Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: uloxWHb6vtSJk7y98hS9b67Fxbnnp+sSHWojPuVht5o=
Subject key identifier: 65:0B:23:6E:DA:F3:FC:55:91:1A:CD:19:A1:8F:F8:F6:70:B7:C3:F4
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 0196786858521B44C6C1D275FD4F94496B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 04F7
Signing time: Sun 27 Apr 2025 18:00:26 +0000
Manifest this update: Sun 27 Apr 2025 18:00:26 +0000
Manifest next update: Mon 28 Apr 2025 18:00:26 +0000
Files and hashes: 1: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: Wr+HJXcMbvRDPc2ICWb1kdZFBn1PlUwvGiUwDVHrb6w=)
2: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (hash: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:58:52:1b:44:c6:c1:d2:75:fd:4f:94:49:6b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Apr 27 18:00:26 2025 GMT
Not After : Apr 28 18:00:26 2025 GMT
Subject: CN=650b236edaf3fc55911acd19a18ff8f670b7c3f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:80:d3:6d:f0:d2:a6:0a:d6:2b:6c:57:77:
c4:5a:38:af:39:e3:51:e2:b1:bb:db:79:e9:10:68:
19:3f:41:66:90:e3:d7:de:b1:53:bc:3e:f6:d0:1d:
17:ee:1b:a6:e3:a3:2e:1f:5a:c3:6f:89:a8:ee:7c:
a8:a5:51:79:d6:ac:09:86:e2:ad:13:49:9e:e5:2b:
a1:32:92:47:1f:62:31:99:46:04:cd:cb:5d:7c:72:
9c:cb:5b:6f:db:9b:19:fd:6e:4c:70:ba:08:3c:e5:
dd:c1:5b:86:a6:32:47:19:ca:6d:0e:6f:7b:5b:99:
a3:96:29:15:a7:26:0a:ca:86:23:6c:34:3c:f5:71:
1d:9f:34:c0:3b:8f:82:38:39:32:5b:af:23:4e:23:
d8:68:4c:0e:3f:c3:bc:ca:3a:17:41:39:eb:53:ff:
bd:97:cd:9b:82:67:e3:c6:86:5d:15:80:7e:6c:49:
c9:18:cf:06:00:40:76:37:03:c2:34:56:ba:5f:ea:
39:bd:f7:b0:75:6e:bd:eb:f8:c6:be:24:ba:81:35:
49:5d:f5:c8:9e:dd:b3:b4:00:8e:27:0a:34:78:93:
b6:53:57:38:ac:f5:b1:19:56:af:6a:5e:a1:56:f8:
a8:0f:22:a3:04:b0:48:df:af:97:09:b3:93:91:20:
10:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:23:6E:DA:F3:FC:55:91:1A:CD:19:A1:8F:F8:F6:70:B7:C3:F4
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ab:9f:a4:56:96:49:c7:6b:54:e6:b5:7b:1c:93:12:f8:6f:
2d:2b:d7:f6:aa:83:da:6b:65:9c:4b:22:6b:f3:ca:91:e8:0e:
32:34:9e:df:55:d5:d8:18:2c:27:0b:45:8e:69:c8:25:40:fd:
3d:d0:a8:64:58:bb:7a:63:f4:e4:a9:5a:ec:dd:ff:68:0d:42:
4f:98:29:78:3a:fa:45:bd:43:ce:2f:11:0c:30:c9:65:91:22:
08:b2:c6:c0:09:0b:37:1e:fb:ea:e6:d0:c6:a8:62:8f:53:ea:
d1:5f:b0:08:b1:71:4a:0d:c4:f5:e0:31:4e:16:6c:b4:ce:7c:
ae:b4:9f:2a:fc:82:36:22:de:6c:8c:c1:ee:39:0d:72:85:8d:
23:9c:fa:e9:dc:37:35:ee:cb:2d:db:0e:47:6f:b1:3f:24:c6:
df:66:9a:42:56:20:f5:da:52:a2:a0:8f:3f:0f:53:5f:2f:23:
9e:38:c8:a4:91:9b:9c:f7:4f:f4:2f:75:70:3d:28:55:88:a2:
d9:ad:d9:74:43:50:ae:9b:7c:ff:21:45:51:79:2c:3d:53:37:
ab:63:7e:0e:a7:03:2e:84:2d:fd:16:d2:5a:c5:df:97:69:06:
cf:80:41:0b:7c:19:2d:a7:b8:28:e6:02:a7:85:64:fe:01:0a:
00:9f:a7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:06 2025 by rpki-client