Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File: PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier: ERNUqLUN+FofxeCJC1JQCb5Y7AqXv3Ebr0973hld+LI=
Subject key identifier: F9:9D:BD:D2:4F:3E:E5:25:1C:51:50:ED:80:DB:49:9F:66:6F:85:87
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 0197B70F362625FD7F1F29F38885C8E0C420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:56 +0000
Manifest this update: Sat 28 Jun 2025 15:01:56 +0000
Manifest next update: Sun 29 Jun 2025 15:01:56 +0000
Files and hashes: 1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: e9jjMSue+DTxY2i7dHnIE1I8OqCFmBRqBmv0uzR7vZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:36:26:25:fd:7f:1f:29:f3:88:85:c8:e0:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jun 28 15:01:56 2025 GMT
Not After : Jun 29 15:01:56 2025 GMT
Subject: CN=f99dbdd24f3ee5251c5150ed80db499f666f8587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:4e:09:df:2f:cc:1b:cb:22:c7:b8:01:c2:
e9:ca:a6:54:5f:64:02:e3:dc:fa:dd:af:88:e5:e4:
90:50:4a:c7:04:3d:c8:ce:8c:3e:65:09:63:54:80:
51:2d:dc:26:b9:10:bb:d2:3f:9a:08:65:87:3a:4d:
a3:bb:98:9f:ec:16:23:12:ed:9a:03:45:44:f2:53:
f5:e3:da:f4:ca:60:c6:28:93:ec:f4:df:f4:10:19:
7c:51:a3:87:16:ad:c1:79:9a:9f:d5:bc:86:5b:a4:
74:08:ed:3e:19:af:c1:1a:88:a5:f0:4b:32:fa:08:
d7:e0:82:85:04:35:71:2e:56:2e:ce:e3:4d:c3:fb:
50:d5:f9:44:59:84:7a:32:bd:6c:57:7b:0e:e1:a6:
a8:d3:60:8d:05:da:a0:58:3f:74:d1:d4:d7:49:84:
8c:12:42:b5:b1:a1:3a:af:92:2f:c4:ef:7f:6b:a5:
82:d7:e0:88:c4:02:78:30:60:62:ea:9c:d5:94:25:
c2:f5:f9:46:29:61:63:f7:6f:8f:f1:32:ad:23:2b:
6c:9f:ed:60:26:b8:70:09:84:9d:a4:c7:b1:0e:bc:
d3:fe:9b:18:64:35:23:91:9d:7f:49:7c:af:5f:a2:
6d:3f:c6:9a:42:5a:a9:b9:83:c8:d9:57:fc:22:eb:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:BD:D2:4F:3E:E5:25:1C:51:50:ED:80:DB:49:9F:66:6F:85:87
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:49:1d:bf:40:f6:5f:cc:28:ab:6a:93:ac:2c:c0:e7:2e:b7:
e4:a0:2d:36:3b:eb:1a:b7:8f:4a:79:66:9e:6e:02:45:6e:29:
fa:17:91:8a:a3:83:d1:f7:9c:a5:e5:ff:5c:b9:30:d0:4f:aa:
a1:f8:67:ba:13:70:5b:04:58:61:a9:1d:48:b0:6c:04:85:8e:
24:3f:2a:a1:e3:70:8d:12:24:84:c8:7e:21:c8:6b:a0:71:57:
9e:5a:5b:02:0c:a8:5b:56:fb:c6:60:62:b2:f6:89:a1:e2:9d:
21:5d:57:cb:c5:82:56:37:03:7a:83:e7:c3:d6:2e:23:0c:bf:
23:05:88:81:5b:af:0c:82:d4:cd:e0:16:ce:87:f8:51:04:d5:
02:40:16:20:a4:8d:83:8e:ca:ad:09:c6:c6:d5:4e:c2:b4:e1:
8c:3a:52:10:d9:46:71:ba:bd:f2:b3:08:ab:6c:8d:1a:8c:e8:
29:d6:1e:61:13:e3:77:4a:bb:93:3e:6e:a0:85:20:6b:b6:de:
42:48:ec:23:e5:98:10:71:0f:2f:ac:82:c7:29:6e:bf:d6:17:
ef:e6:9c:d3:42:47:63:0c:63:ed:ed:35:29:47:1b:0d:59:67:
d3:68:c3:39:93:97:d4:43:b0:b9:27:6f:37:99:6a:5d:20:eb:
03:41:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:03 2025 by rpki-client