Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File: PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier: NpCngBYxIzjoRrngjoIbrf9fgXSDriEyZMD3e2FF6KI=
Subject key identifier: 59:48:E5:B6:70:C6:A5:B0:D1:3B:08:EC:A7:7A:88:96:BF:4F:EE:BB
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer: /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial: 0197B70EE4DE2D64E1023BEFD0FCC722DC1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number: 106D
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: BGB9BsNq2a0OZlZbVM4JKX5KgR35mIMJBh2pZS3yio4=)
2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e4:de:2d:64:e1:02:3b:ef:d0:fc:c7:22:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=5948e5b670c6a5b0d13b08eca77a8896bf4feebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:47:d8:51:e0:39:ab:0d:c3:69:97:8f:7b:69:
0c:f9:4e:16:d8:28:4f:ca:70:9d:90:e3:5e:4a:60:
53:15:6d:90:49:82:5b:06:8c:68:3a:d9:da:6b:a7:
6f:90:88:05:93:7f:ea:9b:64:a2:73:56:12:4e:19:
dd:97:09:75:39:b3:a9:eb:57:15:91:34:67:e9:1f:
15:c5:91:78:7b:8a:e1:96:8d:73:cc:81:0f:48:85:
7d:a2:c5:46:d4:d6:85:cc:b4:61:1a:48:4e:02:8a:
37:9b:07:e0:d2:4d:a6:a5:46:f9:25:ae:e6:3b:55:
3c:58:c4:c8:a0:d1:77:4a:54:49:ae:ff:37:ec:dc:
31:07:48:82:0f:73:8e:c1:eb:de:d5:de:1a:76:68:
f4:9d:24:14:2c:db:68:71:5a:ad:9b:97:50:53:cb:
95:11:71:f0:64:7b:fd:d8:ec:30:7c:72:6a:56:6f:
b5:9d:cb:35:18:09:02:b3:6b:06:e0:11:fc:93:15:
3b:49:f0:3c:a9:9a:57:ea:94:4f:af:46:0a:1b:f3:
75:95:6b:7e:f5:65:29:49:f6:a3:ff:23:9d:d1:20:
bb:9c:15:41:aa:e5:84:3b:2f:f8:c3:bb:31:25:39:
2a:b7:6f:b2:8a:dc:f5:60:0a:88:94:1c:ff:33:47:
c5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:E5:B6:70:C6:A5:B0:D1:3B:08:EC:A7:7A:88:96:BF:4F:EE:BB
X509v3 Authority Key Identifier:
keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:28:97:4e:6f:24:29:47:e9:2f:d9:44:3e:a7:25:ff:0f:3d:
dc:23:bc:44:35:1e:b8:d0:c9:56:b4:a5:22:d8:64:81:31:e0:
5a:2e:d6:34:17:21:3a:6d:09:1d:40:b8:07:38:a2:7c:6d:81:
8e:d7:bd:38:27:f5:fe:90:5c:c3:ed:ed:76:0f:37:c6:d4:87:
70:4c:c7:79:4f:f2:ba:0e:69:78:6d:30:7b:b3:e7:5d:64:b8:
a2:11:e1:ae:96:b6:cd:a3:cd:85:83:9d:9a:ce:4e:bc:d7:90:
77:10:ff:3d:d1:95:a5:3b:7c:36:b9:9d:07:71:c9:c1:d9:3e:
85:7a:1b:21:dd:7f:f2:3a:e1:1f:4e:3f:8d:07:85:a0:f8:36:
e5:bf:b1:1d:d0:72:a9:59:99:7e:b6:12:c2:e1:69:cc:7b:d6:
df:e9:c3:41:5f:12:aa:8a:1c:0f:d8:f8:20:49:e7:91:9c:ff:
bc:c3:d0:af:1b:79:ca:d3:d2:0f:24:d4:08:58:13:20:52:75:
d0:24:57:79:b3:dc:ab:cd:05:bf:76:20:97:9c:3a:97:9e:f4:
d7:19:9f:67:73:ca:be:f2:96:6c:cc:8c:5a:20:11:ae:f4:f0:
61:14:59:28:2b:d8:48:18:06:fd:29:7c:63:e7:61:bd:a5:04:
cd:2c:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:10 2025 by rpki-client