Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: QsWsXolmPwf7B6kELehLjedjdoTvTGNSVHGwLSp0I/0=
Subject key identifier: 08:6A:66:6E:C1:1D:6C:68:13:05:5C:78:05:30:07:BC:98:67:7A:1F
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 0196797B123EFBA184622AE29365B0C5D103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 23:00:30 +0000
Manifest this update: Sun 27 Apr 2025 23:00:30 +0000
Manifest next update: Mon 28 Apr 2025 23:00:30 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: 8wlEdVqq4aGTwLP/lcffgquphNc36vV6XNixnWrLd2c=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:12:3e:fb:a1:84:62:2a:e2:93:65:b0:c5:d1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: Apr 27 23:00:30 2025 GMT
Not After : Apr 28 23:00:30 2025 GMT
Subject: CN=086a666ec11d6c6813055c78053007bc98677a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:10:c0:5c:2a:5f:47:64:47:e9:e7:6b:c1:3e:
33:66:fb:e8:bc:35:34:51:2b:6a:13:02:0c:53:cc:
5a:a0:46:e9:25:52:46:c2:2b:35:88:1e:c4:0a:55:
73:ec:84:c8:39:8a:60:93:18:d2:a5:45:0c:cc:09:
ed:d0:cb:ce:b5:eb:ab:70:82:f0:75:95:be:06:79:
a3:05:e5:2a:6b:87:9e:a9:ea:cd:73:f3:d7:02:56:
8d:53:48:f7:03:92:92:32:35:31:9c:c3:f4:50:42:
d7:1c:b6:d0:c1:6d:62:03:65:f2:74:39:32:ad:15:
75:77:0c:2c:2b:cc:5d:f4:e8:40:3f:87:f1:88:aa:
05:d9:ad:e8:78:c4:d7:13:7f:16:e1:a5:b6:8f:04:
8e:c6:31:19:d2:07:f2:05:46:c2:35:96:8d:95:30:
7c:67:fb:6b:c0:75:45:b9:fb:71:46:5a:1c:73:ee:
00:34:9f:ba:97:3a:58:c7:97:9b:d8:94:89:4b:7a:
2c:47:03:f3:50:82:76:74:e3:d3:50:03:9c:4e:07:
33:69:ad:6b:00:40:5e:42:78:42:22:82:f8:d9:f8:
57:53:09:c9:57:62:71:ca:da:2b:42:d9:16:8c:89:
5e:4a:cf:a3:38:ae:75:45:ca:52:55:f4:63:db:a5:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:66:6E:C1:1D:6C:68:13:05:5C:78:05:30:07:BC:98:67:7A:1F
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:37:9b:5a:04:3f:f6:97:34:69:26:bc:5b:0e:e2:27:dd:fc:
9f:23:a1:45:e3:5f:aa:ba:11:5a:85:f9:ae:75:aa:6f:72:92:
17:99:7b:05:43:38:0c:0d:da:24:70:1d:30:4f:98:a3:0f:a6:
ad:a7:85:aa:e5:28:67:2f:93:3f:b1:56:a0:04:81:14:46:36:
d2:c0:62:8c:87:70:b2:08:b2:aa:e5:2d:79:f1:ca:19:b9:7c:
94:b6:df:3f:01:3e:2b:7b:cb:b1:eb:bc:3e:af:eb:78:25:1a:
ce:3f:d8:30:72:ba:17:6d:af:93:7f:22:8f:8b:9e:71:54:41:
45:67:25:91:5f:6e:6c:48:86:b7:bc:27:90:01:d4:e2:65:1c:
78:a1:fa:e7:6a:bf:a6:e8:ae:fb:0f:cb:85:f0:1a:5c:16:71:
ce:a6:f7:15:8e:46:a1:ee:e1:2c:eb:cb:8f:ac:ef:32:1c:59:
fe:0c:ce:f1:96:0a:60:eb:a4:4a:2f:7f:c5:da:d4:d8:24:5a:
de:25:ff:57:8f:ed:e7:40:c8:c7:44:ff:5f:41:2d:19:aa:cc:
51:2e:65:2d:de:e0:21:b1:0b:2d:26:8d:ea:fa:fe:a2:cb:ec:
91:c8:38:b5:f9:24:5d:1b:5b:3c:f9:bc:e1:25:c2:c7:cc:83:
55:30:95:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:38:38 2025 by rpki-client