Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
File: PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft (raw, json)
Hash identifier: Ygx2SuZK71FiMhgHXOVSnWct01+H+IRNqcIpnietBk0=
Subject key identifier: 23:27:C3:C3:94:A1:B0:C3:CD:C5:F5:23:51:74:F7:E9:1D:A6:FF:09
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 0196BBC8E8FECDE36DB377BFD1BD6483C4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
Manifest number: 06C6
Signing time: Sat 10 May 2025 20:00:28 +0000
Manifest this update: Sat 10 May 2025 20:00:28 +0000
Manifest next update: Sun 11 May 2025 20:00:28 +0000
Files and hashes: 1: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (hash: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=)
2: PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl (hash: hKRvSRhAW9PwGBvmUFwh2kHedxi2ddLYbqgyhFBse4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:e8:fe:cd:e3:6d:b3:77:bf:d1:bd:64:83:c4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: May 10 20:00:28 2025 GMT
Not After : May 11 20:00:28 2025 GMT
Subject: CN=2327c3c394a1b0c3cdc5f5235174f7e91da6ff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:29:1b:46:54:19:02:c9:fa:56:4b:cb:7a:bb:
21:e6:c9:7c:f4:b9:cc:22:52:21:7e:bc:be:01:83:
12:a3:7b:7a:d1:c2:04:77:a5:92:08:36:02:01:14:
06:96:c4:97:9a:d0:fe:e1:a8:77:93:e9:dc:ca:15:
0c:6e:43:ba:bb:d1:e5:fa:12:49:5c:82:19:6b:fc:
42:dc:f7:d1:3d:1e:49:70:6c:0f:bc:13:02:35:42:
76:b6:0b:50:00:1b:40:f2:19:b6:93:9a:44:0a:6e:
96:69:ae:0d:1e:d3:be:09:ae:91:a0:57:a3:5a:d6:
59:ac:b0:9e:70:6b:0a:77:07:97:da:e6:55:65:b3:
bd:98:d7:0b:0d:9c:a9:50:c8:54:77:a1:52:75:d9:
d1:f2:78:9b:f8:28:0d:f2:79:a8:99:ed:5d:55:69:
81:de:3e:ee:fe:61:3c:73:88:1c:39:d3:b6:ba:53:
cb:81:5b:99:ae:8f:34:c9:72:7f:6e:de:76:ed:62:
a3:60:f4:09:39:bb:d0:92:21:be:29:a9:06:15:1b:
29:8c:2e:ab:c2:e5:23:f0:5b:3d:cf:de:cd:38:5f:
4f:31:04:78:56:3d:84:d2:fd:a4:c5:6e:ee:00:30:
e2:db:26:ce:53:30:8e:62:d9:a7:ac:b5:9c:18:24:
d4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:27:C3:C3:94:A1:B0:C3:CD:C5:F5:23:51:74:F7:E9:1D:A6:FF:09
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6a:c7:ec:32:52:30:f9:bb:e3:e5:5a:6e:a4:b4:41:15:6b:
09:24:e3:a5:cd:bf:52:cf:c6:1c:86:8d:18:9b:0a:db:24:8e:
40:0d:17:22:91:31:0a:1c:69:41:dc:07:bb:9b:3c:d9:5d:14:
63:3b:3d:a3:01:a2:6d:07:00:eb:89:49:1b:53:6a:9e:40:cb:
d8:05:d1:64:fe:e0:1d:d6:9b:fd:e4:bd:43:f7:65:7e:6f:b1:
48:9d:55:e5:1c:d0:8e:61:cb:c7:48:10:17:ba:8a:62:f1:1c:
b7:b9:6f:bb:c1:53:ac:93:b0:e0:f6:6d:b4:8c:2f:bb:81:0f:
8f:33:0c:63:3c:9b:42:d5:90:ed:6d:d9:3d:f9:d0:80:e6:24:
4c:1e:d1:0f:77:58:be:3a:72:f0:9b:0d:88:12:49:0b:bc:f2:
7d:4f:86:80:7c:44:10:14:86:04:3e:c2:29:a2:d0:d1:35:1c:
b2:a1:b3:37:ef:f9:43:f4:59:24:69:07:c0:52:c9:76:5d:3c:
b0:ba:24:67:c3:3f:f3:01:54:70:70:b1:a7:72:5f:4f:36:0f:
41:ea:7f:9e:7e:a0:02:cb:36:1a:a3:dd:04:23:32:3c:0f:bb:
32:a7:4c:5c:fc:a3:db:72:5f:a3:67:e9:46:e0:dc:ce:81:06:
59:8b:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:30:55 2025 by rpki-client