Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: 7oprZRHrprdIOpC+HLRmYAIV3D1LRh7TxHhd/Um24uA=
Subject key identifier: 86:1A:55:39:05:1F:C1:21:48:62:E2:5A:95:F7:D1:E1:7A:55:78:CF
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 0197BA0F2E34872C63D2F9FA892FE821C298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 05:00:46 +0000
Manifest this update: Sun 29 Jun 2025 05:00:46 +0000
Manifest next update: Mon 30 Jun 2025 05:00:46 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: 76fVxBitk6Bgvr5F+akxQoMbuRQ8CKoaRlxvVrfk7bM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:2e:34:87:2c:63:d2:f9:fa:89:2f:e8:21:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: Jun 29 05:00:46 2025 GMT
Not After : Jun 30 05:00:46 2025 GMT
Subject: CN=861a5539051fc1214862e25a95f7d1e17a5578cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:5d:ca:90:6d:3f:47:08:f1:af:37:1f:d3:
24:bd:9a:d2:75:cc:95:38:04:71:5f:33:7d:4c:c8:
0e:3c:9c:9c:2e:4d:88:c0:43:10:1b:28:58:d2:93:
f4:1d:aa:2c:2c:45:a3:c1:d6:a7:b3:02:68:76:11:
06:a0:4e:58:19:7d:5c:08:75:9a:c5:70:ab:b6:c1:
d1:3c:d5:af:40:5b:99:b3:73:46:9a:79:08:f7:9b:
c7:e3:5c:93:4d:b8:24:79:e8:36:86:d9:1e:06:9b:
79:61:43:6a:90:a6:6b:cd:40:56:07:ff:44:37:40:
6c:4b:28:05:f4:0d:b6:ff:78:a1:71:ea:41:b8:e3:
8d:69:2f:06:5c:74:d8:7d:58:89:d8:49:44:4b:a2:
6d:1a:11:2f:d7:b4:77:4f:4f:f7:47:d0:44:e9:8f:
4a:c7:b6:23:e5:18:a7:d9:da:09:37:80:0b:a5:c2:
d4:2e:3f:28:c2:30:7d:23:34:8f:c8:00:4b:b3:b8:
a1:a2:17:9c:22:b2:86:7d:98:2a:54:cb:3f:b8:2d:
9d:cb:dd:9c:41:46:bf:18:9a:c3:e7:d3:56:25:c8:
24:2e:ba:32:f4:5e:77:14:b6:09:db:ed:2b:49:7f:
d2:21:54:b3:b9:b3:fb:1f:40:fc:a8:25:e6:0c:e7:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:55:39:05:1F:C1:21:48:62:E2:5A:95:F7:D1:E1:7A:55:78:CF
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:53:28:14:3b:85:47:4b:bb:70:ac:f4:c1:b6:38:fb:38:
28:96:cc:3a:87:40:d4:4f:cc:fb:77:6d:cc:de:3d:93:30:a6:
72:3b:ca:f2:18:47:88:06:b8:52:8a:fc:60:81:9a:d1:4a:fc:
97:3f:d2:e9:8f:1d:b2:a2:41:04:bf:ff:3a:5d:a3:64:c8:af:
a3:e5:17:8c:55:0c:e5:ea:af:34:9c:22:11:aa:84:3d:3c:92:
98:f3:18:0d:db:3c:3a:d0:47:00:15:5e:22:3a:ec:ed:78:8d:
05:36:af:f6:bb:22:dd:80:2d:97:9b:d9:1f:d0:2c:6a:ac:f3:
c4:3e:62:6f:2c:35:94:2b:eb:42:ea:c0:38:ec:99:6d:3d:88:
c2:59:93:9a:14:83:c9:d1:05:8f:53:e2:0c:a7:18:bb:37:03:
f6:a6:b1:0d:e2:bc:b8:0d:8d:ab:1d:db:ab:d6:de:da:1f:43:
1e:6c:69:26:99:39:d7:c8:ff:4c:d3:01:14:3a:5a:1e:1b:9e:
0d:60:2d:7a:46:fb:57:68:db:18:e8:06:4b:59:9b:11:7e:a5:
a0:b4:c9:79:fc:7c:a1:a1:05:22:fe:67:5a:8f:4f:a3:51:5f:
88:58:1e:a9:71:a9:e5:fe:cb:90:af:c2:37:f0:06:3f:c3:b9:
5d:5d:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:31 2025 by rpki-client