Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: NvOszHUHabcmcdCbDPGRxTYiiYNTDK+vNA/glI7D4ZI=
Subject key identifier: FD:B5:34:3E:54:AB:54:10:83:66:8C:86:47:33:07:65:5D:0F:08:D0
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 01969DF587F1900F9B9D3D19D9AE4BE3B931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 1436
Signing time: Mon 05 May 2025 01:00:36 +0000
Manifest this update: Mon 05 May 2025 01:00:36 +0000
Manifest next update: Tue 06 May 2025 01:00:36 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: o+0IVQlh3P35JrMRxfi2tGBPTHd66FBnsI93GywXVdg=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:87:f1:90:0f:9b:9d:3d:19:d9:ae:4b:e3:b9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: May 5 01:00:36 2025 GMT
Not After : May 6 01:00:36 2025 GMT
Subject: CN=fdb5343e54ab541083668c86473307655d0f08d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:93:57:cb:f9:07:7e:22:28:2d:3a:58:79:
c7:c0:c4:20:45:7d:0f:fc:1a:ce:5a:af:02:36:b2:
85:8a:4b:dd:f7:de:f1:cb:a5:0b:70:c3:ee:52:33:
64:a6:f2:da:c3:85:ec:2f:4f:84:5c:bd:42:e3:47:
18:d0:50:78:94:29:1f:bf:eb:26:0f:dc:ab:ae:90:
eb:be:a4:83:e7:30:e5:1c:6c:25:a7:fb:33:40:17:
b5:82:20:ea:82:ae:b6:c5:b7:9b:47:59:aa:41:71:
4f:d7:4c:7b:fd:fc:c0:64:a0:d6:9a:5a:db:d3:18:
ab:84:0f:d3:2f:ca:b4:ea:06:08:e0:99:67:1d:3e:
35:5f:aa:5f:68:5a:0f:ed:d0:11:b2:30:6f:f1:9b:
dc:26:dc:6a:6f:dc:f6:b1:b2:45:78:1b:18:8c:4f:
ef:23:49:a5:38:c5:ef:f2:a4:20:8b:93:f6:5e:1b:
69:6c:70:ce:e1:b3:2f:95:d1:50:d0:7b:dc:41:1a:
e2:d7:21:86:08:92:a1:2b:e5:0f:16:e5:14:45:0f:
2d:df:e6:be:b6:af:24:bc:8c:8e:34:c5:93:e1:2d:
4b:84:f9:8e:00:83:6e:cf:b2:a4:46:ec:53:ae:9a:
5b:95:df:2d:7f:0c:e4:0b:5c:ee:b8:c1:43:1a:e0:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:34:3E:54:AB:54:10:83:66:8C:86:47:33:07:65:5D:0F:08:D0
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2b:d3:01:fb:f2:ef:42:f8:0b:46:7d:07:c1:81:d2:89:03:
0d:49:cb:2f:29:1b:d9:10:dc:db:3a:86:9e:54:9f:5d:03:af:
62:99:0b:46:48:58:64:b6:50:13:3e:d6:70:fb:91:8a:89:d9:
ee:1f:41:28:a1:65:dd:63:66:05:25:d2:ed:2c:39:bd:79:59:
0c:5a:cc:7a:44:b5:62:1d:77:7e:78:87:ae:1a:4d:04:c7:11:
6d:69:e4:80:76:42:8f:af:e3:00:18:2b:ce:58:b5:93:fa:5f:
83:ef:af:48:b9:b1:73:e7:da:9d:37:75:a9:da:20:64:7c:e0:
89:ae:a1:0c:2d:27:49:b2:05:4e:43:04:8e:4d:31:7d:4a:e0:
83:2f:c4:73:ed:ad:14:e9:c2:f0:00:4d:fd:f6:31:a8:d9:d0:
08:23:52:13:ce:f2:b3:bf:17:27:17:c9:61:be:e9:fc:9d:c6:
d7:c0:7d:69:44:b8:c5:49:68:04:24:e1:74:d2:17:5d:2a:5d:
57:3c:85:87:96:80:04:74:27:1f:15:40:44:2b:0d:67:4f:dd:
ea:8c:64:7a:70:bb:b5:b3:0f:ae:1f:b6:7b:08:1c:e9:5c:6d:
03:3f:4d:ee:d1:74:33:d7:3b:f2:16:54:88:7a:9a:38:9f:28:
3a:78:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:07:40 2025 by rpki-client