Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: 7Wn3ibj2CwFZpMNrMpAfcee96/SgTWmTbYgn6jznp6k=
Subject key identifier: 01:F2:0E:AD:E6:1C:A4:D9:DA:61:31:88:70:2E:6A:36:39:F5:DF:38
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0197537D8989473DDD421DFEE794D55521D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0FB8
Signing time: Mon 09 Jun 2025 07:00:25 +0000
Manifest this update: Mon 09 Jun 2025 07:00:25 +0000
Manifest next update: Tue 10 Jun 2025 07:00:25 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: YUEkINRmV5qSGjMDXlPEP/3zuGirLofA8TjWry6CYzk=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:7d:89:89:47:3d:dd:42:1d:fe:e7:94:d5:55:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: Jun 9 07:00:25 2025 GMT
Not After : Jun 10 07:00:25 2025 GMT
Subject: CN=01f20eade61ca4d9da613188702e6a3639f5df38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:2c:5c:73:bc:d2:a2:03:ee:8d:a4:2a:5c:
09:7e:98:e0:ba:76:76:33:5f:04:84:f9:8c:9d:87:
a5:70:9a:11:3d:b5:53:26:9c:7c:1a:54:00:66:2e:
48:4f:21:45:d8:3b:20:df:c8:3b:5c:d5:9c:86:24:
0c:be:b5:6d:f6:60:c0:c1:4e:54:a5:51:ef:30:07:
d1:14:6b:e8:c2:7d:52:63:23:60:03:79:95:ca:13:
7e:3f:39:cb:25:d2:93:ae:91:b6:22:16:7b:1e:37:
37:96:58:65:fc:d4:40:41:eb:96:97:fa:f9:97:c8:
ff:57:95:dc:3b:86:79:8d:d8:58:d4:e5:ba:b2:7d:
d5:dc:35:51:18:64:cf:37:eb:7c:a4:95:67:02:d6:
f7:6b:0b:5a:1f:bc:ad:93:d2:1f:70:42:39:04:00:
f3:d8:91:57:15:bd:5f:b6:af:3d:70:79:45:34:56:
af:7d:04:38:ec:8e:45:b9:45:80:15:20:85:6b:39:
c6:c1:69:de:91:0b:de:55:cb:e3:1d:63:df:69:6a:
3c:74:3e:35:9b:e5:98:2e:5d:67:2d:d1:f4:47:c0:
8e:3e:2e:73:e8:43:db:ac:91:70:19:68:9f:e9:59:
6d:4b:ae:24:8e:d9:32:34:f1:53:ff:9d:67:4c:50:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F2:0E:AD:E6:1C:A4:D9:DA:61:31:88:70:2E:6A:36:39:F5:DF:38
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:43:50:5a:6a:2e:e9:ce:01:7d:cc:d9:ce:30:28:39:58:d1:
d4:93:40:fe:9b:38:77:31:a9:35:5a:28:93:56:01:ef:a7:87:
be:bf:79:bb:75:37:6a:8f:82:39:18:d9:d1:a4:00:e3:b0:64:
75:f6:27:59:73:79:0c:de:ca:35:91:0b:6a:d0:70:45:aa:8f:
ea:95:85:20:cb:bb:42:db:32:d1:76:77:9f:58:ef:68:c1:b7:
00:b8:fe:90:83:6e:bd:7f:8f:b4:9a:3f:d0:1e:62:2f:b2:01:
3f:a0:aa:a3:00:b7:11:17:bc:65:a2:6a:28:a9:29:86:58:bd:
7e:6b:b0:b3:ca:5b:48:45:25:da:13:e4:ed:c9:fb:12:2a:a3:
cb:39:a4:69:4c:49:db:60:e1:6e:d3:eb:24:8a:02:84:17:06:
95:57:6d:6f:8f:47:93:b4:c4:9d:4c:74:6a:10:d6:7b:cf:0b:
a6:d5:28:8c:42:47:80:f3:f0:e7:72:85:de:3d:03:b7:20:7e:
0d:9a:5b:e3:27:f7:38:0b:a1:41:3e:af:02:a3:a3:94:0a:8e:
39:5f:3b:4f:de:35:06:47:b9:7e:12:4a:66:c0:9b:19:30:85:
3d:56:f8:2b:0f:36:43:24:ce:1e:99:fe:9a:60:37:b9:48:23:
ed:d8:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:22 2025 by rpki-client