Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
File: P6xpra8ADdd6SwAYd8JYoh0f9qA.mft (raw, json)
Hash identifier: Q3j30HGIS/Tv4nex1RTIEQKfRvEPnKtN01/0VQSYptE=
Subject key identifier: C6:3E:91:2D:C7:7C:AF:76:58:2D:67:5A:CA:D4:2F:1E:F9:D3:C5:36
Authority key identifier: 3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
Certificate issuer: /CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Certificate serial: 0196748C0AC801229907F6BA15D589F77F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
Manifest number: 0E0B
Signing time: Sun 27 Apr 2025 00:00:56 +0000
Manifest this update: Sun 27 Apr 2025 00:00:56 +0000
Manifest next update: Mon 28 Apr 2025 00:00:56 +0000
Files and hashes: 1: P6xpra8ADdd6SwAYd8JYoh0f9qA.crl (hash: CnQfsjhGA0SzXNPFawtpWDLEulBJWF3rJEw5TTaUmcY=)
2: pGti5NOwKPTLx4Ly3hXPkfnIdHY.roa (hash: hGj1ei60T0pZizrlmStFTjFUv40NzLgMUG+0J0UuEdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:0a:c8:01:22:99:07:f6:ba:15:d5:89:f7:7f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac69adaf000dd77a4b001877c258a21d1ff6a0
Validity
Not Before: Apr 27 00:00:56 2025 GMT
Not After : Apr 28 00:00:56 2025 GMT
Subject: CN=c63e912dc77caf76582d675acad42f1ef9d3c536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:c8:9f:7e:01:20:8b:d4:64:25:2f:61:7c:
11:1c:95:68:95:81:3c:da:72:bf:d8:2e:fa:3f:8f:
61:f5:76:a5:68:b4:14:cc:41:bf:ed:ab:07:ef:15:
4c:9e:cc:43:93:4d:91:a2:88:b5:fa:5e:78:93:38:
ac:fe:22:7d:0a:66:ed:c8:93:f6:47:3f:40:94:a1:
d5:17:2b:d9:94:6f:c3:ad:9a:7a:aa:2a:72:e3:59:
76:c3:c0:28:18:ef:29:c4:cc:fa:1e:5c:12:f5:e7:
1b:a5:92:e7:43:10:81:50:82:12:4f:11:61:ae:dd:
ba:9e:2f:ae:66:e2:73:de:a6:25:b7:fa:a7:7a:6e:
62:bc:54:5e:fe:73:4e:5d:e5:e0:32:ce:ff:ab:df:
36:04:3c:e0:f7:c8:41:9f:75:c7:a6:53:af:77:5d:
17:a6:d7:00:c8:0f:45:a6:b7:8c:df:b2:bc:fa:5c:
be:33:d6:4e:ad:42:b0:72:e8:80:2c:17:aa:c4:29:
90:b3:ab:7d:3e:c5:cf:8b:52:33:58:35:45:cc:f2:
61:af:70:65:1e:5d:7b:3f:92:3c:b1:0c:bf:e0:96:
a5:1a:ff:6b:2c:4a:4e:f9:1c:e4:2b:2e:d0:cf:d7:
ef:3a:a5:60:16:4a:3f:24:96:55:8c:51:af:e7:04:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3E:91:2D:C7:7C:AF:76:58:2D:67:5A:CA:D4:2F:1E:F9:D3:C5:36
X509v3 Authority Key Identifier:
keyid:3F:AC:69:AD:AF:00:0D:D7:7A:4B:00:18:77:C2:58:A2:1D:1F:F6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xpra8ADdd6SwAYd8JYoh0f9qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d503fd-9d4b-4563-9cdf-b6e0f3e95cad/1/P6xpra8ADdd6SwAYd8JYoh0f9qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:59:c9:eb:22:08:32:6b:d3:18:68:e0:d5:46:42:d4:94:a7:
20:a0:50:49:02:8b:17:28:d6:38:72:0f:dc:ef:05:73:0c:a1:
3c:a5:79:f7:68:60:75:9e:18:a5:9c:55:a6:f9:63:b8:3a:41:
5d:80:ab:c0:b9:65:30:4e:e6:18:44:ca:51:ec:6c:4a:67:80:
c9:af:4c:4f:a4:c9:be:08:32:11:b1:bc:67:e2:da:a4:a3:ad:
bf:18:fd:32:fe:f4:c8:4c:c2:c9:8a:a9:9f:64:92:e3:bb:3e:
1e:8d:cf:b9:f2:41:89:0c:d8:6c:82:b0:f9:6c:91:08:5c:13:
a5:22:e3:e9:34:e8:5f:7e:12:79:45:92:eb:9f:56:69:b1:d2:
d8:6d:51:f2:9c:95:dc:c4:a2:82:13:e0:80:05:3a:99:27:b8:
e2:38:59:3a:8e:cc:45:de:1a:dc:91:e1:22:6e:b8:0c:95:7f:
d5:a4:6e:44:75:98:31:12:0c:3a:16:f6:17:5a:62:a2:ef:5a:
b7:11:1d:42:b9:1f:96:34:ef:3c:d0:cd:3c:b4:a4:a5:26:23:
74:5b:eb:3a:72:99:00:d8:b2:df:91:f0:2f:4f:df:11:73:52:
7c:cf:b5:14:fe:c5:1a:0c:77:bf:42:9a:37:07:97:1c:63:7b:
78:fd:44:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:32:58 2025 by rpki-client