Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: Zb5Tn6CeulDVfeeQh6Hk61KsU44/ru66adFFAt/Cd1M=
Subject key identifier: 9D:3C:34:C8:C6:9A:EF:5C:6A:CC:C3:59:2E:EF:F6:FB:42:33:FF:F0
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 01974A0CF4A2F52B11181966F3F76BEF8458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 11:00:52 +0000
Manifest this update: Sat 07 Jun 2025 11:00:52 +0000
Manifest next update: Sun 08 Jun 2025 11:00:52 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: 3tk95joTCUD0Q3ccs5a2dR4qDadez45XwOQp7HKmtHA=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:f4:a2:f5:2b:11:18:19:66:f3:f7:6b:ef:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Jun 7 11:00:52 2025 GMT
Not After : Jun 8 11:00:52 2025 GMT
Subject: CN=9d3c34c8c69aef5c6accc3592eeff6fb4233fff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:7d:42:63:a9:dd:36:e7:0e:47:45:c5:ea:
cd:59:0b:b4:85:fe:c9:28:4f:f2:6c:27:e7:98:86:
9d:f7:8f:32:c1:d6:02:45:8d:e9:b7:2e:11:9a:6c:
0e:ff:3c:dc:d2:e5:49:c0:db:89:64:b4:ed:61:b1:
95:13:89:23:31:8b:2c:c4:06:04:da:59:c1:01:f8:
49:3a:37:5b:5e:f0:4b:c7:d8:52:f2:b5:2f:43:66:
a9:8d:89:3b:46:2d:12:23:2f:94:0b:97:58:b0:94:
34:f4:5b:92:55:6a:0c:c8:2e:5e:71:50:42:63:83:
82:08:83:17:f7:53:95:12:e8:57:65:67:d7:82:77:
e9:81:93:60:ad:4a:fc:78:83:69:48:f6:c4:65:06:
29:9f:5e:52:c6:d4:6b:76:cf:95:4b:79:00:0c:ab:
88:2c:8d:2b:4f:20:01:2c:a2:4a:cb:cc:05:80:70:
bb:e9:b5:4c:38:22:50:da:f4:22:00:3e:b7:dc:4e:
ff:2d:af:d4:96:73:b3:b4:3a:41:08:01:e5:ae:79:
32:7c:7b:c6:ff:da:73:7c:65:1f:32:e6:e1:5b:0e:
7d:3d:4e:4a:6f:18:a5:91:6e:1f:40:18:2d:45:5a:
0a:d4:d6:1f:99:3a:78:62:ca:56:da:53:ab:10:16:
e5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3C:34:C8:C6:9A:EF:5C:6A:CC:C3:59:2E:EF:F6:FB:42:33:FF:F0
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:fd:2d:fb:63:ce:ef:08:99:a0:43:c4:04:ec:36:ea:42:95:
33:d5:23:e1:51:f8:ff:08:2f:c2:f3:9b:05:f6:ab:d8:0a:90:
58:db:e1:bb:b4:08:f0:2e:47:a9:9b:86:57:aa:71:78:04:25:
8e:b1:3b:28:9b:ab:ec:51:25:b5:da:8f:73:04:a4:cf:39:a3:
41:72:cd:aa:4f:f2:34:7b:a0:24:10:22:91:08:90:e6:09:e0:
1f:e7:e3:6b:8b:38:ec:d0:f0:5a:77:af:65:09:58:b8:62:27:
0c:df:d2:29:e3:7e:42:db:d7:f7:38:cf:55:50:1f:7c:bf:33:
11:25:f0:0e:d0:bb:5f:57:32:c3:1b:64:6b:1f:de:55:20:36:
01:0b:2e:97:24:5e:b9:ed:e9:e3:7b:fc:58:eb:16:8d:9a:ec:
75:cc:35:cf:55:0d:1a:89:71:7c:a8:f9:a7:36:3f:2b:b0:49:
64:34:19:ed:9a:d3:86:45:f1:da:dd:67:c2:ca:16:61:e9:ac:
b6:aa:1e:ec:26:6f:41:5a:b1:a9:e6:9d:bd:cf:ec:c6:54:eb:
58:48:bb:61:f1:cb:01:6a:e8:0f:ce:bf:06:c7:a7:cc:c1:ee:
29:ae:5e:3a:3f:44:d4:b2:72:b5:55:97:9a:b9:6b:2d:56:d0:
68:cf:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:56:43 2025 by rpki-client