Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: JljH7C/WmjxsMPFo1A8zbtB6c4RnoGQZeW6uFi5VI94=
Subject key identifier: AE:98:59:A6:7E:21:10:80:A4:14:A9:D2:DA:41:EB:E4:70:8A:9F:22
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 0197B6A0C0FE26016BBFED8640652F9E1416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 059F
Signing time: Sat 28 Jun 2025 13:01:17 +0000
Manifest this update: Sat 28 Jun 2025 13:01:17 +0000
Manifest next update: Sun 29 Jun 2025 13:01:17 +0000
Files and hashes: 1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: UFGkrd/zo6dcHU6ypw2OV2gjIbE7lX5Ptkq2JwJhLLc=)
2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:c0:fe:26:01:6b:bf:ed:86:40:65:2f:9e:14:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Jun 28 13:01:17 2025 GMT
Not After : Jun 29 13:01:17 2025 GMT
Subject: CN=ae9859a67e211080a414a9d2da41ebe4708a9f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:bf:c0:1c:73:f1:28:2d:d1:1f:e3:6f:ca:
58:3f:64:c6:c0:3d:b7:9f:76:c4:09:af:6c:91:5a:
2c:1c:df:03:b6:93:26:94:f8:4f:28:f1:9c:82:20:
a2:e5:4c:da:af:72:ae:42:de:c6:2e:82:fd:f0:1a:
e7:7a:33:fa:bb:35:44:c8:a6:ef:86:46:db:99:b4:
a1:8f:aa:5c:c8:77:3f:75:8a:6a:e0:00:79:fa:85:
e6:aa:c1:3c:7f:c8:01:77:b1:89:cc:ce:06:c5:24:
e9:5c:99:5e:09:b8:00:f4:37:56:46:e4:f0:e2:2c:
75:15:f7:3f:d1:4b:f7:a6:f3:dd:59:e3:76:5e:01:
1e:66:2f:31:a8:fb:50:50:24:5a:1f:fb:d1:56:2f:
d6:30:45:1c:c1:ca:1a:f9:ff:e0:79:0b:97:71:16:
3a:ad:b2:c6:22:91:54:f2:e7:84:7b:1f:ea:66:38:
82:65:ab:2d:fa:16:cf:86:fc:72:ba:52:f8:08:04:
e3:85:c9:02:88:67:6c:58:9f:87:72:b0:72:9e:44:
1c:2d:1d:c6:4f:d9:51:53:2f:6f:43:72:e0:05:c0:
e0:16:5f:19:40:41:ba:56:11:e1:8e:ff:a2:f9:6c:
84:d7:23:de:9e:bd:ab:5c:72:58:a8:f9:93:c0:e9:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:59:A6:7E:21:10:80:A4:14:A9:D2:DA:41:EB:E4:70:8A:9F:22
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:88:c3:1c:59:1c:9d:55:2b:17:a9:d1:7f:01:53:f2:ba:8c:
d2:fa:49:a0:82:18:c0:fe:dd:09:27:eb:6c:ee:40:92:16:48:
7e:b9:c3:e5:d6:8a:9d:c9:ec:f2:64:77:9e:c6:3b:17:bb:80:
18:e5:7c:d4:58:ec:c8:29:61:eb:98:06:94:6c:c4:ee:1d:8a:
da:b9:9d:ba:8e:24:c0:3b:dc:94:73:20:07:13:ae:68:c3:bc:
3c:9c:2c:70:0f:fe:1b:d4:b5:0d:e7:0c:35:57:f0:b3:bf:d1:
48:f3:95:45:d2:2a:5d:5e:b0:81:e5:83:e8:e7:41:0f:ed:ad:
60:af:54:ce:86:40:94:da:61:d9:bd:3d:df:9a:b0:95:a9:b6:
2b:00:29:4c:08:fd:85:e0:4e:bc:9d:6d:16:52:0d:b7:41:41:
ba:9e:d2:c3:72:7e:56:4e:c4:99:52:0a:4e:7b:f3:4b:13:e3:
b4:f6:31:de:c3:7d:5c:55:51:51:07:46:96:5d:79:73:b5:00:
f0:89:9c:4c:aa:1d:9e:d1:fa:d4:5c:84:c6:a5:7b:1a:4d:e7:
50:d7:1f:73:ca:f8:3d:22:c9:a8:e2:eb:52:a9:af:85:d6:38:
54:32:25:db:c2:b2:f7:62:94:38:ec:99:3d:ec:50:94:c6:8f:
4a:98:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:45 2025 by rpki-client