Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
File: P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft (raw, json)
Hash identifier: t7P/omAsEg7pyXEHqzGQsg7oYVL7+bZFAlthqmKabTk=
Subject key identifier: 73:8E:F6:A4:E8:D1:6E:6D:AC:26:AD:B7:3E:54:ED:A8:0B:FD:21:23
Authority key identifier: 3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
Certificate issuer: /CN=3f46c351ee89c9f5558167530704885b8be46eaa
Certificate serial: 0196C2DDF2EAD443DC4F4E371D475AB49830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
Manifest number: 1537
Signing time: Mon 12 May 2025 05:00:47 +0000
Manifest this update: Mon 12 May 2025 05:00:47 +0000
Manifest next update: Tue 13 May 2025 05:00:47 +0000
Files and hashes: 1: P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl (hash: g7vh+NNeQJyn+8a0mjPiqcdDE6rp6tMQQwMGCK9ARaY=)
2: QxahHBF5SSiTCKjSwe1FlEjpjhQ.roa (hash: d1pnjZFtEihgfo0iFcK4wvbFSZ9uzn9ZUOrv5mZKK8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:f2:ea:d4:43:dc:4f:4e:37:1d:47:5a:b4:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f46c351ee89c9f5558167530704885b8be46eaa
Validity
Not Before: May 12 05:00:47 2025 GMT
Not After : May 13 05:00:47 2025 GMT
Subject: CN=738ef6a4e8d16e6dac26adb73e54eda80bfd2123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:76:e0:96:d2:bf:8e:6a:49:c6:5e:38:29:
03:66:49:a0:85:f3:39:76:17:3a:60:4d:33:f4:08:
f1:26:5f:7a:7e:38:2c:3e:0c:90:5f:d5:61:35:37:
4d:72:65:29:b7:f9:a9:8f:ca:3e:0c:45:34:32:cf:
b2:e1:65:5b:fb:a0:08:23:82:6d:b2:b1:64:a0:cd:
95:0d:ff:76:17:fb:2d:9e:a3:d3:bc:a5:ea:8d:cb:
fc:3d:46:bb:d5:b6:22:52:5a:38:4a:3b:14:b2:22:
4e:20:07:97:f8:b3:4b:69:56:cb:2c:57:a3:45:68:
3e:51:8d:d3:13:fe:d6:a4:36:be:9a:b5:84:b4:12:
d9:c0:8e:b1:e0:ec:4c:cb:a6:6e:34:f6:56:ed:11:
bf:f9:ab:91:cb:2f:3f:23:e8:20:38:6c:46:e4:cb:
32:4e:16:74:39:7b:57:f0:21:84:4d:d3:59:76:54:
a3:d3:21:8c:96:6e:97:08:9f:06:87:df:8d:1b:65:
a6:73:94:0c:73:16:bf:30:a3:89:94:3f:da:6d:db:
04:a3:73:f8:0b:67:e6:74:78:49:d8:68:f5:d7:d5:
d0:e5:7d:b8:ee:0d:a6:38:88:22:8f:5a:5f:7f:73:
ff:f7:0d:d7:91:cc:c0:10:52:1d:7a:f1:22:df:cf:
54:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:F6:A4:E8:D1:6E:6D:AC:26:AD:B7:3E:54:ED:A8:0B:FD:21:23
X509v3 Authority Key Identifier:
keyid:3F:46:C3:51:EE:89:C9:F5:55:81:67:53:07:04:88:5B:8B:E4:6E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0bDUe6JyfVVgWdTBwSIW4vkbqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/fc7aee-233c-4d64-9293-05978a5a1d69/1/P0bDUe6JyfVVgWdTBwSIW4vkbqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:77:aa:2c:7c:25:8c:92:3f:34:b5:29:f1:fe:e8:83:2b:0f:
64:93:dd:1c:d9:5d:7e:55:7c:5a:e0:4a:82:ba:e0:66:03:88:
17:fd:ae:42:e9:85:b3:f7:d4:bb:04:aa:42:01:43:04:32:75:
f6:29:42:ff:43:46:e5:3d:67:c4:37:23:cf:80:df:35:15:39:
14:52:42:2a:a8:e6:35:8b:37:72:70:5d:b0:e4:4d:19:06:75:
53:5d:40:77:db:1c:a1:59:21:bb:02:24:8e:da:bb:4e:b8:70:
d9:6b:5a:3d:7a:b6:5b:5e:6b:02:b9:ff:bf:3d:7a:02:17:07:
75:d7:10:ad:dd:1d:69:4c:68:f3:8a:09:12:a7:66:ef:95:6e:
c4:af:fc:0f:b9:29:ad:bf:15:24:e3:e2:c9:e8:9a:10:29:43:
2b:8c:14:92:6e:4d:73:a0:7f:87:9e:75:73:eb:c1:f8:53:ce:
2a:bd:0d:34:b5:90:39:68:3f:b1:c5:c9:c8:8c:fe:16:b5:b7:
56:8f:94:ca:64:db:2a:27:4a:61:78:1a:f5:50:70:02:b0:50:
b4:c5:c9:5b:21:e4:a6:4b:af:42:5e:86:a7:25:a6:af:97:86:
03:ac:36:01:69:b2:1e:a5:16:0d:a0:02:35:d7:fe:6c:33:3d:
01:ba:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:05:56 2025 by rpki-client