Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
File: P1vEQBQoW28-KHKuz11PM-Jozos.mft (raw, json)
Hash identifier: EVoBN5xf7yiS152h9B5TS5a/78rO/eodSLFCKm0DkpU=
Subject key identifier: FC:BA:84:6C:F6:61:D4:F6:E8:92:4B:DC:F1:39:5B:9B:E6:13:C4:D4
Authority key identifier: 3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
Certificate issuer: /CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Certificate serial: 0196D21A32A3723F4E168A44884B011D726E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
Manifest number: 063D
Signing time: Thu 15 May 2025 04:00:54 +0000
Manifest this update: Thu 15 May 2025 04:00:54 +0000
Manifest next update: Fri 16 May 2025 04:00:54 +0000
Files and hashes: 1: AcEkQsHgOk9cJvafcwY_24-gqJU.roa (hash: P0WFMbng9Ro3ND0yeTy1ArY8fd/+6N/p4Vx6hJOnIpk=)
2: AhGacAZRO8Gx3hNBgiDjl4oZgqI.roa (hash: /EpJOq122VUgjLXObaWDOaWwB7lmX3CrZN3WS11mATY=)
3: P1vEQBQoW28-KHKuz11PM-Jozos.crl (hash: HYaa4gypfuCP/CYwJaZ+is6lZqZeucCR+fp5m332qzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:1a:32:a3:72:3f:4e:16:8a:44:88:4b:01:1d:72:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5bc44014285b6f3e2872aecf5d4f33e268ce8b
Validity
Not Before: May 15 04:00:54 2025 GMT
Not After : May 16 04:00:54 2025 GMT
Subject: CN=fcba846cf661d4f6e8924bdcf1395b9be613c4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:7e:14:35:2a:e2:cf:66:bb:d2:6f:c6:bb:
6c:18:fe:03:b4:bf:86:12:1b:d4:06:dc:7a:38:22:
39:54:32:2b:cd:95:31:e0:0c:ae:d1:56:24:4c:cf:
1b:e8:94:d3:7f:fd:c3:78:26:aa:f5:b1:48:c5:d8:
24:ef:d9:fc:14:ee:8e:25:bb:1b:92:97:e1:48:d1:
e4:58:1a:b5:45:c6:95:82:8f:dc:25:07:2b:ed:5c:
ba:4f:a6:4f:b0:e7:e8:b0:a4:9e:41:8c:b1:58:1c:
3d:68:81:11:63:f3:ce:25:7e:b2:0f:12:40:d2:37:
c5:22:74:31:2a:c0:b4:38:4e:a1:57:ca:54:a4:5b:
f6:9e:13:2e:8c:63:48:05:70:d3:6a:d6:58:1e:00:
8e:9c:db:f2:81:37:fc:82:6c:b8:54:a1:23:3c:df:
81:8b:c7:30:e7:db:f2:75:01:82:27:a6:4c:bb:a6:
de:65:32:bb:37:16:f5:5f:e5:b8:99:8c:66:85:4a:
fc:7e:99:d5:f1:f8:a9:1e:e8:88:8d:a1:97:90:d0:
94:7b:af:de:92:a2:e4:1f:9a:cc:c5:ef:2c:c3:15:
53:51:4a:44:89:4f:e4:80:92:7e:0f:4c:79:dc:4b:
fb:1c:f6:cf:34:cd:f7:fe:09:47:38:df:69:c3:49:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BA:84:6C:F6:61:D4:F6:E8:92:4B:DC:F1:39:5B:9B:E6:13:C4:D4
X509v3 Authority Key Identifier:
keyid:3F:5B:C4:40:14:28:5B:6F:3E:28:72:AE:CF:5D:4F:33:E2:68:CE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1vEQBQoW28-KHKuz11PM-Jozos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/322693-e58b-48e2-bdd9-02953ce63843/1/P1vEQBQoW28-KHKuz11PM-Jozos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:77:9f:8f:3f:b9:ab:d6:a8:a7:81:4e:47:a5:83:71:ea:1d:
15:6d:d9:c1:f3:3c:1d:aa:6b:85:c9:cd:bd:3b:79:78:3c:3e:
2f:22:56:b8:82:f4:bb:01:97:3a:c3:f2:cd:66:87:0b:f5:d1:
01:4f:ba:66:f8:1b:e8:0c:e8:a6:43:bb:47:4e:36:c6:99:80:
ee:69:dd:c6:ef:ee:3e:51:21:ae:05:15:a9:19:7f:6a:6f:69:
b4:59:c4:fd:e3:b5:a3:a6:f3:79:e6:89:2a:83:43:13:98:05:
7d:b4:b5:69:b3:7b:ac:74:d2:1f:4f:e2:94:d3:07:7f:dc:10:
61:7d:98:4c:fa:dd:37:1e:d2:ce:af:46:d0:dc:22:13:d0:b1:
db:a2:05:c0:2f:27:67:49:95:25:7d:ff:51:76:7b:da:29:c4:
0a:23:c9:3d:49:15:d1:99:5a:9f:72:20:9d:2b:30:c7:c0:a4:
38:bf:e6:b0:12:b3:4f:99:09:3f:44:c4:59:ac:22:51:fc:0c:
4d:ea:80:24:d9:2f:57:a5:d5:ac:e5:65:91:b5:7c:ec:2e:e7:
17:17:1b:e0:70:f7:b5:0f:81:13:8d:01:9f:39:35:37:1a:ac:
24:01:cd:c3:f8:44:40:64:90:58:f1:02:82:ef:b0:b8:c3:82:
96:13:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:09:30 2025 by rpki-client