
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: RmJ+pfXW16Dd+GpiKicU2JU26nin0+XLKhAghV66ZFU=
Subject key identifier: 0C:5F:F0:01:A2:C8:85:E9:CD:D8:2C:47:C4:F0:70:2F:7E:2B:EC:56
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 01968F952932F8141B3632BE827520D13278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0613
Signing time: Fri 02 May 2025 06:00:39 +0000
Manifest this update: Fri 02 May 2025 06:00:39 +0000
Manifest next update: Sat 03 May 2025 06:00:39 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: CCRCMEOvx1P75vCaUVZq3fx7BJUuf0rs1IVHPJ5hllM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:95:29:32:f8:14:1b:36:32:be:82:75:20:d1:32:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: May 2 06:00:39 2025 GMT
Not After : May 3 06:00:39 2025 GMT
Subject: CN=0c5ff001a2c885e9cdd82c47c4f0702f7e2bec56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f3:1c:63:9c:c4:69:ff:b8:f7:df:2d:42:aa:
a4:5a:6a:d6:af:8e:d4:79:c1:8f:18:08:06:7e:9d:
ec:72:c8:0e:77:3a:e7:bf:2f:21:e4:44:e9:09:02:
36:78:c0:7e:77:26:62:16:47:7c:17:57:ba:a4:be:
41:42:8b:03:bb:5a:6c:56:fe:4e:2b:24:40:0e:35:
e6:69:99:6f:9c:38:8d:1b:4a:40:5c:48:bb:ca:52:
fb:4c:55:73:87:28:6e:e8:13:45:12:65:8a:2b:ed:
41:70:c0:d4:46:96:d5:15:dd:90:9c:4b:15:00:75:
ea:6e:68:19:35:56:37:c4:74:69:01:b5:48:30:17:
fb:14:f9:87:d0:7e:0f:b5:f1:d8:d4:ac:f4:35:c0:
a7:f2:b6:c8:bc:4b:1e:6a:3c:7f:c5:90:f6:c4:ac:
fb:73:d1:aa:61:e4:2d:9c:55:91:23:cc:85:80:97:
a1:98:a2:07:3a:8c:33:4e:d1:fd:59:2d:07:3a:f0:
84:05:79:6a:0a:03:7c:02:e0:04:60:a2:95:76:eb:
69:75:2a:2a:1e:3c:ab:0e:07:2a:7f:35:b6:75:dd:
55:45:bf:7d:5a:2d:17:82:93:c8:02:a3:26:03:c3:
42:1f:8f:b0:c9:e0:e1:9d:57:c3:cb:a9:50:54:e3:
d8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5F:F0:01:A2:C8:85:E9:CD:D8:2C:47:C4:F0:70:2F:7E:2B:EC:56
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e5:82:6d:f1:44:75:59:16:2d:e3:ee:93:52:ba:ae:7c:3b:
6c:16:b5:52:19:b1:cf:ea:d6:ea:77:6a:f8:12:98:7b:bd:92:
72:9c:8d:1e:ae:e0:92:aa:c2:fc:77:ff:62:20:e2:99:53:93:
39:cd:f5:5b:60:a1:49:fc:31:78:4e:00:1f:ed:80:51:03:47:
aa:a6:19:93:65:35:a1:79:c6:8d:c8:36:1a:2f:08:1e:28:01:
4b:0a:01:99:32:2d:f3:a5:76:6d:d5:93:69:ed:ce:9f:50:0d:
de:6a:3f:d8:e2:8d:86:b7:16:7d:2a:4f:82:a3:ff:89:87:7f:
15:0d:d0:25:37:85:c5:ff:f0:b7:2b:45:03:15:18:d7:1d:11:
75:ce:17:43:7b:f8:0f:e3:5e:e4:fe:cf:d8:42:fd:d2:a2:0e:
17:4e:b2:97:c9:ea:56:2e:b9:ec:34:9a:1e:56:08:6b:3a:fb:
6f:ab:30:46:96:35:bb:40:79:48:bd:4a:40:82:5a:fc:41:5c:
f5:5e:59:10:08:11:bf:d7:ca:8e:4a:0a:e4:e9:41:c9:ce:0b:
70:5a:03:b9:eb:20:13:9c:38:a9:36:a8:30:f4:d2:12:13:32:
88:a2:2a:64:7c:21:49:dd:c7:ad:0b:54:41:95:30:6e:b5:2a:
77:5d:1e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:50:39 2025 by rpki-client