Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: QKkO2J+5BU0OaoS2gfOth9izmXUAsWw7xuGV+uUhnbk=
Subject key identifier: BE:7E:77:74:51:CE:04:0B:3E:E6:F2:F1:A0:84:6C:BD:82:BB:57:1F
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 0197B6A197B9B9270315FF6AD6517BE314CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 09AE
Signing time: Sat 28 Jun 2025 13:02:12 +0000
Manifest this update: Sat 28 Jun 2025 13:02:12 +0000
Manifest next update: Sun 29 Jun 2025 13:02:12 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: 6aa/hABXY9YV1SwJ4zVZqtnQhdO8M2dm8kTobc/qIVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:97:b9:b9:27:03:15:ff:6a:d6:51:7b:e3:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Jun 28 13:02:12 2025 GMT
Not After : Jun 29 13:02:12 2025 GMT
Subject: CN=be7e777451ce040b3ee6f2f1a0846cbd82bb571f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:22:56:88:cb:fe:8d:91:a5:3e:f1:b4:62:
4a:51:dd:21:71:73:b0:d3:a6:99:f1:f5:68:36:af:
a5:9d:db:d3:69:48:ec:74:49:fd:d5:c2:f3:0c:98:
9a:da:18:69:80:a7:4d:19:ef:4b:98:48:c1:29:18:
22:d5:23:d6:fa:fc:c5:19:fb:59:7d:7d:17:be:38:
eb:b9:ed:0a:fa:e6:f2:a6:9a:fe:b4:7c:bd:a5:4a:
6f:4e:7e:46:7a:50:e2:60:67:33:db:50:bb:86:1a:
bc:96:e7:85:56:fc:a4:07:a5:38:ef:88:38:e3:ea:
f9:a1:7b:ed:61:ab:8d:40:51:52:cc:d4:d4:6e:c6:
00:4e:b3:3c:09:6f:2b:ab:3c:17:9e:3f:94:fd:01:
0b:4b:85:da:22:f1:65:02:81:fc:1e:4d:1a:7a:82:
ee:56:97:45:19:97:23:0b:fb:c2:a5:80:18:c9:19:
f4:ad:e2:12:a1:a2:78:05:21:25:09:70:d1:ca:14:
c4:80:1f:f4:e7:e9:c9:8f:45:67:64:2e:fd:da:cc:
9d:84:39:6c:d0:7d:8b:b0:a8:8e:3e:bb:5f:8e:fc:
30:3b:92:26:9b:f9:36:f7:bb:e3:85:ad:a5:8b:76:
20:a2:b4:ad:6c:22:e7:90:f9:6b:b7:d1:e8:e6:90:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7E:77:74:51:CE:04:0B:3E:E6:F2:F1:A0:84:6C:BD:82:BB:57:1F
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a8:f7:a9:61:f9:fb:d2:f1:79:2e:32:f7:fd:a5:da:f3:5a:
e7:a2:99:7d:84:e3:ee:ae:62:32:07:e0:b5:20:95:16:70:ae:
60:5c:9d:f7:f2:b9:70:d8:98:91:2a:20:ff:d1:aa:d6:16:5b:
da:b2:17:87:ac:40:e3:ad:52:f3:25:ea:c6:b4:79:64:51:5b:
80:68:4a:a9:f7:d1:98:e3:df:53:f1:b9:90:f2:8d:3b:35:0b:
30:21:de:18:e8:d7:a0:4e:4f:b9:78:bc:17:f0:65:89:f1:ae:
a5:4a:c7:a3:f9:2c:4a:48:e8:65:14:46:4d:78:e3:1b:2e:83:
c5:9f:62:a1:92:9b:bd:00:91:87:0d:85:1a:71:18:e2:5a:eb:
68:1b:45:05:50:4c:c6:62:35:1f:c3:51:03:18:5e:28:bf:ef:
47:16:a2:ef:e2:9e:13:c4:f3:8b:2c:d8:da:34:ec:cb:fc:24:
6a:c3:6e:27:f4:c1:19:f8:ef:63:63:80:ee:f7:3e:e4:6b:35:
c6:4d:00:00:da:8e:81:75:35:a8:06:19:71:00:d0:e6:0e:48:
3b:5a:81:20:fb:cf:41:16:cc:15:1f:c1:0f:be:04:60:a2:33:
e8:1c:73:4b:3b:db:79:50:b9:e5:1d:f6:e2:7b:58:35:d9:aa:
89:5c:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:22 2025 by rpki-client