Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier: sgOKjwtTdy4KDeBCJGh43ToVIuUYgQesRYKK73YRvwY=
Subject key identifier: 81:27:F2:3A:2B:C9:B6:B6:DE:79:EC:EC:21:3A:F1:C4:79:DA:82:47
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer: /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial: 0197B7B304BC624C8DEA4EC3230E1EF4FA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: 6jGlJHA4XTLn4D0Rs/dSdUgpB5ZUdjayHidFNixZV6U=)
3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:04:bc:62:4c:8d:ea:4e:c3:23:0e:1e:f4:fa:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=8127f23a2bc9b6b6de79ecec213af1c479da8247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8e:ea:80:df:fc:82:73:30:f8:e0:92:63:fe:
c8:be:41:a6:d3:c5:1a:fa:0a:88:19:65:56:fe:c9:
3f:81:98:1c:67:8c:7d:7d:b7:3d:3c:c5:2a:43:33:
99:f9:6e:18:da:dc:40:88:c9:1b:5f:6c:07:11:ca:
a0:10:0a:d0:57:4c:87:8f:99:c9:77:99:7c:ce:45:
4e:42:0d:97:db:f6:a1:a3:6d:1e:d3:9e:56:21:56:
0a:ab:6b:8f:90:d6:64:1e:ae:47:bf:a2:23:4a:67:
51:ac:d1:2c:02:f5:37:11:83:4e:79:3b:68:75:2e:
39:9a:d0:2a:41:8e:80:88:db:04:94:21:67:ad:c7:
07:07:96:fb:f8:2b:a0:27:cb:13:11:f5:29:20:e2:
ea:4b:f9:48:62:f7:1c:e9:7a:bd:36:d0:34:f6:60:
f3:c5:28:3a:d3:e2:1e:81:45:f2:56:23:65:e7:16:
dd:36:7c:59:56:7e:b9:54:af:f1:13:12:e0:45:b0:
b5:5d:01:66:69:67:c6:ea:0b:f1:a9:cd:06:dc:b4:
89:ab:76:3f:c6:e6:68:ec:27:84:f8:9e:2f:a3:7b:
52:35:a9:b4:d4:37:5c:5c:d4:42:7d:f6:c8:d5:12:
c9:c5:e9:2f:b7:ce:50:4f:ed:48:c6:0d:65:2e:81:
ac:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:27:F2:3A:2B:C9:B6:B6:DE:79:EC:EC:21:3A:F1:C4:79:DA:82:47
X509v3 Authority Key Identifier:
keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:02:79:e2:59:28:7b:69:76:21:da:98:c5:48:11:86:5c:42:
9f:36:24:e4:b5:4f:8b:69:34:3f:b4:d2:a8:41:0d:55:c7:70:
17:59:1f:15:b0:2e:4f:c2:ac:d5:bd:5b:ab:c2:2a:ea:4d:25:
4e:9f:6a:04:78:5f:d0:08:6c:cf:04:59:c2:43:b4:3a:18:fe:
ce:0c:eb:2e:91:8c:f6:b3:dc:c4:8b:d6:be:8b:18:c7:b7:65:
76:52:45:62:db:0f:cf:0e:11:f7:46:28:48:f0:f5:9b:9f:aa:
fc:1e:d5:71:31:c4:65:ef:3c:1d:2f:16:e0:b7:91:a9:e3:09:
73:f9:e6:13:e6:ed:c0:20:9e:19:43:a6:f2:1d:a3:fb:8f:91:
66:a9:7b:d6:c6:b1:c6:d9:4f:75:75:83:f9:d6:7c:30:11:88:
72:4b:50:13:fb:a2:e6:00:46:61:67:1c:16:96:eb:25:0f:2d:
35:26:fe:4e:b8:18:66:4a:e9:bf:7b:19:81:17:44:83:4f:45:
aa:c6:e1:c5:77:ec:9d:77:c4:85:3d:c7:47:b4:43:ca:b1:6f:
62:85:1e:2b:e7:a2:30:21:a8:2f:83:17:a0:61:60:93:62:4a:
7b:ce:db:6a:3b:a2:42:2e:4c:60:41:79:73:4d:ef:61:82:7f:
41:8f:11:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:03 2025 by rpki-client