Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
File: P1umH85V_19gjjr27FYLN67CNf8.mft (raw, json)
Hash identifier: 7LcsS2PJ/eND8GNLHZUPncZBRSUc7lDFYW/JQlIDzHk=
Subject key identifier: D8:E3:D8:EF:2A:FA:F9:3A:13:27:CA:71:D5:6E:00:AA:4E:D8:39:B1
Authority key identifier: 3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
Certificate issuer: /CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Certificate serial: 019754FE6BFDAD1A222AF9C3FD39A74DC669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
Manifest number: 03D8
Signing time: Mon 09 Jun 2025 14:00:49 +0000
Manifest this update: Mon 09 Jun 2025 14:00:49 +0000
Manifest next update: Tue 10 Jun 2025 14:00:49 +0000
Files and hashes: 1: P1umH85V_19gjjr27FYLN67CNf8.crl (hash: xtGwzwiGy0LOps2HwnLrq+0hfHl6+tw6Rega3yDNBZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:fe:6b:fd:ad:1a:22:2a:f9:c3:fd:39:a7:4d:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5ba61fce55ff5f608e3af6ec560b37aec235ff
Validity
Not Before: Jun 9 14:00:49 2025 GMT
Not After : Jun 10 14:00:49 2025 GMT
Subject: CN=d8e3d8ef2afaf93a1327ca71d56e00aa4ed839b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:fe:6b:e9:9b:c4:73:00:a5:f5:3e:d2:0d:
d9:3c:90:08:ee:73:08:21:59:23:b9:bd:db:cf:ff:
56:b8:ab:34:ba:71:b1:eb:64:17:61:1a:7d:b4:3c:
47:6d:69:8f:c6:e8:5d:95:04:6c:7b:d1:4d:a7:a2:
22:00:f3:aa:eb:3f:0e:47:1e:f7:3e:30:6b:07:d1:
f4:7e:09:7a:3c:a3:bb:28:7b:02:b5:4f:39:ef:cf:
c4:ba:96:89:d8:53:4d:d3:fd:3a:36:ef:8e:d8:c7:
ed:e6:2a:e7:c5:b4:1b:b5:f5:d6:10:63:96:e0:11:
0c:ab:c4:aa:91:90:f4:70:37:b5:b5:b4:b4:9f:6f:
b5:d8:b7:46:72:6d:f1:98:17:22:35:4e:b8:78:f4:
7b:5c:8c:ff:3e:7b:e2:1f:dd:60:52:17:c1:01:47:
24:45:b2:23:c8:b5:ae:1a:45:81:c2:a6:4f:f2:5b:
97:47:37:5d:da:a6:34:8c:2a:85:82:a4:ce:d4:23:
97:41:a7:fc:c3:2a:f2:cd:32:bf:2b:69:25:c6:1e:
1e:71:54:57:31:b9:94:b0:f0:3e:4b:2a:ae:a9:ab:
10:b0:c7:02:aa:15:6c:61:bc:be:5b:ec:e9:61:da:
1e:97:2c:8f:1a:d7:25:0f:33:82:e6:c2:98:2b:3a:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E3:D8:EF:2A:FA:F9:3A:13:27:CA:71:D5:6E:00:AA:4E:D8:39:B1
X509v3 Authority Key Identifier:
keyid:3F:5B:A6:1F:CE:55:FF:5F:60:8E:3A:F6:EC:56:0B:37:AE:C2:35:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1umH85V_19gjjr27FYLN67CNf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/adc4ee-bb10-4c15-9457-3bdb0ec14800/1/P1umH85V_19gjjr27FYLN67CNf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ca:c3:14:e0:0c:dd:37:61:0e:4b:62:e6:67:06:29:07:09:
07:46:4c:61:26:d0:45:09:7e:ca:6b:53:b1:93:73:04:7c:d0:
ce:62:72:23:01:6f:61:33:2c:a9:23:ab:23:3e:ae:97:17:cd:
6b:8b:42:d2:e1:d7:93:8c:f4:fa:d7:36:cb:cb:48:fa:59:63:
ce:27:ac:cc:d7:eb:8c:fe:95:1a:80:c6:b1:c4:73:d5:b5:c0:
af:0d:bb:c4:a7:ed:62:66:69:aa:21:6f:28:05:72:ce:90:09:
53:10:82:52:b8:b4:a7:2d:00:da:4c:69:6e:c0:3b:86:ca:e6:
56:63:7b:0f:f9:4c:a9:14:93:6c:07:c3:da:2a:59:da:51:42:
92:59:39:b0:78:5e:4c:74:d0:2c:e9:d4:5b:62:b5:c0:05:88:
4b:e7:91:5e:00:d7:39:79:75:09:2e:c8:48:6d:c0:a3:cc:96:
fe:5f:ba:ed:b2:03:55:84:20:06:ae:ca:6b:23:8e:36:e3:85:
98:65:3b:4b:9d:94:ac:c6:13:db:e8:61:a3:ff:20:e0:1a:00:
ff:77:f6:83:ea:db:a0:8a:2b:84:d7:9a:6e:a0:6d:18:da:56:
24:1c:ce:f7:cc:b5:bc:7e:0b:29:cb:03:bf:0c:5f:29:05:0a:
99:09:f2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:31:29 2025 by rpki-client