Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
File: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json)
Hash identifier: M0idlJm9lgqG2bd97m66DSZ6uzRECSBOV8PXOQAg9mc=
Subject key identifier: 09:B9:99:23:D4:51:8D:01:79:3A:4C:8D:D0:C8:3D:1A:AA:C3:1F:97
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial: 0197B70F3BCAB993CBCCB0146D5844FA8AC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
Manifest number: 33
Signing time: Sat 28 Jun 2025 15:01:57 +0000
Manifest this update: Sat 28 Jun 2025 15:01:57 +0000
Manifest next update: Sun 29 Jun 2025 15:01:57 +0000
Files and hashes: 1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: DKv+1KLYNBn8E2yNF263vZZRDGFp3Tc/o3Oz4pAMe84=)
2: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (hash: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3b:ca:b9:93:cb:cc:b0:14:6d:58:44:fa:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Validity
Not Before: Jun 28 15:01:57 2025 GMT
Not After : Jun 29 15:01:57 2025 GMT
Subject: CN=09b99923d4518d01793a4c8dd0c83d1aaac31f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:6c:01:6d:23:52:bd:19:ff:77:d3:79:5d:
ee:ae:69:bb:95:cd:7b:b2:94:76:4f:0d:a2:56:28:
b4:87:54:22:1f:40:d1:35:9e:e6:65:d7:aa:b0:ab:
50:dc:dd:55:6a:26:d3:a7:01:83:63:9c:da:6a:fa:
87:4e:de:26:90:58:5b:e5:c2:bd:a1:cf:2c:b5:1c:
7d:46:a3:5a:69:15:12:20:f5:73:34:f2:04:31:13:
a1:15:69:c7:a4:a2:6c:0f:16:a1:0e:6e:df:12:ad:
b7:6a:fa:e1:18:fa:bb:e6:aa:2a:19:45:7c:2f:b9:
b4:7f:0e:21:0a:bd:ea:f9:3c:1f:48:21:31:89:1d:
e4:43:be:f4:3d:ee:28:00:81:72:a6:cb:f6:d8:77:
ac:71:f3:a5:2e:97:b4:bb:d2:87:d4:15:de:05:bc:
96:96:8b:1a:f7:7a:43:5d:e8:56:cd:2d:17:46:1c:
bd:85:ef:1c:e3:36:7e:8e:5c:f7:19:ba:5b:ea:8d:
bc:2e:82:12:01:39:2e:6d:49:89:a0:03:dc:1a:75:
f9:4a:33:ed:db:18:6d:b1:16:e4:55:01:7f:ec:e7:
65:63:1b:aa:73:42:56:9d:3f:8a:c2:59:d9:ca:67:
b2:18:a6:0e:c6:52:5d:fa:ba:43:49:3a:fa:17:b7:
78:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B9:99:23:D4:51:8D:01:79:3A:4C:8D:D0:C8:3D:1A:AA:C3:1F:97
X509v3 Authority Key Identifier:
keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:30:5a:08:b4:4b:57:9b:fe:b8:e8:3d:89:6b:69:b1:4f:a1:
b5:ac:8c:c7:8d:6f:fe:46:6d:9f:21:bf:76:9a:56:8b:be:e7:
2b:bd:9b:b7:22:9e:2c:63:9a:fa:07:86:e0:e3:09:4c:f0:18:
b3:a6:99:e7:35:b9:f2:5d:88:62:2f:52:4c:c2:87:18:c2:fe:
d2:af:90:36:8a:3b:68:fd:ba:70:87:5a:2d:ca:04:0d:e1:7c:
bb:1e:b4:f0:0d:bb:42:c7:0e:09:47:a2:f8:c5:f9:f1:8e:07:
81:25:1c:66:7f:31:20:ff:80:70:7b:b4:92:29:8b:b3:be:08:
94:3e:9e:34:83:71:5e:8b:26:6d:05:5f:4f:cc:88:fc:9c:2f:
28:a8:9a:8c:0c:ff:a1:20:4d:7d:32:69:23:88:2a:4f:c1:3d:
ae:ab:cf:95:7a:d3:8b:3d:cd:c5:8d:85:a6:ef:8f:e2:25:c1:
a9:80:d4:0f:f5:e5:f8:15:72:49:16:b4:9e:18:84:57:2b:bb:
ff:2e:51:20:f9:8c:a0:02:33:93:a0:7e:8a:34:10:9d:b7:e5:
18:dd:9f:5e:9a:96:b0:ec:da:9f:bd:39:1a:67:88:26:94:19:
b5:ec:7a:e4:80:e6:78:b2:0f:b4:a6:05:0f:4e:56:04:61:20:
dd:68:4f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:14 2025 by rpki-client