Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: FgKdOKd1PVl+DsaVIVB2qQybXsPJCPpj12rJ1iLEIAs=
Subject key identifier: 5C:A6:D9:5C:0F:82:BF:16:A3:3C:E9:2B:F9:47:C1:6D:36:9B:E5:01
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 0198D6CD870D7537B71E8657D2B765271C79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 1356
Signing time: Sat 23 Aug 2025 12:00:50 +0000
Manifest this update: Sat 23 Aug 2025 12:00:50 +0000
Manifest next update: Sun 24 Aug 2025 12:00:50 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: aEN/TdlLd4glYdGZ/PDwMfKsXoC2ouaF9Bv+Jiygiyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:87:0d:75:37:b7:1e:86:57:d2:b7:65:27:1c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Aug 23 12:00:50 2025 GMT
Not After : Aug 24 12:00:50 2025 GMT
Subject: CN=5ca6d95c0f82bf16a33ce92bf947c16d369be501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b0:81:44:47:e7:23:76:5b:46:32:98:7e:1a:
09:66:93:a0:4a:88:e0:69:b8:43:29:53:90:b2:f5:
c4:e1:8d:64:e8:39:65:71:32:44:50:58:fc:d6:79:
06:a4:fc:e2:04:82:94:74:19:1a:3b:5a:9a:f0:77:
8f:04:f2:75:08:d7:6b:51:a1:9c:d4:33:e6:6e:25:
e8:72:fd:36:d3:e8:e1:1e:a9:e3:e9:03:ae:c9:ec:
5e:46:5d:91:6e:d6:5d:23:78:68:08:aa:d3:91:fd:
37:59:7e:bc:2b:96:66:7d:05:e5:78:64:78:48:66:
a1:a0:a5:6c:f5:d7:34:92:7c:a7:f6:aa:b1:bb:b5:
3e:3f:ae:84:03:e2:e1:35:9d:e1:03:19:88:a3:25:
ba:c3:d3:57:84:a8:b5:25:3b:0d:c4:06:77:fc:e2:
d0:ed:4a:c5:85:63:9d:5e:5b:5a:41:a6:3a:c9:36:
5b:be:cb:83:51:87:ee:f0:92:61:63:48:1c:c1:c6:
9d:72:f3:66:89:10:24:bd:ce:c6:22:20:d3:c5:2d:
cf:3b:6c:44:2e:1c:3f:ee:6d:85:bf:c4:f9:48:17:
6e:1a:17:44:0d:6b:35:62:5d:93:95:69:82:75:2b:
3e:08:d2:3d:1a:a7:5d:7f:fd:17:1d:63:c0:4f:a0:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A6:D9:5C:0F:82:BF:16:A3:3C:E9:2B:F9:47:C1:6D:36:9B:E5:01
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:42:c0:90:85:7d:4c:a2:c4:73:c8:8e:73:6e:88:70:a4:
72:84:59:03:91:3a:64:c1:5b:51:be:be:bb:7a:56:12:02:f9:
ab:3f:e5:4c:92:ca:5b:89:ef:6e:01:07:47:ed:33:cd:24:e3:
88:53:de:ae:b6:f4:99:32:b7:82:4c:f1:6c:c2:5b:89:fd:33:
32:5a:4d:a2:e1:b5:8d:32:41:da:0e:45:47:e5:17:11:4f:0e:
b8:f9:a4:75:4b:15:49:8e:91:dd:af:8e:56:1d:82:1b:8c:5f:
42:2a:01:3b:12:a8:ad:ae:90:21:35:7f:8a:34:82:69:d8:c3:
6a:d8:64:9d:ce:d7:17:33:e8:1a:42:35:bd:12:10:5f:bb:ad:
7c:64:e4:28:67:7d:2d:40:c3:c3:85:d3:2f:09:2b:b5:5c:3a:
f6:f9:fd:c0:50:86:13:46:0f:a5:59:3c:95:b3:06:67:6e:da:
25:f7:00:5d:41:79:fb:ab:2f:05:ed:d8:09:1c:ee:39:8a:7b:
5a:b3:e4:e5:02:ea:c8:16:b9:3a:d8:5b:bf:bc:8e:61:7b:11:
ac:5d:2b:8c:85:26:0e:f3:93:69:ee:48:6d:33:48:59:4e:c5:
f7:25:e9:c0:1c:00:39:84:b7:9c:85:c0:22:39:e2:74:5b:a9:
5e:76:60:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:50 2025 by rpki-client