Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: eN3kP23wQ3ARpqu96EscX2hBMRt0yT7PHY8n0bLUimU=
Subject key identifier: 99:9C:DF:25:2B:0D:46:61:9F:56:F6:BC:00:D1:A7:27:FB:86:F7:B8
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 0196B06A0882932E6D587F13351E2338BF3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 1239
Signing time: Thu 08 May 2025 15:01:01 +0000
Manifest this update: Thu 08 May 2025 15:01:01 +0000
Manifest next update: Fri 09 May 2025 15:01:01 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: zqyyPj+E6s3l4ok+dlTV0etpam7bB31/HvWQ0Ric9dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:6a:08:82:93:2e:6d:58:7f:13:35:1e:23:38:bf:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: May 8 15:01:01 2025 GMT
Not After : May 9 15:01:01 2025 GMT
Subject: CN=999cdf252b0d46619f56f6bc00d1a727fb86f7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:a2:ef:45:e0:5d:95:3e:f6:47:d8:3a:e9:
b9:50:f0:c6:d9:80:92:56:46:22:f8:e6:b4:69:b5:
b2:9b:b9:d7:74:b6:cd:8e:a0:a1:c3:15:d2:80:ac:
ca:1a:52:12:38:6e:0b:c9:bc:7d:92:69:6c:58:f6:
3a:7b:67:79:5b:d9:4e:35:36:c1:ef:8f:6c:83:31:
23:17:aa:d4:9e:e9:82:21:6f:34:af:24:87:c1:dc:
a5:80:a8:91:99:c1:87:94:63:ab:76:8c:16:60:51:
d2:7e:7b:75:23:bf:e8:a8:98:e1:8d:9b:1d:e7:4d:
cf:f3:c1:a4:ab:dd:6f:ff:8a:91:35:6b:dd:3e:fe:
ad:1a:c3:8d:9b:65:50:a4:80:20:33:89:19:aa:77:
d0:4c:c8:48:bc:d7:c8:f2:b1:19:fe:df:fa:3e:54:
4d:d2:13:59:7c:80:bc:8c:94:f8:d1:5a:98:f3:34:
2c:52:28:84:48:cc:97:8d:8d:2f:d2:be:ee:47:ec:
f7:97:2a:bb:d1:bc:83:9f:f2:a9:1a:01:a9:94:20:
a5:a5:2c:51:4b:e7:70:d4:8a:54:ae:ea:83:17:dd:
a2:4b:64:dc:92:db:fc:93:aa:e6:48:5a:6e:b9:36:
9a:00:22:80:68:71:21:dc:25:f4:b3:1d:c5:4f:6b:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9C:DF:25:2B:0D:46:61:9F:56:F6:BC:00:D1:A7:27:FB:86:F7:B8
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:a6:d7:aa:3c:a0:b5:1f:24:21:37:86:30:6e:ef:19:d9:
06:f5:e4:d6:e7:d2:54:a2:77:c7:36:bb:98:9a:7e:cd:d2:5b:
22:3d:b5:2c:93:ec:2d:66:81:df:77:02:56:64:c6:af:63:43:
8d:58:b4:28:84:85:d4:23:9b:56:7f:c6:fb:57:11:05:9b:6e:
00:c7:08:57:81:83:e9:6c:1f:2a:e5:da:e6:59:d8:59:29:52:
e0:b9:3f:a4:19:e8:bb:59:1e:bb:69:c9:a8:d5:4d:a0:69:47:
ac:32:61:7d:dd:eb:4d:85:88:7f:50:a1:ff:a7:5e:c0:6c:fe:
11:ec:89:f5:27:54:fa:4b:61:10:4f:57:8d:8a:13:a2:08:19:
ac:61:ea:d2:86:69:ea:45:07:2b:ee:2c:c2:d9:6e:b7:6a:46:
93:ef:cc:82:56:22:d9:3c:eb:3a:c5:0d:53:9c:ca:2c:da:75:
d5:89:6e:24:e3:4d:2b:9b:4f:a5:5b:ef:92:e6:8d:cc:ef:6f:
77:9a:58:08:af:ec:f6:5b:55:1c:83:38:17:58:4d:ba:e0:52:
ac:ae:8d:0e:c2:37:b4:9f:c0:fa:ee:01:4f:c8:ab:ee:53:3b:
4f:a3:da:6a:2e:61:00:7f:3b:2a:d9:ad:26:9f:8f:2e:3c:a7:
75:5c:bc:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZawagiCky5tWH8TNR4jOL89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmYTJkNjg1MGJiYzQ3MjA1NTdhOTE3NGRjYmM5NzYwYWVj
YzBiMWEwHhcNMjUwNTA4MTUwMTAxWhcNMjUwNTA5MTUwMTAxWjAzMTEwLwYDVQQD
Eyg5OTljZGYyNTJiMGQ0NjYxOWY1NmY2YmMwMGQxYTcyN2ZiODZmN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWmi70XgXZU+9kfYOum5UPDG2YCS
VkYi+Oa0abWym7nXdLbNjqChwxXSgKzKGlISOG4Lybx9kmlsWPY6e2d5W9lONTbB
749sgzEjF6rUnumCIW80rySHwdylgKiRmcGHlGOrdowWYFHSfnt1I7/oqJjhjZsd
503P88Gkq91v/4qRNWvdPv6tGsONm2VQpIAgM4kZqnfQTMhIvNfI8rEZ/t/6PlRN
0hNZfIC8jJT40VqY8zQsUiiESMyXjY0v0r7uR+z3lyq70byDn/KpGgGplCClpSxR
S+dw1IpUruqDF92iS2Tcktv8k6rmSFpuuTaaACKAaHEh3CX0sx3FT2unywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmc3yUrDUZhn1b2vADRpyf7hve4MB8GA1UdIwQY
MBaAFD+i1oULvEcgVXqRdNy8l2CuzAsaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQt
OWM2NWQxODhlNTRlLzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jM2M3NTgtYTI1My00OTg5LWFlMmQtOWM2NWQxODhlNTRl
LzEvUDZMV2hRdThSeUJWZXBGMDNMeVhZSzdNQ3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfem16o8
oLUfJCE3hjBu7xnZBvXk1ufSVKJ3xza7mJp+zdJbIj21LJPsLWaB33cCVmTGr2ND
jVi0KISF1CObVn/G+1cRBZtuAMcIV4GD6WwfKuXa5lnYWSlS4Lk/pBnou1keu2nJ
qNVNoGlHrDJhfd3rTYWIf1Ch/6dewGz+EeyJ9SdU+kthEE9XjYoToggZrGHq0oZp
6kUHK+4swtlut2pGk+/MglYi2TzrOsUNU5zKLNp11YluJONNK5tPpVvvkuaNzO9v
d5pYCK/s9ltVHIM4F1hNuuBSrK6NDsI3tJ/A+u4BT8ir7lM7T6Paai5hAH87Ktmt
Jp+PLjyndVy8Ig==
-----END CERTIFICATE-----
Generated at Thu May 8 16:59:38 2025 by rpki-client