Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: u0FnP2ZesCr2iumh0ki5uV8fNRfTo0tVh/5eG+OOEmw=
Subject key identifier: E2:78:92:52:A5:76:BE:F3:84:24:0E:8C:CA:B0:60:26:8B:D3:FC:50
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0196764318596845BE1C4BB80A970AA1FE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 23
Signing time: Sun 27 Apr 2025 08:00:30 +0000
Manifest this update: Sun 27 Apr 2025 08:00:30 +0000
Manifest next update: Mon 28 Apr 2025 08:00:30 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: w3wP5WGLCBPKSuwRgSxOwxvxV1Rj9xzIg+EAEVVktIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:18:59:68:45:be:1c:4b:b8:0a:97:0a:a1:fe:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: Apr 27 08:00:30 2025 GMT
Not After : Apr 28 08:00:30 2025 GMT
Subject: CN=e2789252a576bef384240e8ccab060268bd3fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:f8:97:8b:50:fd:69:f6:83:2b:2d:1e:9d:
d0:13:0d:2a:dd:1f:65:ee:2d:89:ff:6c:3e:29:63:
af:5e:77:5f:1a:05:71:bf:98:72:39:6f:a0:09:cd:
9b:40:7c:fe:78:50:6d:c1:29:c2:87:76:fb:37:e0:
09:ec:f2:9f:45:44:41:5f:3c:62:21:c4:f5:8d:bc:
5e:74:a1:e6:d8:1b:82:bf:87:05:b1:3a:34:56:5c:
8d:13:af:48:fd:2c:07:2a:89:e0:8c:11:f4:b3:eb:
38:69:57:6e:93:5f:60:8f:5b:29:a2:6a:26:1f:0a:
d5:40:e8:62:c4:4e:30:1c:86:7c:25:34:92:ca:bb:
33:4a:8a:94:c1:98:a3:d8:35:f3:54:c0:35:2a:7c:
07:d8:25:6b:04:37:20:86:15:dc:85:ad:38:ee:1e:
cc:03:72:81:9d:08:5e:49:1a:32:7f:9d:87:53:a2:
9a:28:60:e0:6f:35:ae:db:12:36:14:bf:be:02:10:
ee:f8:61:5b:34:0d:79:3f:d4:eb:21:a7:f2:8a:c7:
cb:0d:36:30:5a:a5:4f:44:6b:bf:fd:b0:00:f1:d8:
9e:db:1e:24:06:de:21:f3:3c:75:4a:22:2e:d7:89:
4f:33:81:30:8f:87:b3:7b:c0:00:f0:43:61:e9:26:
70:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:92:52:A5:76:BE:F3:84:24:0E:8C:CA:B0:60:26:8B:D3:FC:50
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d3:6c:7b:91:5d:19:0d:5a:44:0b:1c:3e:82:b2:ab:72:94:
8d:ab:14:ac:48:c3:7f:c3:15:8f:07:bc:b8:6f:73:61:01:c9:
14:82:23:68:1f:6a:87:cf:65:25:b0:65:95:41:3a:d7:34:9a:
84:77:f9:ef:6d:51:68:c5:6b:07:5b:61:92:9b:1c:d6:54:73:
47:7f:13:f3:b6:61:53:84:cc:57:af:13:f4:e0:8e:ab:12:58:
30:a3:b0:2b:b2:f0:8c:18:0a:72:46:ab:ee:b2:01:5d:b5:68:
b4:de:24:35:43:d8:87:d5:af:72:ca:f2:5d:2a:87:22:30:fa:
68:4f:d0:80:2b:f1:a0:fc:8a:d4:f9:d4:6f:22:c7:bf:6b:93:
2a:98:d9:41:63:0c:94:38:a1:e0:bf:9b:f9:95:d5:20:c6:f6:
41:e5:0a:d1:3f:af:5a:11:b2:1a:91:e6:7a:bf:48:c0:cf:fb:
9e:7e:6a:f5:b3:9f:7a:c6:94:1b:22:28:9d:da:d5:cf:d4:30:
f7:bf:49:e8:ad:c8:c5:09:01:ec:34:b7:94:19:9a:ab:eb:be:
73:2b:42:a0:cd:25:39:74:fc:2b:35:e1:8b:a6:f3:5b:8a:91:
b0:03:7e:ba:79:f4:da:fb:22:79:21:80:04:08:ac:f0:d4:7f:
98:8e:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:12:24 2025 by rpki-client