Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: SwsExc/sgDYisNFpcx+f6fUkoo5zbuKAEi/VJ/LzSSA=
Subject key identifier: 06:F4:93:05:61:3A:6E:D2:67:01:9D:B1:E7:68:A9:68:C4:2E:DC:B0
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 01973986D6BA1A0C5F2C10B646DE5A79A081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 1576
Signing time: Wed 04 Jun 2025 06:00:27 +0000
Manifest this update: Wed 04 Jun 2025 06:00:27 +0000
Manifest next update: Thu 05 Jun 2025 06:00:27 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: yEcSe36ubY5TExxjE6WYWTGrbJHTBtsBKVmnZGx5cco=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:86:d6:ba:1a:0c:5f:2c:10:b6:46:de:5a:79:a0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: Jun 4 06:00:27 2025 GMT
Not After : Jun 5 06:00:27 2025 GMT
Subject: CN=06f49305613a6ed267019db1e768a968c42edcb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:1b:df:6c:90:9c:16:01:38:83:93:c6:c8:
e7:5b:c6:48:b4:d3:59:4e:8f:3d:7e:45:3d:c9:a1:
f4:d8:08:f1:61:e7:68:a9:c5:69:df:db:51:06:b2:
fa:e7:19:ca:e9:0b:0a:a7:7d:43:ff:f6:a9:09:bf:
fc:09:b8:b9:5b:c8:6b:2d:c8:de:87:d9:b4:07:f8:
3a:a3:f0:c6:22:f1:a5:28:24:99:a2:ca:95:b2:d0:
00:6f:56:64:04:d5:5e:bb:85:c8:d7:d8:25:3e:b8:
bd:a8:65:af:32:8e:19:3f:86:5f:86:c1:45:33:8f:
68:b9:15:56:08:8a:ce:27:93:12:82:e1:2d:cb:42:
39:09:ec:e5:fd:7f:af:17:a3:e0:39:ce:ce:4f:7f:
ba:70:29:53:04:20:a1:03:a4:17:be:09:b0:b2:52:
50:9b:fa:dd:94:70:5e:cf:b3:80:34:ac:bd:c9:5e:
da:49:6b:63:41:6e:fe:64:af:cc:c0:ad:5a:09:26:
76:21:34:77:c0:d1:12:54:f0:b1:dd:69:9d:b3:1a:
d7:c0:33:c2:91:62:ca:87:57:d8:48:79:45:dc:24:
8f:df:90:38:87:0e:98:ce:55:9e:66:84:87:1c:c1:
ff:c7:55:04:76:07:fb:41:34:64:89:93:cd:45:c3:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F4:93:05:61:3A:6E:D2:67:01:9D:B1:E7:68:A9:68:C4:2E:DC:B0
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:57:09:e0:12:8d:a3:cc:7a:5f:42:b2:ef:04:0a:af:4c:f3:
7c:82:fd:ee:c0:55:ea:2c:5b:36:93:b1:9c:89:c8:d6:98:46:
29:51:42:3e:c5:d0:7c:09:38:5c:e4:fd:45:80:5e:d9:7f:f0:
1c:84:b8:29:de:d1:75:2a:13:65:43:b3:d8:48:0f:ce:cc:7c:
d7:d4:5b:b2:d6:d8:e5:cb:3c:71:5f:a0:db:35:c3:80:14:40:
96:4c:3f:7b:1a:bc:7e:c1:54:c4:0c:1b:d7:99:35:39:41:2c:
02:39:f2:e2:ec:fc:7f:6e:63:ef:c6:25:92:32:94:f9:0e:68:
2c:d2:dd:e0:a2:dc:ff:2e:af:86:06:f5:13:ed:07:e8:e6:0c:
83:23:4f:f9:ba:ca:6c:23:e7:c2:e8:2d:69:2c:10:c3:41:c6:
cc:78:4c:d1:6b:8c:da:48:77:d0:e9:73:5a:44:a0:ff:c6:59:
f6:de:c3:48:94:0c:5a:ef:72:95:26:ef:a7:94:b1:10:20:fe:
aa:3e:cc:87:65:01:49:1e:56:47:4b:57:25:81:2b:59:ee:26:
97:72:3b:07:72:8f:20:2f:25:b8:9f:57:30:88:62:10:3d:d8:
e6:ac:50:da:7b:18:43:ba:8f:0c:d6:7d:a6:01:9b:d7:92:c8:
0c:05:60:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:13:45 2025 by rpki-client