Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
File: P6LWhQu8RyBVepF03LyXYK7MCxo.mft (raw, json)
Hash identifier: xoEICYMvXD2tgTN94EEjMGPIr6QzSGw6g8a7jAG08m8=
Subject key identifier: 5F:C3:A3:CB:6C:6E:04:4E:A7:5C:13:0D:58:F3:67:47:2E:AA:0A:64
Authority key identifier: 3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
Certificate issuer: /CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Certificate serial: 0197B70EDA93FFBDE05C91A53CF377133B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
Manifest number: 12C1
Signing time: Sat 28 Jun 2025 15:01:33 +0000
Manifest this update: Sat 28 Jun 2025 15:01:33 +0000
Manifest next update: Sun 29 Jun 2025 15:01:33 +0000
Files and hashes: 1: GAO-zTi3etu6ipkvC2n1MQjAfa8.roa (hash: xkkdl+Sobv3rMi6edmSVvQinnG04ZdzSM/7er87DV0E=)
2: P6LWhQu8RyBVepF03LyXYK7MCxo.crl (hash: FeiJ+lOAL35msAM7iqi9mjX2CB+7XCJwu1OBYUEiK/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:da:93:ff:bd:e0:5c:91:a5:3c:f3:77:13:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa2d6850bbc4720557a9174dcbc9760aecc0b1a
Validity
Not Before: Jun 28 15:01:33 2025 GMT
Not After : Jun 29 15:01:33 2025 GMT
Subject: CN=5fc3a3cb6c6e044ea75c130d58f367472eaa0a64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c1:74:50:15:5b:9e:3f:5f:1a:0a:63:9c:19:
e1:ea:e5:4c:3d:63:6b:ed:84:05:f7:79:18:03:b5:
b8:a7:79:1c:28:30:b4:be:52:d9:24:5c:f5:69:af:
92:7a:a6:2f:0a:35:82:4a:05:5a:3f:17:a9:80:6f:
b9:fb:2a:1a:c5:e1:5a:28:d1:15:8e:9c:20:9a:40:
29:02:f6:bd:eb:64:5f:c3:4d:8b:37:de:72:89:03:
64:0e:4a:71:6e:c9:31:1b:f3:39:39:fc:f3:d8:ce:
01:1f:70:5f:c4:42:17:30:79:91:04:dd:77:a3:65:
65:21:d9:6f:61:f6:55:1a:85:ee:e7:f5:64:a3:c8:
40:25:e2:59:b5:df:8b:cd:0e:e7:f3:05:98:33:00:
05:53:79:ad:88:65:ca:83:bc:ef:06:8b:d5:41:c6:
9e:d3:ac:16:f6:80:cf:72:c8:38:37:17:81:97:71:
d2:98:95:7f:b6:bc:d6:82:03:58:70:2d:d1:7b:e7:
47:77:f3:ef:74:aa:76:63:1e:56:8f:cc:7b:e5:60:
41:91:f6:3e:8c:9b:6b:76:9f:fa:c9:69:9d:51:99:
3e:9f:7b:41:cf:12:3e:d6:1a:32:a4:03:8f:31:d6:
4e:03:49:c1:d8:b8:fb:82:d9:4f:a1:98:31:c3:cf:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C3:A3:CB:6C:6E:04:4E:A7:5C:13:0D:58:F3:67:47:2E:AA:0A:64
X509v3 Authority Key Identifier:
keyid:3F:A2:D6:85:0B:BC:47:20:55:7A:91:74:DC:BC:97:60:AE:CC:0B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6LWhQu8RyBVepF03LyXYK7MCxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/c3c758-a253-4989-ae2d-9c65d188e54e/1/P6LWhQu8RyBVepF03LyXYK7MCxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:73:8e:2e:2e:13:bd:31:01:3b:32:a8:c2:2a:7b:0a:b1:2c:
ce:7a:20:31:33:c9:04:c0:2c:7f:3d:63:b2:80:cd:09:c5:7c:
4b:4a:f4:42:c5:e1:da:d9:fd:0c:a0:50:90:28:8f:ee:2b:cd:
f4:88:16:4a:ed:2e:25:7e:1b:c1:c0:ff:35:ac:28:ae:54:0b:
ca:6f:e8:a2:bc:ab:f7:3a:4e:98:7d:44:bf:ef:7c:54:61:ee:
1b:bb:04:86:32:71:66:5b:1d:a3:3c:df:80:85:e7:e3:11:dd:
7c:ca:35:6b:d1:31:4f:2d:fa:40:09:56:22:e0:17:7c:99:8d:
bf:4b:d8:9c:48:08:1f:3a:2a:22:2d:1b:fc:af:6b:6a:90:ba:
b2:10:c0:3e:2d:ce:46:bd:c2:ba:a0:9e:6c:5a:68:2e:2d:21:
a5:ca:fc:28:33:38:83:27:8c:e6:1c:44:34:c7:fb:71:ec:a0:
c1:b0:6c:0d:f9:53:2a:c2:eb:9c:ed:18:b6:2d:8a:7b:57:ea:
31:e0:9b:49:7a:f4:51:7d:db:42:5a:a8:42:25:c6:99:f3:94:
27:41:a6:0f:01:21:7c:72:0b:dd:b0:03:0b:37:b6:77:32:c8:
0a:82:9f:98:9e:6f:e2:ca:8f:5b:dd:5c:82:b9:06:a7:db:52:
af:a4:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:38 2025 by rpki-client