Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier: pMX7paAbefdCOu/aAGkgDzy9WvfY9L+grb9Sayau6pA=
Subject key identifier: 66:98:95:C7:B0:E7:DA:EB:CD:9A:A9:04:AC:05:8C:CB:65:06:C4:0D
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial: 01974FD7CB90952CA6E2ECE332924167FFC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number: 05AA
Signing time: Sun 08 Jun 2025 14:00:31 +0000
Manifest this update: Sun 08 Jun 2025 14:00:31 +0000
Manifest next update: Mon 09 Jun 2025 14:00:31 +0000
Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: RTX/ZbpUkgb8ppCOdmvLx4QhzxJWIov+qFNBYjXjy64=)
2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:cb:90:95:2c:a6:e2:ec:e3:32:92:41:67:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Validity
Not Before: Jun 8 14:00:31 2025 GMT
Not After : Jun 9 14:00:31 2025 GMT
Subject: CN=669895c7b0e7daebcd9aa904ac058ccb6506c40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e3:ae:71:3b:f4:4a:90:d0:e2:8c:fa:7e:53:
55:b4:a7:df:44:9a:06:6c:7a:8e:e1:fc:6d:c8:b2:
76:64:af:78:35:22:db:bb:a5:43:a1:9d:4e:57:9f:
dc:2a:78:11:e7:84:6e:07:11:52:6c:2d:c3:7e:51:
e2:ec:16:96:83:f9:31:ec:49:49:7f:04:12:1b:c0:
88:7b:06:70:af:8e:b4:d1:72:e3:03:13:1e:11:f9:
2a:ca:d7:0f:49:27:eb:4a:75:1f:8a:47:b5:b0:b2:
21:a4:5a:9e:38:39:43:27:c8:51:6d:9c:14:1b:d6:
0d:27:30:5c:6e:d0:de:68:49:75:a2:3a:9c:d2:fb:
57:04:10:74:c5:c1:72:1a:69:7c:4b:3e:33:4b:9c:
1b:43:c4:5b:22:15:20:ef:2f:d4:74:14:0a:16:fb:
94:9d:5d:7c:bb:96:67:73:f9:06:c1:4a:66:82:df:
da:f6:d7:72:24:ca:96:59:e8:07:76:38:7a:50:4f:
67:08:ad:a6:03:c7:f7:d8:17:9a:2b:80:44:95:cc:
6a:5b:82:80:4e:55:71:9f:ec:f3:55:78:a9:a3:6c:
fd:48:f6:1e:a9:d0:0e:fb:43:27:68:9b:c0:47:95:
cb:01:58:a3:1b:fd:96:ef:f4:a5:de:cc:f7:7f:de:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:95:C7:B0:E7:DA:EB:CD:9A:A9:04:AC:05:8C:CB:65:06:C4:0D
X509v3 Authority Key Identifier:
keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:7b:26:34:dd:b5:00:05:f5:ae:18:4e:ee:f8:c5:af:3f:
d8:b8:99:35:40:19:20:06:fa:0e:8e:2e:05:23:64:bd:d2:7b:
8d:19:4f:69:42:63:18:7d:69:01:67:17:72:ab:4d:49:0b:4c:
b5:25:a7:a0:3e:c5:60:fa:27:60:1c:13:a5:89:c8:83:31:c4:
c6:d0:50:88:1e:ca:42:f3:18:6d:b0:53:e0:fe:4e:a7:3a:89:
97:22:68:b8:42:20:13:b4:83:d5:67:1b:3d:bf:01:4e:73:ec:
f9:f0:fd:e5:01:06:bf:6f:9d:e2:a6:45:ad:47:72:42:91:cc:
8c:ce:4c:df:ae:4e:3f:fb:94:b5:a1:89:ec:b6:68:8c:f7:af:
a5:30:77:26:25:f3:09:22:f6:20:48:1b:85:a5:0d:0b:dd:7f:
0b:8f:ee:66:87:da:31:b8:7f:a6:a6:fd:8f:8a:86:c6:89:37:
15:02:2d:67:36:ad:33:0c:e2:de:69:ea:a2:f1:be:15:fe:56:
ed:e0:8b:7e:2c:b6:08:70:0e:fd:93:a4:f3:d8:9d:fc:53:c5:
8f:7f:f9:07:62:01:f9:6b:8f:43:f2:d0:93:49:97:61:c5:f6:
69:95:63:9a:80:dd:27:a8:5e:db:34:30:27:34:9a:a7:55:ea:
9a:54:bc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:51 2025 by rpki-client