Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: Uj8gjBat88c3qx6aXvsQ78s8NWb3BEyjxwrB2J0fr2M=
Subject key identifier: B8:66:36:97:05:E5:EA:2F:02:EE:98:61:74:38:DA:75:80:CA:FD:D5
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 019690DE508CA49BD85F386BCD5B6B046FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 14A1
Signing time: Fri 02 May 2025 12:00:10 +0000
Manifest this update: Fri 02 May 2025 12:00:10 +0000
Manifest next update: Sat 03 May 2025 12:00:10 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: v8TY7SEYDU097xO/PA0edK+tKi5MHyQ7CC+6D+FPmXo=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:de:50:8c:a4:9b:d8:5f:38:6b:cd:5b:6b:04:6f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: May 2 12:00:10 2025 GMT
Not After : May 3 12:00:10 2025 GMT
Subject: CN=b866369705e5ea2f02ee98617438da7580cafdd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:64:55:65:e2:e4:b0:63:b8:96:e1:41:d6:29:
10:eb:ac:ca:3e:62:a0:68:e9:50:be:71:74:a4:a1:
28:ba:a2:6c:37:62:98:77:98:b5:c2:88:62:26:e7:
ac:29:f9:64:65:ce:0b:dc:76:a1:31:ee:b5:03:d0:
b2:1a:bc:fc:79:75:80:30:38:46:a4:4e:91:10:fd:
d3:40:13:d3:dc:13:98:12:c3:85:68:0a:0d:c9:a7:
86:6b:26:ce:37:cd:36:ea:c4:23:26:85:9a:1e:a1:
c8:6f:d6:b4:0f:c1:79:17:7c:78:a7:31:db:d0:31:
34:37:d7:85:b4:07:aa:44:fd:0a:7c:ea:2a:b8:a4:
f3:63:f4:41:9a:f3:7c:82:81:01:51:8e:af:5a:9e:
e8:3e:9f:30:25:8f:7d:e7:07:54:96:67:c6:33:54:
10:31:26:92:1a:de:80:54:3d:e2:be:fd:18:5c:4c:
bf:d0:80:c1:b1:1b:c7:92:94:53:d6:6b:89:62:c5:
c9:c9:b7:53:d9:29:fd:17:f4:38:ee:3b:c6:03:f4:
35:66:de:6a:14:5e:c9:74:77:bc:af:53:d6:b1:5a:
32:18:24:d9:a9:04:8a:b9:7f:c4:ec:4e:fe:bd:76:
79:72:66:ae:f9:c0:2b:41:ba:4e:f5:b6:52:c4:90:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:36:97:05:E5:EA:2F:02:EE:98:61:74:38:DA:75:80:CA:FD:D5
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:02:0d:de:fc:69:71:ba:f2:46:1c:b6:eb:93:bc:6f:ff:
59:ca:f4:b5:c2:bf:b9:89:fb:1c:28:ff:9f:a4:80:e5:7b:96:
50:9c:b9:2d:e6:38:bb:cd:1f:8f:7c:8a:b4:0e:4f:13:d8:70:
f3:a4:de:94:f1:64:75:2a:8a:3b:b9:2c:d8:f7:7c:58:b5:19:
b5:c5:e7:db:a6:84:02:3a:c1:60:bf:86:30:d2:ee:f3:57:85:
65:ea:4a:e4:a0:5f:a4:00:15:7a:b3:16:48:a5:4d:d9:02:db:
2f:0d:8b:72:46:41:db:a0:a7:12:b2:bd:5a:da:5b:5e:01:21:
f8:d6:08:49:a9:63:69:4b:e3:d1:de:db:8c:7c:ef:e3:18:b8:
fb:93:01:7d:28:56:fd:69:54:da:4e:c6:dd:62:a8:fe:8a:33:
0b:86:d8:34:ba:7a:e5:e9:02:75:77:0e:7b:c3:f7:ba:8f:8b:
8f:21:98:ef:0e:5d:58:7b:96:02:60:f5:22:65:a0:d8:b5:38:
e5:15:e6:ff:33:96:f7:6e:7f:a3:9f:0f:e0:41:4c:db:0d:73:
00:b3:11:ab:f7:67:2b:0d:fe:91:24:6f:e6:1f:5e:84:13:92:
dc:f7:c9:13:78:40:d6:16:b2:91:da:5a:3c:fe:8d:8d:33:c8:
4f:13:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:41:03 2025 by rpki-client