Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
File: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft (raw, json)
Hash identifier: pwbThCJoxgPg/aNPcYSlz/4weR9GIQ9EFd3bitc2yn0=
Subject key identifier: A3:6D:2F:67:E4:56:9A:3C:67:00:BF:28:FA:C3:46:0D:27:6F:81:6D
Authority key identifier: 3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
Certificate issuer: /CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Certificate serial: 0198D4E0C666A4BA6B44D7BEE434D8FE87CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
Manifest number: C7
Signing time: Sat 23 Aug 2025 03:02:37 +0000
Manifest this update: Sat 23 Aug 2025 03:02:37 +0000
Manifest next update: Sun 24 Aug 2025 03:02:37 +0000
Files and hashes: 1: PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl (hash: PJZq26vTWCY5j6oGW/rptuK9vdVC1z7A50JCdyOtkec=)
2: sWJaYxR8QxeFykRG1T7Dyn5LRfw.roa (hash: gT5e4Ztf/S3QhI6J9gtGfZQnZoP1YRQUOZiUmNVTEo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:c6:66:a4:ba:6b:44:d7:be:e4:34:d8:fe:87:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c0ebfb4cae5669c49f304be035aa457b8d35921
Validity
Not Before: Aug 23 03:02:37 2025 GMT
Not After : Aug 24 03:02:37 2025 GMT
Subject: CN=a36d2f67e4569a3c6700bf28fac3460d276f816d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:5a:f3:69:a7:7b:96:c5:ca:59:82:2f:59:
01:4c:74:4b:d5:b6:46:f3:24:99:10:2a:4b:de:a4:
95:8c:89:77:c2:b4:05:e1:e7:5d:29:a8:09:d5:ae:
2e:95:b8:46:83:5d:15:d1:d5:23:e7:c8:19:4a:57:
8c:3c:ce:b5:a0:f2:04:8f:55:3a:a0:4c:a4:3f:5f:
34:e1:a5:b1:29:72:ab:b2:14:f6:21:a2:39:02:a3:
2d:e1:4f:64:aa:82:7b:92:df:96:e9:1a:7a:04:92:
63:fc:f4:14:05:c7:12:5a:53:70:21:02:b9:cf:32:
ff:7e:db:6a:a9:fe:32:13:a6:fe:80:e0:50:ca:d4:
1f:ee:eb:e5:11:7c:2e:49:a6:1a:18:56:30:2e:53:
0f:29:0d:da:10:dc:a4:8f:36:82:6d:39:94:d1:ad:
4f:d1:cf:c1:91:62:d3:6f:94:ff:06:54:c4:53:c7:
e8:ea:70:ca:39:7b:39:58:e3:e9:8f:37:f6:99:3f:
54:47:fc:91:72:bb:df:6e:f6:36:c2:10:19:58:9b:
9d:92:78:3b:92:90:5e:c5:58:47:93:31:4a:6f:08:
01:97:b5:fe:20:f9:de:37:3f:c3:70:44:97:90:56:
2d:74:68:9f:43:bf:ce:c8:94:68:49:ca:66:8e:e2:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6D:2F:67:E4:56:9A:3C:67:00:BF:28:FA:C3:46:0D:27:6F:81:6D
X509v3 Authority Key Identifier:
keyid:3C:0E:BF:B4:CA:E5:66:9C:49:F3:04:BE:03:5A:A4:57:B8:D3:59:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f1fc7c-4922-491d-a60d-f2d23aae52c6/1/PA6_tMrlZpxJ8wS-A1qkV7jTWSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ae:98:12:ee:ff:47:90:78:69:23:18:94:4f:49:6c:3d:1f:
5a:86:0a:ee:c4:d1:71:aa:10:9a:9a:64:f5:f2:05:ff:98:cf:
50:5a:01:bf:dc:8b:fe:34:d5:95:e9:ec:88:fd:2e:6b:b2:80:
5d:bd:01:d6:6a:15:45:c3:89:19:7f:bc:29:5c:ed:f1:09:b4:
2a:28:0d:8a:c0:bb:f6:c5:9b:e3:9a:39:b6:7d:a1:15:2b:ea:
ab:a4:6a:ad:e0:5a:c7:28:cc:db:03:a6:0a:45:d6:5f:89:ad:
68:4a:4c:20:94:1a:60:9e:c2:bf:3a:7c:26:0b:66:82:16:9b:
21:1b:2e:f0:d2:77:fd:df:70:11:32:ea:73:e2:92:19:7d:f8:
66:25:fb:2f:ef:27:96:30:57:02:36:76:01:90:c4:e5:71:c4:
67:23:63:c5:b4:34:18:7d:7c:c9:5e:e4:17:9e:26:18:ea:f6:
81:75:a3:07:83:f9:ec:65:ff:98:a9:16:d2:7f:2c:7e:64:3d:
95:37:1a:d2:dd:7d:1a:57:10:99:10:20:a3:0d:06:b7:ad:dd:
e3:01:28:0e:ce:00:c5:ed:1b:c0:92:68:5a:62:25:81:34:59:
bc:43:fe:dd:05:12:05:1f:28:d2:5f:c8:b8:c9:73:44:36:40:
4f:98:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:19 2025 by rpki-client