5a:e9:a8:00:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F5:65:46:D4:25:56:33:8F:CA:AC:A2:4F:8C:84:1D:36:0B:3A:98
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ba:b9:6c:f3:5a:24:e1:c2:50:7f:9d:bb:f3:43:4a:3d:b5:
ea:dd:4b:92:77:eb:6f:f3:df:43:1e:7f:30:64:e7:92:d3:e9:
00:e1:b0:94:58:96:f0:89:6e:cc:1b:28:50:89:0f:09:0a:22:
0e:90:68:5a:94:7f:99:6a:2e:d4:75:c8:38:87:36:9c:0e:c8:
ee:17:a7:f3:87:ff:77:5b:31:f8:a3:74:d7:ac:29:12:7d:81:
fa:5d:fd:e3:a6:5a:88:2f:b9:ad:04:fb:8e:8e:a7:5c:9b:50:
ee:51:69:68:2d:78:5e:57:c3:37:6e:84:3b:6d:d7:59:6a:32:
c9:71:05:7e:53:48:38:d6:f3:aa:9d:91:90:1d:86:b4:74:75:
fc:b8:cf:ff:b2:22:db:f5:01:5f:5b:c8:9a:a9:52:92:95:47:
14:ac:d4:05:7a:cd:98:cc:eb:80:26:16:53:46:1f:0c:e3:8d:
55:89:6d:ab:6c:bd:f6:9d:41:42:52:a8:fc:98:c2:ba:bd:87:
9d:73:3b:0f:5d:de:98:08:bd:9e:88:6c:73:f5:24:f5:d1:3d:
22:fa:47:de:4a:e6:a3:9a:e1:5a:1a:43:66:46:d9:dd:10:24:
1c:41:3e:42:66:82:da:5d:23:61:e2:ef:12:ff:ab:79:a3:1d:
fb:bf:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:28 2025 by rpki-client