Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File: P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier: CIAOTmsMmKMLWRWmFCEN0nSXy7IFK+ueZB9msK4AxqU=
Subject key identifier: 80:7B:5F:0A:60:F8:B5:8B:9D:74:26:E4:F8:D3:D2:BB:AE:56:6D:68
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer: /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial: 0197B632958F7AF51A2B9FE61C2839C588B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number: 159C
Signing time: Sat 28 Jun 2025 11:00:57 +0000
Manifest this update: Sat 28 Jun 2025 11:00:57 +0000
Manifest next update: Sun 29 Jun 2025 11:00:57 +0000
Files and hashes: 1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: h27nyMxMO4Jutu5hcuhgFCd/lKx5W10larbOlnV34Qg=)
2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:95:8f:7a:f5:1a:2b:9f:e6:1c:28:39:c5:88:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Validity
Not Before: Jun 28 11:00:57 2025 GMT
Not After : Jun 29 11:00:57 2025 GMT
Subject: CN=807b5f0a60f8b58b9d7426e4f8d3d2bbae566d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7d:2c:fe:09:35:82:a7:0a:1f:45:49:a4:b3:
23:d8:34:5c:90:93:91:9f:13:0b:0c:c7:74:1d:47:
1a:73:f8:f9:f4:08:cd:b0:3b:82:38:20:1f:f5:8f:
17:f9:4a:ed:5f:b1:67:72:6b:02:e5:f1:a6:c7:29:
90:d8:cd:9f:58:d1:70:49:2f:2e:17:71:fd:6d:8d:
08:ea:0d:01:b6:e9:c8:8c:78:ae:82:12:b7:82:1b:
c0:5e:2d:3c:27:fe:7c:46:de:0b:35:3d:9b:de:03:
f7:2b:6b:0e:7c:e1:ed:2c:f9:32:77:f5:31:41:1e:
4e:f0:21:9f:1b:ff:37:b2:34:12:41:4a:bb:b7:84:
65:96:8e:ff:43:77:f8:03:94:55:76:24:83:c0:64:
0c:6b:12:4e:ee:ab:80:77:c4:a7:b3:25:81:36:ef:
4b:39:09:87:0b:24:12:4d:07:5e:e7:66:d5:d8:f0:
9a:a5:8e:b0:2e:9e:19:60:3f:68:df:68:e9:06:ae:
64:6d:48:e1:31:6f:32:ab:9b:76:2b:d5:9c:08:1c:
bf:21:f6:9f:92:66:47:e5:36:8f:d2:20:ca:8c:8e:
50:ef:95:17:8f:8e:89:49:24:60:17:c4:b8:67:8c:
5b:d8:19:7f:b3:68:1a:99:88:89:58:2c:e2:62:8b:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:5F:0A:60:F8:B5:8B:9D:74:26:E4:F8:D3:D2:BB:AE:56:6D:68
X509v3 Authority Key Identifier:
keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e2:76:5b:2d:96:8a:c9:82:bd:38:ea:1f:c3:a6:12:c3:e3:
e9:6b:c9:e3:86:33:3d:7b:03:35:27:12:e4:91:52:f1:2b:8b:
99:55:ce:b2:b2:e4:2f:45:df:5e:78:65:80:eb:bb:3e:c3:6a:
2a:33:55:1a:4f:c6:e3:39:7c:c1:b8:1d:10:b8:b3:85:c8:76:
2b:8e:3b:de:a7:41:12:f9:fe:d5:a3:85:c5:73:09:db:18:9f:
c2:4a:e0:89:88:84:74:08:5c:65:c6:8b:32:63:a3:bf:a8:29:
f5:5c:a5:0c:1f:a1:46:6a:84:25:f2:40:21:27:4b:97:44:3f:
69:1b:8d:2f:eb:65:50:4f:bc:22:cb:28:41:28:3a:ee:d7:08:
f0:07:79:00:f0:ff:08:8b:65:20:18:ea:08:83:cd:b7:b3:c5:
61:90:e3:c8:44:76:cc:a4:0d:1c:c6:65:19:de:a9:ac:bd:86:
69:49:4d:c5:78:b7:e4:b2:7f:00:8d:fa:6d:f7:2f:bf:55:43:
4e:0a:18:85:4e:d5:c4:d6:35:1d:2a:cf:da:71:d2:01:a8:8d:
75:db:95:43:bf:89:8b:18:81:a0:b1:c7:f5:91:b6:0b:c1:88:
15:6a:c5:1e:88:5f:40:e5:fa:9b:36:0a:a0:57:9b:21:fe:e3:
78:3c:58:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:13 2025 by rpki-client