Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: PkbBlLocRkeH7zt6jTwIf2vrmJU9eV/WtWfp2icdoNo=
Subject key identifier: C3:8F:F7:6C:DA:BB:CD:08:E8:F4:EE:85:E6:ED:72:3D:10:3A:B2:A2
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019675674BA87676A59AA128C2BB0BF92FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 08FA
Signing time: Sun 27 Apr 2025 04:00:25 +0000
Manifest this update: Sun 27 Apr 2025 04:00:25 +0000
Manifest next update: Mon 28 Apr 2025 04:00:25 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: CLrh8YDzO8B7cz7HolsAYnJepWj08Lu0LrccOyVmDYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:4b:a8:76:76:a5:9a:a1:28:c2:bb:0b:f9:2f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Apr 27 04:00:25 2025 GMT
Not After : Apr 28 04:00:25 2025 GMT
Subject: CN=c38ff76cdabbcd08e8f4ee85e6ed723d103ab2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:4c:bf:bb:4c:1d:a6:ef:5d:60:e6:fd:cb:
2c:ae:d4:16:77:a0:e5:a5:fa:23:fd:ec:d7:f9:52:
f6:98:db:88:e3:8b:e6:2d:f4:a7:bb:db:df:e8:39:
7c:c2:c1:77:7c:86:84:fa:b8:1c:7a:7b:2c:91:15:
38:7a:04:cb:62:aa:10:43:04:5b:ff:57:4d:d3:50:
73:01:76:d7:ed:b7:09:72:55:db:d1:ef:f4:de:ca:
91:3d:3b:fe:7f:58:f2:a1:4a:a3:a8:a8:1a:fe:d1:
81:3c:71:8c:6c:2d:94:77:d0:15:91:c0:49:c2:39:
49:49:c8:43:53:34:77:9e:5f:20:bc:21:d5:7a:e4:
b4:0f:82:25:53:1b:d0:6a:3c:7c:8a:f4:5e:c0:35:
b1:17:65:f8:d4:6d:07:d1:5f:9d:5e:1e:b7:41:6a:
7e:0d:db:71:79:d4:63:db:8a:35:a8:8e:ef:52:08:
9c:83:1e:b2:bb:ba:33:b2:ef:75:5a:5d:10:da:07:
61:c0:d8:b9:5b:64:e9:e7:5d:d7:54:87:63:32:26:
01:0f:db:a2:57:9b:62:2b:32:e5:91:64:21:2c:54:
f6:0c:58:87:22:0c:61:af:01:df:15:8b:24:7e:78:
c7:17:44:dd:89:5d:ae:ff:a9:09:ea:bf:02:ee:f0:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:8F:F7:6C:DA:BB:CD:08:E8:F4:EE:85:E6:ED:72:3D:10:3A:B2:A2
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:34:95:b5:fb:d9:32:27:54:44:11:8a:01:3d:53:41:5d:2d:
44:1a:88:11:6c:71:6c:5b:7f:1f:ef:63:c1:1b:fc:0d:51:43:
94:a0:71:cd:ea:56:ce:e8:ab:26:57:ba:40:1d:b4:98:60:e7:
1f:70:3f:16:b9:21:7d:51:c4:f0:76:4a:bd:39:4d:07:6e:7f:
ac:dc:05:7c:e6:ac:2e:61:8f:37:bf:0e:2f:8a:c7:b0:42:76:
9b:b6:28:2a:5f:d2:bf:46:a6:4b:be:01:61:1c:38:1e:6e:c2:
43:c6:34:7f:fe:4f:3c:64:3d:2e:c8:89:bf:49:b0:d2:35:ed:
ff:b7:ee:db:ae:c0:29:ea:70:a2:93:c0:71:11:69:94:d1:e7:
c5:a3:df:10:1c:f1:54:5a:64:4e:e2:50:48:f0:d4:55:f1:a7:
4b:fd:dd:f5:22:d8:db:7a:3d:b5:c4:1a:6d:26:77:3a:de:06:
6e:66:2b:85:8d:4d:4a:31:a6:ec:34:87:16:48:b4:fa:fd:ce:
b1:d5:59:7a:86:41:2d:c6:f4:af:41:9d:07:0b:21:a1:45:48:
13:8d:59:db:06:95:59:85:11:60:bc:49:67:10:45:6d:c1:cc:
a1:e4:9d:81:20:30:e8:36:d8:b0:c0:4d:f9:68:27:ec:f5:a3:
ce:ae:04:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:23 2025 by rpki-client