Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: pTz+f3KYOJW7+tiuEpjl69X/9v6AYMnRFtdV3PS98WE=
Subject key identifier: 60:52:60:E3:87:9A:CF:88:3D:75:5A:DF:42:5E:06:1A:DC:48:39:CA
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 0197665FE3A57F8FA62F567E16164DC78ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 03E1
Signing time: Thu 12 Jun 2025 23:00:49 +0000
Manifest this update: Thu 12 Jun 2025 23:00:49 +0000
Manifest next update: Fri 13 Jun 2025 23:00:49 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: Vev/EVggP046NLIIe8lQMyd/L2v5H6dg4zeMIbjV28U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:e3:a5:7f:8f:a6:2f:56:7e:16:16:4d:c7:8a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Jun 12 23:00:49 2025 GMT
Not After : Jun 13 23:00:49 2025 GMT
Subject: CN=605260e3879acf883d755adf425e061adc4839ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ce:41:33:96:2d:d1:08:94:b0:9c:a3:f9:27:
5f:63:8d:13:12:25:9c:3c:06:e8:a7:84:92:02:a1:
31:d1:97:e1:4f:38:e6:0c:41:f1:4d:d4:a3:75:99:
7d:e6:a7:6c:15:ce:97:a9:d9:ac:09:01:a9:05:63:
6c:fa:5e:90:ec:fe:00:21:67:2d:40:32:78:34:8b:
93:2e:dd:bf:66:af:08:a1:7c:18:d1:a8:0a:6f:f8:
e9:99:37:f8:13:a9:dc:f4:38:3f:47:22:28:2e:14:
93:6c:0c:13:c3:62:5e:a7:94:09:cd:57:0d:df:94:
d3:37:87:8a:31:a3:1e:03:6e:40:56:e4:a9:77:49:
b6:c0:ee:72:2c:d7:3b:d7:78:c9:7d:c1:f2:a6:96:
37:9a:9d:fb:24:e0:ac:5a:57:e2:86:b2:1a:0e:b3:
0f:2b:ae:f7:74:2d:57:de:a4:41:f1:8d:2f:e6:74:
12:39:93:c0:34:d3:5f:82:5e:09:23:41:15:75:7e:
88:db:9a:61:12:be:56:1f:f3:2a:43:06:eb:93:1e:
5d:c5:e6:36:de:fe:d5:93:7d:a1:06:df:98:78:8f:
46:e0:72:23:b8:73:eb:04:27:cc:7a:fe:30:02:1e:
eb:c0:7a:1e:d7:cc:e6:0f:3e:b3:ed:ca:13:ca:2d:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:52:60:E3:87:9A:CF:88:3D:75:5A:DF:42:5E:06:1A:DC:48:39:CA
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:bf:a7:4c:95:1f:6a:25:bc:d0:40:1b:84:61:bb:ac:ad:fd:
ce:3c:cf:11:f5:b4:34:13:77:15:2c:24:49:23:e5:be:6e:00:
ea:ba:63:37:d5:b9:6c:69:cd:d5:50:2b:42:ae:f1:f1:71:20:
49:fe:9d:1b:bb:c7:d6:2f:c3:64:b5:09:8d:22:44:85:eb:1e:
c6:1a:61:b1:3e:9b:72:96:f1:2f:e1:33:57:24:2e:09:06:12:
59:34:0c:88:31:c9:7f:e8:fc:3d:ef:47:1d:82:20:72:a4:2f:
34:ea:f5:d8:5a:87:17:99:03:a1:34:db:af:94:8f:66:5b:6e:
67:5f:07:f4:27:84:f5:db:a0:ae:27:36:bb:5a:97:19:13:bc:
0c:a9:72:ba:d1:fb:56:bf:76:56:d3:f1:da:b0:8a:4c:50:d1:
6f:13:3c:c8:83:9d:db:3e:f8:2c:89:ab:b2:3f:b5:8e:e3:81:
6e:ae:da:5a:8e:36:17:d6:93:7a:1b:d7:c9:04:21:5a:a0:cf:
70:53:a0:30:9d:8a:04:6b:e9:b8:51:98:be:9e:b3:e5:90:b2:
d2:e1:c8:10:bb:af:32:20:b4:91:d3:75:1e:d8:13:70:30:fd:
36:c5:06:77:eb:d3:ef:e6:f5:95:bb:02:f3:05:14:c8:7b:b0:
12:b7:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:47:32 2025 by rpki-client