Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: 3CoGT3/xpC3I/mqTbA7W1iGHTXZ43B0t3nOq8ssXpSE=
Subject key identifier: 24:47:5E:08:5F:6B:AA:BE:A9:1B:7B:A3:18:56:A8:6A:B5:B6:B7:99
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 0197B6328B26A3FE120A7001A6ECE0792834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 0FBF
Signing time: Sat 28 Jun 2025 11:00:54 +0000
Manifest this update: Sat 28 Jun 2025 11:00:54 +0000
Manifest next update: Sun 29 Jun 2025 11:00:54 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: 11lW4kD0j/HcLOEdcFzVYC0Q3AxMwGhUqiTmTUVHTzY=)
2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8b:26:a3:fe:12:0a:70:01:a6:ec:e0:79:28:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Jun 28 11:00:54 2025 GMT
Not After : Jun 29 11:00:54 2025 GMT
Subject: CN=24475e085f6baabea91b7ba31856a86ab5b6b799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:35:61:eb:75:59:28:c8:a6:2e:00:27:0b:cb:
0d:c1:1d:c9:5d:a1:13:67:ed:ee:19:ce:6c:15:1f:
d1:f9:3d:c9:bc:28:53:e4:7d:aa:4c:6d:84:b1:26:
db:79:e7:ab:e7:9b:19:69:63:47:8c:c6:12:ca:cf:
73:2e:4d:6d:2a:11:e9:9f:b7:ae:04:0a:fb:46:da:
1b:3b:b2:9c:2e:79:28:92:a4:81:ea:1b:34:8d:fa:
a0:16:54:3d:36:4f:68:db:5a:15:91:ef:6a:cf:80:
70:ef:8e:f9:bf:9f:50:8a:25:d1:7f:c7:6b:25:a7:
8a:38:67:e4:83:e1:91:53:66:ce:ba:63:9d:2b:c4:
b4:04:0e:e1:72:77:d9:77:9e:7f:9c:33:e9:e0:c6:
27:a2:17:e3:cd:71:99:c7:7d:a1:ab:4f:be:84:31:
59:d7:85:11:86:4a:0c:be:3d:1d:e1:6c:55:dc:43:
c4:74:d1:d0:d6:0c:b3:6e:f1:bf:fa:57:57:da:2d:
db:ab:ad:80:83:f6:8d:a3:66:a8:f8:71:49:fd:92:
fc:db:79:32:c2:10:93:a5:d7:56:f2:e7:1c:93:0a:
dd:b9:a5:7e:c2:50:0d:20:6e:63:34:f0:dc:5d:38:
fa:2d:c6:47:f3:50:df:ff:01:ef:9f:0a:20:5a:1b:
a0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:47:5E:08:5F:6B:AA:BE:A9:1B:7B:A3:18:56:A8:6A:B5:B6:B7:99
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ef:4c:1d:92:b9:da:8a:3f:40:a3:63:7a:f6:39:b4:5a:ef:
8b:7f:8b:ee:e6:80:22:77:d5:ed:29:2c:3c:ba:65:89:87:94:
e7:a0:91:03:98:27:26:ab:ae:09:3b:31:58:41:dd:50:95:2f:
05:60:4d:b2:09:ed:06:8b:11:fa:a1:5a:65:77:a3:c2:ff:20:
db:f8:79:b2:01:2e:e9:c2:05:9b:ea:9d:b8:ce:81:13:0a:4c:
47:ad:da:ba:3b:55:b2:a8:2c:76:0d:59:6d:78:10:b4:ef:1e:
ac:45:17:e8:5b:cd:79:0c:ba:87:34:cc:c7:87:ed:cb:2a:04:
68:a0:c3:ea:d0:6b:88:69:39:93:fa:ef:fe:b7:05:94:52:bd:
ed:a8:bc:57:c4:5d:42:01:46:f1:ea:44:13:48:ae:b4:f0:bf:
99:c8:22:0b:31:94:9d:25:e2:fd:75:ad:66:c2:bc:b7:e1:72:
bb:2c:44:e3:9c:05:b6:93:61:f7:13:2c:2f:4e:fb:19:89:e5:
75:1c:6a:0d:72:b7:82:ed:20:08:1e:73:ac:76:62:41:f4:bc:
f1:ea:d9:22:0b:a7:dc:c2:c0:42:b2:8d:0f:2e:2e:fa:b3:a4:
b3:0b:c1:0b:2d:52:3c:ef:83:d1:94:cf:ab:2b:97:ca:dd:8f:
a5:8f:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:09 2025 by rpki-client