Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: slyyEQ3meq6epYjJ6dH+fPpp1Gtj2SRaVuliyFxalDk=
Subject key identifier: 62:3A:7D:3D:FD:AF:97:19:16:63:9A:D4:92:A9:10:63:61:C5:D7:00
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 019748FA98C729B93FA045EFFAC381D59C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 1488
Signing time: Sat 07 Jun 2025 06:01:11 +0000
Manifest this update: Sat 07 Jun 2025 06:01:11 +0000
Manifest next update: Sun 08 Jun 2025 06:01:11 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: 7EOyltP8TWdx3Kca70R/p1GARmGf88J2iLN51vJnKzw=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:98:c7:29:b9:3f:a0:45:ef:fa:c3:81:d5:9c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Jun 7 06:01:11 2025 GMT
Not After : Jun 8 06:01:11 2025 GMT
Subject: CN=623a7d3dfdaf971916639ad492a9106361c5d700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:61:60:54:97:23:21:e6:a9:7d:f1:cf:ac:d2:
46:4b:48:00:07:55:23:c6:dd:44:c1:28:87:27:fe:
be:61:f7:c2:34:8a:b1:4b:62:f6:d3:55:bc:16:53:
68:67:63:c0:d5:e3:72:ac:10:16:b3:36:cf:9e:16:
6b:03:6c:6c:cc:ea:67:ae:49:cf:17:1e:be:ec:1a:
d6:43:83:38:dd:9a:a9:05:35:4a:8c:39:cc:e7:db:
93:c3:47:a6:c0:90:94:c9:d0:2c:60:56:f2:94:cb:
69:84:16:9f:92:bc:ff:13:60:d0:07:c8:04:39:dc:
81:a3:fd:32:9c:b2:25:90:28:b4:db:7f:d1:06:cb:
61:98:93:d1:23:9e:3c:e7:a8:fb:b0:fa:d5:7a:18:
70:54:b4:a9:07:04:ac:79:6f:11:0f:26:26:c3:d5:
c7:3a:32:9f:84:19:03:5f:b5:86:03:30:d5:dc:87:
12:7a:08:55:af:e0:d8:8e:12:3a:61:07:08:15:25:
4f:64:82:37:bc:fd:d4:83:67:12:34:36:8b:67:86:
b5:a6:4d:72:42:2d:f2:ce:cb:a5:b6:0e:77:b2:2a:
a8:f6:1e:8e:17:b3:3c:ee:0b:82:a0:df:fa:24:80:
e4:7d:38:da:f0:de:8a:7b:83:86:2a:d2:3c:d9:ae:
55:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:7D:3D:FD:AF:97:19:16:63:9A:D4:92:A9:10:63:61:C5:D7:00
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:21:4c:58:52:d7:50:54:9f:b0:63:78:e7:dd:34:ae:c9:09:
d6:f5:d4:99:70:14:ba:7b:4d:2d:37:65:94:0a:d1:4d:e1:84:
7f:34:5a:7b:80:33:6b:61:a3:e0:9f:a6:bd:2e:a4:af:61:92:
07:f2:76:92:68:f2:00:27:ae:b1:b9:69:a7:04:60:1b:f8:cf:
fc:b5:32:31:e6:d6:22:8e:6a:9a:ea:c3:22:b2:61:cd:aa:57:
86:92:a6:1c:53:c8:24:00:02:fb:91:ba:bc:17:c0:a8:2f:e7:
93:5e:66:f0:ee:f2:d9:f6:65:34:25:88:3f:b4:29:23:57:bf:
fb:82:fe:73:52:98:24:97:34:e2:90:94:0a:0d:92:08:53:85:
4d:93:f1:73:76:24:74:00:85:e7:85:c0:c4:1d:1e:24:62:e3:
63:df:ca:5a:3a:cb:ea:91:58:c8:c2:e1:50:4f:5f:5b:1d:5a:
f2:fb:18:41:d2:df:88:72:2d:a7:2c:39:dd:32:d5:ff:8c:74:
04:32:f3:45:89:64:fe:4a:47:26:c2:3f:20:11:2a:8b:55:ff:
8e:b5:61:54:f9:84:a6:27:8d:64:f9:e3:7c:ea:95:cc:73:4a:
ac:c4:34:40:01:6c:56:bd:de:d1:55:fd:36:21:5f:61:1f:77:
a1:6f:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:48:51 2025 by rpki-client