Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: 5jX3PNjwoSN8Vp58NbWGojBw+iWFjqcw3tXa9laTnC4=
Subject key identifier: 34:C4:0D:9A:C9:B3:FA:80:B3:35:29:6B:B4:DA:67:90:81:86:E8:65
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 0197B70F550599258167C98ECBBAE2F5D7C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 06AC
Signing time: Sat 28 Jun 2025 15:02:04 +0000
Manifest this update: Sat 28 Jun 2025 15:02:04 +0000
Manifest next update: Sun 29 Jun 2025 15:02:04 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: i1xueTknvV76gUWBdI3rGEglmwFbi7jtz5Dv6f+eMQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:55:05:99:25:81:67:c9:8e:cb:ba:e2:f5:d7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Jun 28 15:02:04 2025 GMT
Not After : Jun 29 15:02:04 2025 GMT
Subject: CN=34c40d9ac9b3fa80b335296bb4da67908186e865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:64:42:00:e2:ba:1d:79:35:0d:c4:29:87:
44:57:b5:7d:8e:44:7e:bd:ea:3b:87:5b:6e:2b:7c:
9c:d9:ce:73:c2:98:ce:85:e9:d1:a8:f3:2a:27:a2:
ad:ba:c7:f1:88:ae:2e:27:61:b4:2b:1c:d7:6a:ed:
01:8b:16:ff:ab:08:72:4a:ff:69:7f:8e:8b:f8:ae:
5c:b4:42:cc:00:65:f8:a1:ce:1b:3e:e6:91:a3:ee:
03:80:53:e6:18:a5:1c:bd:64:9d:08:0e:df:f3:25:
92:d3:3d:ee:3b:9b:97:20:ef:5f:22:ca:5a:62:22:
ff:92:d2:e3:bc:74:11:ea:4b:d8:82:7d:24:0b:a8:
4d:97:ed:8d:ad:62:9e:49:d0:0c:8f:22:b5:a1:04:
18:18:90:70:da:0e:c4:3e:96:c6:77:05:0f:83:a9:
17:2e:32:6e:ef:24:b6:83:14:7c:7b:3b:f1:f5:c8:
66:69:94:71:35:45:f1:62:dd:eb:f8:cb:7a:54:19:
6f:5e:d6:2c:be:3d:1b:96:2c:e3:ec:2a:e6:05:f3:
76:98:6c:37:7d:97:67:7e:4d:b5:ae:98:53:21:7e:
d2:24:5f:18:94:cb:9e:65:91:17:1f:65:e9:1b:03:
92:fe:64:e0:6c:b2:8a:c8:77:30:76:d9:a3:d7:f0:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C4:0D:9A:C9:B3:FA:80:B3:35:29:6B:B4:DA:67:90:81:86:E8:65
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:dd:65:36:0d:22:c5:aa:de:05:3a:19:6d:57:0f:5c:bd:ce:
36:e1:ca:2d:73:aa:3c:de:2e:99:ca:2c:fa:5d:8d:af:b0:34:
91:b2:c7:90:48:69:a4:69:2d:7a:a6:b9:20:65:56:ea:db:e2:
cf:fd:db:72:c3:4b:67:d9:38:20:66:ca:2e:25:3b:03:97:e2:
4f:bc:0c:5d:7f:75:a7:e3:a7:e6:12:fa:44:c9:f8:65:a3:d7:
6f:a1:d6:6a:ec:4a:67:52:d7:18:32:39:a0:95:31:e0:10:ed:
77:6f:d0:38:f0:8a:2f:83:a2:a8:5d:3a:6a:60:88:0a:a1:c9:
4a:e2:57:68:7b:90:f3:43:74:68:61:ad:27:51:61:35:60:e4:
80:e6:e1:b5:d4:f0:90:48:21:8c:4e:07:2e:f4:ba:79:41:05:
87:45:63:01:26:d4:17:c2:82:54:82:1f:9e:b3:50:76:4e:14:
14:70:7e:fc:44:34:04:87:f2:fc:d4:ad:bc:52:cc:69:20:05:
4e:eb:b8:fd:ce:cd:78:f3:29:98:84:42:a4:5a:0f:08:27:dd:
c6:06:64:52:ed:c1:e9:6c:09:ca:c2:bf:df:bc:af:3d:19:57:
48:03:b0:7f:55:dd:21:24:c7:57:86:1b:ab:5c:43:fc:0c:96:
8d:94:ce:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:51:44 2025 by rpki-client