Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File: P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier: deVtm4gzIHnuMNbyFwNMT74DZgVJY0HJKsGucZwH9n4=
Subject key identifier: DE:FE:C1:0B:FC:3E:85:F6:A9:E1:C9:71:46:C9:EE:ED:FE:45:E6:36
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer: /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial: 0196759E67F4726AB07C5C09A89FB2DFA801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number: 0F19
Signing time: Sun 27 Apr 2025 05:00:37 +0000
Manifest this update: Sun 27 Apr 2025 05:00:37 +0000
Manifest next update: Mon 28 Apr 2025 05:00:37 +0000
Files and hashes: 1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: O25UncVY1RonSsi73c9Nc78YOsZnFY4pHAw0SOKNPxY=)
2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:67:f4:72:6a:b0:7c:5c:09:a8:9f:b2:df:a8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Validity
Not Before: Apr 27 05:00:37 2025 GMT
Not After : Apr 28 05:00:37 2025 GMT
Subject: CN=defec10bfc3e85f6a9e1c97146c9eeedfe45e636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:15:a7:19:1f:00:dc:ad:70:ed:24:56:fb:
6e:eb:a5:b6:f6:e1:86:1b:02:21:69:64:72:7b:da:
01:f4:f8:d4:63:5f:e3:e1:c5:51:da:84:35:53:8e:
3f:7f:fe:94:d6:86:5b:70:4f:4e:e9:3b:11:d8:7c:
e5:d6:28:83:eb:2e:61:2a:6d:6f:fd:4b:c7:f5:1e:
ec:2f:8b:3a:f9:92:99:af:da:c4:2e:92:f2:ac:83:
0e:62:f6:37:6e:68:a1:bd:36:00:9a:2a:da:ef:81:
11:8c:91:85:bb:3a:4e:57:2b:6d:0f:24:86:67:9f:
1c:e1:53:cd:15:37:2e:c2:bf:ff:2f:9b:fd:46:3a:
0e:e3:f1:c4:43:91:ea:ac:73:fc:40:4b:63:6a:5e:
79:5a:ee:67:47:7f:6e:bd:98:d8:9a:c7:0b:8e:cb:
f6:61:08:fb:49:5d:2d:53:e2:38:ee:08:a4:22:f0:
f2:62:f1:59:11:42:72:b0:ad:81:0e:2f:ef:9d:6f:
1f:92:0a:92:bb:d1:a2:5a:63:4e:ad:99:54:ad:f6:
31:e3:12:49:d8:99:a0:ce:69:2f:0a:8d:ad:ae:b8:
cc:db:80:ad:2a:08:51:92:bb:48:1b:1a:f3:e7:33:
be:f9:5d:e4:3e:17:99:4b:09:1e:76:88:9d:98:c6:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FE:C1:0B:FC:3E:85:F6:A9:E1:C9:71:46:C9:EE:ED:FE:45:E6:36
X509v3 Authority Key Identifier:
keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:9b:ec:47:82:34:a2:6b:4b:27:a9:c2:60:dd:0b:f1:9e:69:
f0:55:14:43:a6:3d:2b:de:fc:de:ec:ca:2c:05:cc:20:f9:ef:
ab:e2:ac:00:85:38:6d:df:ce:3b:c6:47:96:7d:ec:0e:03:e5:
0a:00:e5:0d:c3:5f:b4:57:01:63:a1:e2:ca:20:94:dc:ab:f3:
d7:f3:f5:22:df:dd:42:0f:7a:e4:d8:97:d8:5f:0a:29:97:a3:
1e:8b:2c:f0:13:38:62:c7:6c:b2:23:f4:bb:5d:65:79:ba:13:
6b:35:b9:85:79:d7:8e:2e:89:da:48:a8:71:54:89:d3:ef:82:
65:0f:87:4d:6d:99:0a:2b:9a:de:72:a5:5d:b2:69:08:fa:1e:
4d:21:8f:1c:c2:3f:2b:78:0c:50:fc:5f:df:af:bd:95:54:0c:
80:c8:0d:6d:9d:a2:f9:4d:92:6c:9d:6f:39:3b:41:f5:93:9f:
c0:8a:d7:c9:32:c8:0e:db:0f:1e:02:10:4a:4e:a6:75:59:da:
59:0a:2e:80:4b:7b:3e:8b:ce:8f:eb:35:bc:f5:f5:47:3d:87:
9d:5f:c2:18:24:ec:44:c4:10:2f:46:75:4b:a4:a8:38:23:49:
76:a5:28:9e:2e:64:8b:99:95:6e:f8:85:8b:93:d7:f1:96:8e:
c9:b8:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:13:16 2025 by rpki-client