Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: 9vaHvclRq6kSktr6K+QGeqpjMWSqcsxmH8iK+0cUr/0=
Subject key identifier: 65:28:BE:D1:14:23:57:98:D7:8F:DA:5F:4D:D9:9B:C7:55:67:1E:5E
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 0197BC6C99DF43C7DE21FCFB414691655F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 0601
Signing time: Sun 29 Jun 2025 16:02:03 +0000
Manifest this update: Sun 29 Jun 2025 16:02:03 +0000
Manifest next update: Mon 30 Jun 2025 16:02:03 +0000
Files and hashes: 1: He25UWkTLLFKhTHFzz-APm0o_4c.roa (hash: qf89l1jhdOX3RHCcx3FCmLLItRgQ6aCJ5/hEoWKez8g=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: 480L2ziL8SoLJ2eZz+y7YmRxuDVxOW3PcmiOuSStQMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:6c:99:df:43:c7:de:21:fc:fb:41:46:91:65:5f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: Jun 29 16:02:03 2025 GMT
Not After : Jun 30 16:02:03 2025 GMT
Subject: CN=6528bed114235798d78fda5f4dd99bc755671e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:6e:6f:60:b0:c7:78:5b:04:94:29:8c:17:
74:ee:0f:08:89:47:b4:80:9f:8c:3f:11:4e:6d:e1:
ab:f5:ac:9f:d8:d7:ba:ec:59:cf:e3:f4:2f:4e:c1:
47:8a:8b:ee:7c:91:ad:e0:1c:39:ca:5a:de:1a:13:
86:f7:4a:69:ba:2d:b6:20:ef:3c:42:c4:c3:36:bf:
ee:21:83:76:7d:db:19:e1:f9:79:fd:5b:84:cf:d0:
f5:08:d0:bb:f3:25:dc:ed:2f:86:b2:c6:32:ca:a5:
93:b3:0a:49:2f:5d:d5:e5:b6:33:a0:38:28:f2:3f:
67:0c:b5:1f:46:5b:f0:9c:7c:f7:bb:dd:ea:8b:6c:
c3:c7:a7:7b:04:cd:cf:2e:44:6b:37:36:25:ab:30:
1b:82:41:d4:34:c8:d2:ca:2e:04:21:e9:f6:88:47:
f6:c4:84:b8:1d:d2:45:fc:d6:35:92:63:c6:f4:76:
ff:6b:58:65:cc:5d:74:0d:78:f1:4c:80:ba:c2:bc:
26:f1:6d:68:f2:10:ae:ef:64:71:1b:51:84:30:be:
dd:8c:e1:0f:ee:43:13:69:c1:9b:94:5a:26:d9:de:
47:ee:f0:1d:8e:9e:ea:dc:84:85:36:ee:7d:49:2d:
95:22:fe:b5:8f:e8:a2:2d:ea:b1:2f:3f:e3:fe:b6:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:28:BE:D1:14:23:57:98:D7:8F:DA:5F:4D:D9:9B:C7:55:67:1E:5E
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f2:ac:46:fb:73:b4:ba:71:1a:a9:3e:0b:39:ec:70:b8:38:
74:72:06:51:74:e6:0d:c5:37:00:a8:e7:24:ad:9f:e5:f3:48:
cd:93:be:54:f5:f9:14:6a:3f:95:ce:00:92:ef:7e:47:05:7b:
ec:4a:48:ae:5f:c0:20:db:cf:5e:f0:84:4b:c5:e5:35:0e:d0:
45:f5:47:9e:46:30:8e:56:b9:75:4c:de:80:e9:e3:7e:9a:e2:
7d:b7:dd:dc:68:91:9d:ec:f0:17:4f:3d:f6:40:9a:88:e1:ab:
8b:26:36:db:01:b4:3d:13:b8:61:e9:4c:5f:0a:01:8e:f5:63:
09:87:67:ce:75:83:58:21:32:30:cc:5f:7d:b7:14:fa:f4:7d:
b5:ed:09:c9:13:47:0d:d3:23:56:b7:52:1a:40:25:7b:30:18:
dc:9b:e3:0f:31:ae:0a:4b:bc:9b:67:53:27:d9:da:54:ae:76:
68:36:86:1d:69:1d:be:89:16:dd:e9:2c:dd:42:5a:1b:7b:7f:
59:b4:1c:de:84:3d:45:ff:3a:7e:5b:10:03:00:f3:c9:7c:83:
c9:81:f1:e9:8a:e0:0d:c9:cb:8a:26:76:42:0c:e1:17:0e:42:
48:39:50:7f:9d:32:eb:af:e7:f2:33:ba:9b:8b:bc:31:cb:7f:
21:d3:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 23:14:38 2025 by rpki-client