Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: HkGAanul6fBd8HtG1RZA6mMkdxWyUVwyouwcRgeBwuA=
Subject key identifier: 65:68:82:10:5D:0E:16:E4:8C:B3:86:C9:28:8F:DC:06:F6:57:9D:0D
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 019749D5AAB48F2F7E4270DA737D16C8A32B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 10:00:28 +0000
Manifest this update: Sat 07 Jun 2025 10:00:28 +0000
Manifest next update: Sun 08 Jun 2025 10:00:28 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: wNFFpXNJsOusPjD+Sr66wvpZUSwb/Y8Sf2QLeSPutq0=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:aa:b4:8f:2f:7e:42:70:da:73:7d:16:c8:a3:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Jun 7 10:00:28 2025 GMT
Not After : Jun 8 10:00:28 2025 GMT
Subject: CN=656882105d0e16e48cb386c9288fdc06f6579d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2b:7d:e1:d0:6e:7e:bc:a1:85:d2:62:1e:30:
bf:76:20:03:05:0e:12:93:e9:02:a6:5c:0e:c4:74:
16:af:e7:35:01:02:fe:b9:14:f1:ad:ea:ad:c2:4e:
a6:bb:56:45:d0:ff:af:a8:20:97:31:9a:02:6d:8d:
4f:80:0e:0f:35:8c:b7:bb:14:c7:d1:03:a9:a1:80:
3f:05:cd:ee:85:1a:33:39:66:be:0c:50:69:3c:77:
ad:13:f6:ca:16:81:9a:b3:35:8b:db:8c:f5:19:c3:
40:ea:d2:31:9a:f8:37:9c:d8:c4:ce:2f:47:53:c9:
af:15:06:4f:a7:2a:af:87:00:8e:90:53:f3:05:5e:
14:6a:42:d9:88:15:d7:1a:ea:e9:53:35:3c:32:b7:
bb:9b:49:a5:5b:47:79:bf:8f:c8:c0:28:3a:1d:9d:
4f:a4:d0:9a:58:5c:ed:b8:78:3c:97:e3:b9:99:0b:
b4:27:9c:a7:df:be:03:3d:18:60:1c:ed:eb:6b:d3:
98:b2:2f:89:45:95:2a:4a:85:11:25:aa:d2:f0:9b:
99:3e:9a:f1:f8:23:57:16:68:cb:d9:f4:34:a7:cf:
44:4d:5e:e6:99:bf:dd:b5:ef:bf:a3:44:22:a0:cb:
08:c5:5e:9f:13:5d:80:ba:2a:96:e3:0e:8a:19:51:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:68:82:10:5D:0E:16:E4:8C:B3:86:C9:28:8F:DC:06:F6:57:9D:0D
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:5f:66:14:d6:07:b4:72:ba:4b:d1:d7:9e:24:ad:42:46:
66:ab:bc:c8:7f:8f:e4:9f:c4:55:f5:10:1d:25:03:fd:bc:85:
21:8b:de:c6:f7:a9:6c:d9:21:d7:38:bd:2e:e8:fd:ff:98:5d:
29:cb:8b:52:99:dd:69:17:c7:60:64:6b:78:f4:18:d6:a2:00:
68:4d:ec:be:86:82:d8:d2:d2:95:0e:a5:37:f5:71:61:21:25:
61:40:7a:ee:ad:33:03:84:42:6d:1d:c7:0f:49:1c:a6:21:a0:
2f:aa:81:cc:52:2b:f5:95:34:52:d6:a0:08:9f:36:78:10:69:
0f:6d:ee:3a:40:c5:95:ed:44:93:01:7b:9f:d0:ef:d6:45:4d:
1e:47:b2:61:4c:dd:d7:e3:99:b3:f0:09:9e:f4:da:16:51:bb:
9f:cf:c3:48:1e:2f:00:bc:a7:5e:2a:58:b3:e3:9c:2b:59:05:
e1:3d:e9:35:46:41:56:87:22:73:fb:b8:eb:a1:b6:da:e0:17:
77:7e:b9:c0:d6:f0:39:06:7b:b6:d0:ed:a4:35:82:a2:d3:ac:
c1:42:05:65:66:7a:b4:0b:7a:ae:52:f7:85:ec:a2:07:9e:ac:
aa:a9:52:f2:33:60:b8:bf:1d:5f:43:76:05:98:e5:5f:b6:64:
a9:51:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:20:15 2025 by rpki-client