Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
File: P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft (raw, json)
Hash identifier: unFEaLjJO1gYEaYOSGyIdhnMjrE4P/FWw8FMve+Cuv8=
Subject key identifier: AC:91:56:57:18:CD:0A:75:17:39:67:10:FB:C4:9A:B2:A1:3A:B9:9B
Authority key identifier: 3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
Certificate issuer: /CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Certificate serial: 0197537DCAB4E12562FD489AE6280F6ABFBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 07:00:42 +0000
Manifest this update: Mon 09 Jun 2025 07:00:42 +0000
Manifest next update: Tue 10 Jun 2025 07:00:42 +0000
Files and hashes: 1: P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl (hash: HIE2XhJKpzgGCV0hJwqOdwmrTTaBiqP6HbDlNNC4lk4=)
2: nJCyjIsWdPchQmqQbO_MPjGVVDE.roa (hash: Cr0JPO8tp2KrCcxC2yxuo3jq4OH+RZvqc/vb9Mmb68M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:ca:b4:e1:25:62:fd:48:9a:e6:28:0f:6a:bf:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa40fcfa836bb0b5b3e129404cb31e85250b01f
Validity
Not Before: Jun 9 07:00:42 2025 GMT
Not After : Jun 10 07:00:42 2025 GMT
Subject: CN=ac91565718cd0a7517396710fbc49ab2a13ab99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:79:0a:24:aa:30:02:fa:03:6a:89:99:7f:
78:d2:41:31:3e:0c:d5:02:9e:ab:9c:eb:50:bb:2a:
ac:9d:ed:55:9a:16:6f:a2:fe:f1:82:76:76:19:b4:
12:ba:1f:dd:a6:32:8b:ab:24:17:2a:b1:c7:15:f3:
5c:54:ce:89:b6:a2:aa:2b:10:c9:e9:51:9f:cf:f7:
a2:75:a1:93:40:26:e2:be:2b:39:3d:f4:00:74:54:
b8:d6:04:7f:03:bf:e5:ac:99:96:fc:d0:f7:90:98:
8d:ad:98:97:54:68:09:f8:57:50:87:90:18:05:cd:
8d:82:a0:3e:9b:9c:86:d2:b8:c6:fa:fa:41:82:e6:
b0:96:57:e5:ee:f7:ef:c2:1d:18:3f:ad:04:e4:ab:
d6:28:12:67:5b:73:eb:b7:63:b4:0e:22:ca:f6:30:
d1:b5:22:8f:15:63:11:cb:e1:61:0b:f6:72:a8:72:
7f:ae:cc:8c:fc:69:bb:34:dd:fd:11:f8:0a:b5:9b:
72:be:51:eb:0d:97:5b:46:3d:0c:8b:23:f1:f5:15:
95:c2:9b:0b:22:8e:b1:99:80:c7:ca:1e:19:13:da:
11:53:b5:69:6b:42:36:e1:6c:ed:1e:24:7a:7c:3b:
d9:c4:32:00:13:d0:55:89:be:aa:50:84:59:0b:da:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:56:57:18:CD:0A:75:17:39:67:10:FB:C4:9A:B2:A1:3A:B9:9B
X509v3 Authority Key Identifier:
keyid:3F:A4:0F:CF:A8:36:BB:0B:5B:3E:12:94:04:CB:31:E8:52:50:B0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6QPz6g2uwtbPhKUBMsx6FJQsB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e210b9-7a3f-410b-ba56-0724089289bb/1/P6QPz6g2uwtbPhKUBMsx6FJQsB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f2:e2:0b:55:c2:a3:1e:b7:4f:c3:da:77:d3:f4:ad:43:e6:
4c:dd:d8:0d:99:92:bb:90:6c:8a:a1:b9:5a:fa:cf:ec:0f:39:
bc:c4:2d:dd:d8:6e:27:e6:74:a7:b7:6d:58:fe:ac:5b:05:b0:
dd:0e:34:a4:ac:72:1b:cb:81:0d:d5:9a:4a:3d:34:ee:e6:88:
62:11:07:99:a2:2a:71:86:ec:e7:da:e7:85:c4:f8:3b:ee:2f:
f9:65:ec:16:60:dd:4f:5b:37:dc:f2:22:70:2a:bf:d3:63:b9:
bf:db:20:d9:56:7a:1e:47:81:c8:c4:11:19:40:4e:f1:e1:fe:
8a:42:f0:e4:35:56:f8:8d:aa:2f:c5:31:62:36:ad:a0:69:c3:
8f:86:33:91:06:5a:d3:b6:da:12:4e:dd:c2:be:2b:fe:95:4e:
e8:71:42:87:e0:70:9b:61:8a:7a:fb:d2:c5:f1:b8:36:0b:ba:
53:49:a5:7e:ee:58:bc:b7:7b:05:a9:30:43:4e:79:53:41:00:
ce:8b:11:3e:68:4a:50:e5:30:45:0f:17:93:09:7b:84:90:72:
57:6b:78:92:a9:2d:f9:c9:a7:fc:a2:67:1c:e5:2c:6c:e0:23:
0c:2f:81:8e:eb:66:2c:fb:02:f6:e8:17:cd:63:84:80:5e:72:
67:e4:ca:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:33:41 2025 by rpki-client