Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: nO7gQqtZ7ufUfB8yTrOpLVxh7iE2pIq8spFaxMoi6qw=
Subject key identifier: E5:5F:3F:7A:7D:A6:60:EA:3F:E2:67:93:AC:14:4E:BF:06:90:E9:E1
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019751213D9994FE07F5BDDFED1493A78F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 04BE
Signing time: Sun 08 Jun 2025 20:00:22 +0000
Manifest this update: Sun 08 Jun 2025 20:00:22 +0000
Manifest next update: Mon 09 Jun 2025 20:00:22 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: Utke82RzgJ8yEb73Yi4DRXZJgqngZbOyVZ+4kVo7+Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:3d:99:94:fe:07:f5:bd:df:ed:14:93:a7:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Jun 8 20:00:22 2025 GMT
Not After : Jun 9 20:00:22 2025 GMT
Subject: CN=e55f3f7a7da660ea3fe26793ac144ebf0690e9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:83:4e:e9:67:60:cc:87:4d:f3:6e:a9:c5:
d1:75:6e:02:a6:c0:49:7e:cb:a8:62:67:97:0e:4f:
f5:95:ef:87:a2:d8:47:34:cf:a0:19:d8:a0:de:ee:
0f:88:3f:63:a8:10:62:7d:ef:e8:93:e4:f5:f7:be:
8b:6d:01:90:17:09:75:a7:b3:0c:f0:25:7d:58:ee:
3b:4e:7b:85:ee:55:d4:69:03:7e:67:4d:0a:46:38:
aa:ec:bc:65:82:82:4c:3a:4f:31:8e:ee:f3:6e:90:
65:d7:db:f7:57:0a:f3:c4:bb:e3:fe:8d:dc:02:d6:
d7:e0:52:e6:f5:24:19:e7:52:a8:ee:d3:c4:8b:91:
28:e6:2b:6a:ea:ac:0a:49:37:4a:f0:be:3f:b9:fc:
98:94:2c:cd:86:e9:55:a6:b6:ad:ce:f4:3e:8c:57:
1a:4e:54:78:e1:5b:e3:82:e3:08:9b:4e:3d:01:61:
e6:45:c8:d5:6a:fa:7c:5e:e3:ac:78:ab:ce:8f:83:
1c:54:6c:f4:f5:60:65:9b:88:58:63:ce:23:c4:30:
84:81:95:0d:73:06:d3:9e:70:a4:cb:3d:ee:cb:d4:
60:73:08:04:08:30:cd:18:14:31:f0:ab:1c:66:d0:
81:4c:53:24:34:3e:b9:b7:31:f1:2e:da:02:81:93:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5F:3F:7A:7D:A6:60:EA:3F:E2:67:93:AC:14:4E:BF:06:90:E9:E1
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:55:64:50:85:11:bb:58:39:ab:63:91:23:93:9f:5f:85:21:
dd:cf:d0:48:81:85:ea:9d:68:85:ac:5e:b3:b8:f3:ac:4e:65:
d9:a4:0c:33:9a:55:d5:1f:0c:d4:51:c3:12:ea:29:75:91:f2:
3e:15:ed:cf:68:c6:81:06:c7:f4:0f:bf:46:bf:46:b5:ee:ef:
f1:fe:cc:f5:1a:a6:45:0d:a9:3b:b2:bb:16:46:7b:b3:29:0b:
18:db:07:44:07:a8:87:e5:83:74:4c:47:52:f1:59:42:41:d2:
0d:16:ce:8c:29:28:8c:40:e8:f7:76:bb:36:ba:36:70:f0:e7:
45:52:a8:6a:85:3f:5d:da:00:fb:0e:f1:df:1e:d3:23:07:75:
e5:15:55:33:67:22:c3:99:07:54:36:ec:c7:09:b3:44:33:0d:
2a:3e:3e:db:80:8d:e8:62:63:75:e7:28:82:33:88:ef:8b:66:
2d:55:45:27:9b:cc:4d:66:c2:07:7c:d2:bb:2d:70:99:b2:7b:
c8:34:5f:fe:93:42:76:50:d6:27:26:72:ee:13:63:4c:e3:cc:
11:c2:86:4c:be:dd:d4:a6:20:72:99:d9:8e:28:26:25:44:cf:
30:ad:dd:17:ee:4f:ea:b9:4a:15:10:9c:8c:06:40:6c:f1:1f:
08:cf:fa:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:40:54 2025 by rpki-client