Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: VjlhSAB06e9xXe5EwAIbxKFlx3HXYha34eExcx1WZ2g=
Subject key identifier: 13:7A:62:C3:8B:85:66:41:15:2E:21:AB:36:72:9B:49:16:A2:59:80
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 01967A56D27E4A2FE6ECA36E1FBB6B940DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 141D
Signing time: Mon 28 Apr 2025 03:00:32 +0000
Manifest this update: Mon 28 Apr 2025 03:00:32 +0000
Manifest next update: Tue 29 Apr 2025 03:00:32 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: Uo6Y+BjhWrMjc3sXLTGEotdqiL3Iy33mAPCI0kUmSYQ=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:56:d2:7e:4a:2f:e6:ec:a3:6e:1f:bb:6b:94:0d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Apr 28 03:00:32 2025 GMT
Not After : Apr 29 03:00:32 2025 GMT
Subject: CN=137a62c38b856641152e21ab36729b4916a25980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:08:26:f5:51:4f:b2:0d:bb:f4:cb:39:91:
fd:d5:65:63:d4:a6:b8:a3:a6:5f:55:60:bd:2d:86:
cb:35:30:9e:6b:2a:20:4d:a8:76:52:c8:60:bd:da:
63:66:2c:f0:28:92:8a:a7:4c:83:e1:e7:90:6d:7d:
33:15:4b:23:6e:3b:dc:97:a1:42:df:0d:1f:31:6e:
fb:af:ae:c8:0d:e2:84:a5:65:d0:70:56:d5:5e:47:
26:68:49:ac:f3:12:8d:60:df:b5:94:7f:bc:4b:a9:
33:0c:d3:33:66:8f:96:e8:8e:7f:6e:a3:da:2f:e3:
96:a3:a1:8f:31:f6:90:f3:c1:99:bc:d9:59:ca:a9:
c8:1b:da:4a:2b:69:84:b5:3d:55:dc:81:d2:1d:08:
39:f1:8f:dc:cf:81:f7:7c:55:12:f5:d4:d7:78:0d:
1f:d7:bb:94:4b:09:76:30:9a:19:57:7a:ef:8f:09:
8e:64:ac:5b:b5:61:73:0e:d7:c1:fa:29:c7:ac:18:
9c:fe:64:d6:ac:ae:ee:7a:d0:6d:e5:bb:94:79:e5:
47:79:62:ed:d6:c8:ef:2f:73:a8:9a:00:33:05:da:
56:b8:25:24:78:2d:40:63:7f:5e:2d:6b:f9:59:aa:
83:a8:99:e4:ef:63:78:87:9e:80:f4:fe:c8:48:9c:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:7A:62:C3:8B:85:66:41:15:2E:21:AB:36:72:9B:49:16:A2:59:80
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f9:48:92:92:33:30:49:ec:e8:55:68:1c:b8:b5:61:e0:28:
cf:ed:04:fa:f6:2b:a0:17:9f:1d:9d:cf:1b:a5:24:0f:e4:64:
25:11:81:f1:49:a7:2e:b4:05:7a:2f:5e:12:9d:bb:d4:5e:92:
6e:d2:d6:18:bd:6c:26:fa:23:ba:80:2b:32:b4:5b:60:40:5c:
31:59:24:93:cd:92:c6:ac:50:cc:1a:34:04:84:46:22:50:7c:
82:c1:69:76:3f:0c:89:08:95:a0:19:ba:23:d1:a1:d6:f1:d5:
ab:06:b6:0e:92:1e:fa:5e:78:49:4a:73:51:ad:18:e5:9d:6a:
da:7c:c0:42:19:0a:a1:c3:a7:0a:65:41:44:94:a5:fd:06:6c:
75:63:a6:95:d1:7f:7c:04:57:19:f5:51:65:99:61:f4:c8:64:
6a:fc:10:b2:0e:6f:5b:d3:4d:ff:25:5a:bb:1a:b5:9f:fe:5d:
a6:91:44:87:6c:10:34:27:1a:9c:15:97:d1:6e:bf:d1:14:5b:
ba:d2:fb:aa:aa:a1:bc:90:1c:8c:59:a5:c3:e4:b3:46:d6:c8:
18:9d:78:4c:73:5d:a4:11:5a:71:8d:61:1e:b7:af:f1:cf:0c:
d3:2f:4a:8d:5d:c3:df:79:d3:ab:b0:e3:01:23:45:91:4c:6c:
90:bf:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:13 2025 by rpki-client