Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: NsyQPtjDUo/u8ORRWwOPU402qq39wZxfhwtt5fEoQE4=
Subject key identifier: 5A:F0:3E:9E:EA:F4:48:80:90:3E:38:CF:61:FF:B6:44:83:9F:ED:52
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 019674F9D3DE91F74C91ECB1DF9D6A732F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 14E7
Signing time: Sun 27 Apr 2025 02:00:51 +0000
Manifest this update: Sun 27 Apr 2025 02:00:51 +0000
Manifest next update: Mon 28 Apr 2025 02:00:51 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: AWH2gqPSPNkQOS/z+ki8lJNKC0hDPeEyRgnVS3iBft8=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:d3:de:91:f7:4c:91:ec:b1:df:9d:6a:73:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: Apr 27 02:00:51 2025 GMT
Not After : Apr 28 02:00:51 2025 GMT
Subject: CN=5af03e9eeaf44880903e38cf61ffb644839fed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:72:5d:83:b8:57:4f:83:70:b7:c4:10:68:
db:e5:ec:1a:71:7d:0a:b9:82:ea:e0:f9:77:99:8b:
91:62:9b:f0:24:38:61:8c:fe:e6:8f:96:47:04:f9:
bd:6c:60:99:08:31:99:73:f5:e0:e8:eb:a1:8c:6e:
bd:71:0d:74:17:96:93:7b:61:1e:9d:b5:c3:93:ed:
a6:20:ce:df:fa:df:b7:61:f5:bf:4c:d5:79:5e:fe:
08:e5:76:d1:9a:13:09:20:ba:bb:20:0e:94:e0:a3:
65:3a:35:4e:3e:19:d9:6d:db:40:5a:e5:95:50:ca:
e1:25:3f:88:34:9d:88:e1:3a:80:a5:34:e8:f4:7c:
89:a0:0e:41:2e:05:97:90:a5:53:3b:a5:d9:13:41:
94:5d:8b:e3:a4:59:47:6a:bb:33:06:37:6a:8a:db:
44:6c:c7:cc:bf:6a:33:c9:0a:3e:f3:08:dc:2e:a8:
ca:07:d9:29:6a:58:11:4d:38:00:2c:df:73:86:58:
b0:64:94:72:61:6c:d7:d5:02:22:b3:65:1c:38:61:
e4:eb:5b:0d:2a:31:75:da:73:83:19:44:7f:8d:37:
f9:9a:79:cf:4d:86:8b:b4:dc:f2:18:fa:ee:f4:b7:
48:21:92:1f:c5:72:b0:05:51:2b:d1:77:85:6c:d7:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:3E:9E:EA:F4:48:80:90:3E:38:CF:61:FF:B6:44:83:9F:ED:52
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:56:d8:a1:db:89:e5:6f:4f:06:15:d9:0e:33:1d:7c:1b:
a7:b0:29:ea:9b:43:96:89:92:28:8b:57:c7:5f:29:4b:f3:80:
e9:1a:c8:f5:63:74:97:4d:00:90:30:81:4e:71:6b:79:83:22:
c8:e3:64:10:e2:a3:3c:36:82:1f:8b:7d:e4:04:9b:4c:51:9d:
3e:52:32:a3:75:db:bc:5f:8d:f4:c0:5e:4e:14:51:4a:e5:60:
6f:71:1e:24:4a:c0:56:6b:1d:60:0f:66:35:a6:6c:41:ac:8e:
33:5b:85:85:88:16:7d:15:ae:97:aa:f2:f5:ce:c8:95:b1:f3:
85:ea:c9:60:04:91:77:35:63:ec:88:e8:82:0d:9c:6c:c5:62:
8c:9f:7c:1e:f5:33:54:3e:80:d7:4a:e4:c1:19:2b:ae:22:58:
64:9e:ab:87:10:83:aa:1b:eb:70:94:0b:20:b9:64:47:e9:04:
45:60:ca:43:c2:a4:ba:ba:87:81:f0:04:b1:4e:cc:a2:19:ab:
da:e3:68:bd:5f:43:bb:49:aa:c3:6b:14:3b:52:c9:5f:fc:9d:
86:da:ac:40:a9:aa:fd:05:88:41:7a:14:bd:bb:c5:7e:05:31:
46:d2:be:82:fe:20:13:46:3f:b8:fc:fd:24:6c:15:e1:6c:8f:
37:c0:98:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:33:33 2025 by rpki-client