Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: PKw9m0ouY7rW9WnI6eVhpVP7xIlCTo4dMX6Gr8085oc=
Subject key identifier: 9C:2A:D1:10:72:28:9D:4C:5A:DE:51:27:62:4C:3B:44:42:99:75:22
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 0197B5FBD77554F29F7B8FB874C74DB0911A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 10:01:10 +0000
Manifest this update: Sat 28 Jun 2025 10:01:10 +0000
Manifest next update: Sun 29 Jun 2025 10:01:10 +0000
Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: hY2BWsQbsyWsKef1GU/2h2EzBQmluVAEoNk9Z0kvutg=)
2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:d7:75:54:f2:9f:7b:8f:b8:74:c7:4d:b0:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Jun 28 10:01:10 2025 GMT
Not After : Jun 29 10:01:10 2025 GMT
Subject: CN=9c2ad11072289d4c5ade5127624c3b4442997522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:45:f6:dc:64:ac:98:5e:9a:ca:74:73:15:
09:0b:5b:90:8b:84:29:ec:1b:26:fd:26:47:bf:e7:
4a:56:98:88:c8:01:cb:20:6d:62:8e:cd:bd:36:1a:
bb:b6:9a:47:5c:02:e7:2b:36:87:5b:46:44:48:ab:
24:20:ab:b1:f6:1a:8a:fa:c4:26:11:44:24:6c:74:
0f:aa:92:13:85:e4:db:e2:c6:50:0d:bb:d1:a8:58:
cd:76:f2:7e:1a:7b:f0:10:a6:3c:a9:94:f4:58:13:
ac:30:ef:4b:bb:f5:10:82:d6:1f:dd:73:ee:f8:3c:
47:25:67:7d:1a:79:47:cf:51:d5:76:08:05:67:59:
8a:26:c7:f3:13:dc:2f:a8:f0:6b:44:d9:8f:64:b3:
1d:ee:0b:0e:cf:f3:c0:33:02:41:ce:5b:9e:a0:7b:
33:3d:8e:af:fb:6a:df:3e:c1:54:34:51:8b:d0:ff:
eb:87:79:1c:44:8f:42:33:ec:86:0e:63:92:9a:87:
38:f9:d3:a1:e1:02:7d:34:59:d6:78:08:e9:15:92:
5a:54:d0:ad:4a:02:49:60:25:0f:ad:15:1e:8a:43:
33:3f:f8:a9:08:ce:f0:68:5b:67:ae:74:76:36:7f:
1c:a6:d8:21:16:77:e9:8d:f7:90:fb:79:ed:09:01:
e0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2A:D1:10:72:28:9D:4C:5A:DE:51:27:62:4C:3B:44:42:99:75:22
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:fe:2d:a1:2e:22:e2:1b:53:aa:a0:b3:50:2c:ca:d7:3f:31:
f8:2c:8e:aa:46:c6:f2:4b:de:4c:95:cf:1f:d4:b3:85:95:76:
fb:a2:a6:30:5a:3a:c4:88:17:39:4f:37:4f:49:94:7f:41:fb:
e6:14:33:0b:37:35:5a:b1:97:33:72:34:a1:c2:0c:f0:1d:fd:
14:df:b2:78:48:94:53:cc:ad:ed:40:46:41:8f:3d:5c:15:c4:
6d:ce:9d:4c:69:36:01:2b:09:bc:e6:ec:37:c1:cd:ad:2c:29:
81:c2:dd:f3:25:c0:b6:9e:81:a3:1a:bd:5c:22:48:40:64:3f:
56:f5:84:1d:55:56:37:77:8f:8e:0e:3f:bb:b3:7d:50:74:be:
dc:05:df:0c:cf:46:e7:49:29:f8:6d:76:4e:22:2c:c8:30:ba:
0b:a1:89:2a:e4:6f:96:6d:cc:a8:99:bf:14:df:50:e7:e7:d2:
0b:36:81:ca:1c:0d:91:1a:fc:f9:ec:cb:1c:22:bc:92:d7:50:
f5:60:a9:55:2f:ac:51:b8:b0:bd:18:b9:18:51:85:ea:34:12:
f7:42:cd:4b:2a:88:e2:cd:7e:07:81:fb:30:da:37:15:5c:fe:
ad:d2:83:12:44:3a:04:2d:7b:1d:7e:5a:c6:63:db:ac:05:0e:
ab:4a:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:00:44 2025 by rpki-client