Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: MR8MFQpDxphTJVct9U5caxFIODdJyAbKhhsm8RDMNQM=
Subject key identifier: EF:9F:3B:35:BA:1D:25:8A:6F:33:D3:0E:08:8D:79:56:78:23:B9:74
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 01975B373E6D57E289272BEE39F48CB16B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0C66
Signing time: Tue 10 Jun 2025 19:00:36 +0000
Manifest this update: Tue 10 Jun 2025 19:00:36 +0000
Manifest next update: Wed 11 Jun 2025 19:00:36 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: 07OKMvy8yE089rcAM9Tb1HvoPzrTEOhGxHMqEOJDyl4=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:3e:6d:57:e2:89:27:2b:ee:39:f4:8c:b1:6b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: Jun 10 19:00:36 2025 GMT
Not After : Jun 11 19:00:36 2025 GMT
Subject: CN=ef9f3b35ba1d258a6f33d30e088d79567823b974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:83:bc:30:f3:38:5b:f2:09:60:e1:b2:45:
83:3c:ea:6e:0d:bd:de:07:d2:54:e5:b9:e1:80:54:
fb:7f:62:06:4b:47:3b:82:08:ee:c5:96:e8:c6:d1:
eb:ff:7e:f5:dd:1a:f0:2e:01:86:79:da:2d:4d:f2:
8e:33:ff:87:0b:2c:a3:23:ea:3c:28:fb:6c:67:6c:
f0:87:7e:bc:56:e2:85:3a:27:52:3c:45:c8:56:ac:
0c:b2:6b:67:5d:4e:83:47:4f:bf:8f:ee:38:bf:11:
a8:ac:b1:7c:0f:18:95:31:78:b8:e8:d6:5c:cf:e0:
3e:59:b5:c1:71:2e:bd:7e:4b:0f:af:98:0d:c7:66:
b7:40:2a:0c:6d:ba:52:a8:6f:8f:df:86:da:30:4f:
d7:f9:f4:16:50:50:d0:42:3c:0c:b2:5d:78:2e:72:
29:32:d9:d6:53:34:75:b9:aa:bb:a7:2c:e1:90:15:
74:bc:c9:35:ef:f0:48:21:d3:58:e1:27:85:41:85:
18:c1:f7:ba:f3:73:60:f3:02:f9:82:58:75:05:29:
88:ab:0b:7b:db:d2:f3:bc:9c:1d:cd:cb:ac:8f:8d:
4b:67:75:6c:8f:24:aa:44:80:b0:e1:78:8e:19:a2:
b3:c8:b0:a2:1c:4d:03:4c:33:88:50:40:e7:1f:0a:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:3B:35:BA:1D:25:8A:6F:33:D3:0E:08:8D:79:56:78:23:B9:74
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:97:b4:88:f1:7a:16:c1:52:dc:5b:2a:49:20:9c:81:d4:7d:
df:c4:5d:6a:0b:7b:ff:cb:cc:c6:4a:6b:e3:39:77:bc:90:18:
2f:9c:f0:23:ec:e1:f4:cb:2e:4e:00:a6:8f:d7:8b:28:24:37:
ef:15:fe:d4:56:e2:78:21:1e:bf:07:87:c3:75:f3:c3:5b:8b:
92:fe:c9:c5:1a:8d:30:1d:07:06:51:88:2d:d3:5b:a3:12:a7:
82:f7:8a:ca:42:b7:a1:63:64:d2:ea:a8:25:e7:33:19:d1:67:
20:11:04:ad:96:7c:55:2a:ef:6e:a8:c1:70:0d:ef:db:23:3d:
7a:53:88:23:98:2c:d3:82:76:2a:9a:0a:be:76:9d:9f:c7:21:
e1:46:3b:d1:95:51:f8:e7:a6:10:b1:a8:23:e3:c0:08:ce:2e:
7b:bb:20:91:a1:c2:0b:f7:6f:4f:f1:28:e3:e8:ab:4c:12:50:
da:5a:52:bd:26:5a:91:5d:4a:3c:2a:85:b6:29:e3:05:f0:92:
46:f0:f1:49:41:2a:2a:98:bd:83:2a:4c:f5:dd:be:93:a4:45:
fd:68:6e:c0:07:31:ad:9e:e4:5e:9f:47:d6:de:b0:a1:18:d6:
87:77:e7:cc:4d:d2:25:11:de:75:83:b8:b6:de:fd:52:1a:2a:
ea:ba:70:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdbNz5tV+KJJyvuOfSMsWsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGE2MzAyMTNjZDQyMzg4MGY5ZmVmMTZkNzhmYjQzNmUw
OGYyNDcwHhcNMjUwNjEwMTkwMDM2WhcNMjUwNjExMTkwMDM2WjAzMTEwLwYDVQQD
EyhlZjlmM2IzNWJhMWQyNThhNmYzM2QzMGUwODhkNzk1Njc4MjNiOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0beDvDDzOFvyCWDhskWDPOpuDb3e
B9JU5bnhgFT7f2IGS0c7ggjuxZboxtHr/3713RrwLgGGedotTfKOM/+HCyyjI+o8
KPtsZ2zwh368VuKFOidSPEXIVqwMsmtnXU6DR0+/j+44vxGorLF8DxiVMXi46NZc
z+A+WbXBcS69fksPr5gNx2a3QCoMbbpSqG+P34baME/X+fQWUFDQQjwMsl14LnIp
MtnWUzR1uaq7pyzhkBV0vMk17/BIIdNY4SeFQYUYwfe683Ng8wL5glh1BSmIqwt7
29LzvJwdzcusj41LZ3VsjySqRICw4XiOGaKzyLCiHE0DTDOIUEDnHwrQSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+fOzW6HSWKbzPTDgiNeVZ4I7l0MB8GA1UdIwQY
MBaAFD/aYwITzUI4gPn+8W14+0NuCPJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYt
MzgyMzdmZTRlNDE0LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My81NGM2OTEtOWZiYi00MzhhLWE1NWYtMzgyMzdmZTRlNDE0
LzEvUDlwakFoUE5RamlBLWY3eGJYajdRMjRJOGtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZe0iPF6
FsFS3FsqSSCcgdR938Rdagt7/8vMxkpr4zl3vJAYL5zwI+zh9MsuTgCmj9eLKCQ3
7xX+1FbieCEevweHw3Xzw1uLkv7JxRqNMB0HBlGILdNboxKngveKykK3oWNk0uqo
JeczGdFnIBEErZZ8VSrvbqjBcA3v2yM9elOII5gs04J2KpoKvnadn8ch4UY70ZVR
+OemELGoI+PACM4ue7sgkaHCC/dvT/Eo4+irTBJQ2lpSvSZakV1KPCqFtinjBfCS
RvDxSUEqKpi9gypM9d2+k6RF/WhuwAcxrZ7kXp9H1t6woRjWh3fnzE3SJRHedYO4
tt79Uhoq6rpwuQ==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:22:07 2025 by rpki-client