Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
File: PxP6dbPOiUzEZAQaipX4WffBxNI.mft (raw, json)
Hash identifier: sp5o91m5qp9zgyTrFk9yQVUW7vGPWeneUoFp8dUxeRE=
Subject key identifier: 02:A6:77:84:99:75:81:21:8E:A0:9D:06:C2:49:46:2B:7E:A7:3C:60
Authority key identifier: 3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
Certificate issuer: /CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Certificate serial: 0196C9F22B14863059C6A773B1808E8D61A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
Manifest number: BF
Signing time: Tue 13 May 2025 14:00:13 +0000
Manifest this update: Tue 13 May 2025 14:00:13 +0000
Manifest next update: Wed 14 May 2025 14:00:13 +0000
Files and hashes: 1: PxP6dbPOiUzEZAQaipX4WffBxNI.crl (hash: 0aabKzznVmMV4xnsNMOv0rCdWXxI5lWagwF7CGBbyM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:f2:2b:14:86:30:59:c6:a7:73:b1:80:8e:8d:61:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f13fa75b3ce894cc464041a8a95f859f7c1c4d2
Validity
Not Before: May 13 14:00:13 2025 GMT
Not After : May 14 14:00:13 2025 GMT
Subject: CN=02a67784997581218ea09d06c249462b7ea73c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:68:a6:56:fb:ca:8d:f9:16:6f:41:56:ae:52:
29:74:42:13:4e:26:26:a7:ed:bb:9c:53:0b:15:6f:
29:e3:a1:6f:c0:cb:f1:c5:a7:91:7e:c2:77:46:40:
aa:5e:fd:f1:ef:5c:0c:b0:74:14:c9:c5:2f:58:4c:
3c:d7:35:72:92:34:91:df:e5:7a:10:4c:f7:cb:92:
dd:17:68:16:b0:22:1c:44:c2:79:c3:0c:15:4d:4b:
a8:93:15:60:44:0f:5d:2e:73:07:5b:84:bf:80:4e:
cc:2c:55:3d:8d:51:95:bb:b7:48:1c:e4:f5:cc:eb:
f3:da:0e:e0:5c:30:8e:47:99:21:3e:2a:31:ae:d7:
9b:43:24:86:5f:23:fd:98:59:67:96:51:30:4f:3a:
a3:8c:5c:55:33:7e:e3:9f:2c:f1:43:79:0d:76:54:
01:c4:39:82:ff:67:6b:47:a2:43:47:41:e5:b5:82:
7e:90:75:a5:81:a4:13:b4:52:08:7c:30:ea:2a:85:
83:97:3b:39:66:13:6c:8c:4a:cc:18:37:30:95:bb:
3e:e2:e2:69:47:44:44:9c:0a:34:91:45:54:85:7c:
1e:6e:3a:48:8c:65:e1:05:a8:9c:ac:d7:3e:00:e7:
5f:3f:39:00:cc:8b:63:c6:0f:2e:58:57:41:3b:fa:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A6:77:84:99:75:81:21:8E:A0:9D:06:C2:49:46:2B:7E:A7:3C:60
X509v3 Authority Key Identifier:
keyid:3F:13:FA:75:B3:CE:89:4C:C4:64:04:1A:8A:95:F8:59:F7:C1:C4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxP6dbPOiUzEZAQaipX4WffBxNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/82c263-4791-4223-8970-4ae7ad6ea285/1/PxP6dbPOiUzEZAQaipX4WffBxNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8a:a5:30:d9:f5:48:62:29:e6:ef:91:8f:39:a2:09:af:63:
20:e3:90:9b:51:c8:b0:7d:cd:d9:99:dd:60:a1:c1:78:86:33:
f7:4d:46:0d:93:db:08:02:50:ff:dc:d4:44:c9:3f:80:7c:3c:
80:5e:5f:05:ed:f8:3c:e4:56:94:3f:51:ce:0a:3a:42:5f:29:
f9:ce:3e:1d:cf:2c:23:7f:2b:73:a4:80:70:05:41:a8:50:b7:
b0:3a:ef:80:b5:e5:07:07:f7:ec:d6:0b:07:c0:70:82:37:95:
38:43:34:a2:07:51:73:0f:37:ea:71:af:42:69:fe:c8:57:d4:
99:04:49:31:46:b6:88:a4:e3:46:00:1f:ba:b0:d9:14:9f:32:
73:39:c6:31:26:f9:a7:0b:b1:00:a2:2d:21:bc:77:0b:01:e6:
05:07:ab:d4:fb:40:a1:e2:35:0c:5b:93:09:a8:de:03:f9:2a:
ee:60:7c:6a:ab:a3:3e:9f:bf:4e:e5:70:3d:dd:a2:6a:58:04:
9e:47:23:62:8c:d8:39:eb:e5:ba:e7:01:17:35:1d:18:b2:fc:
a0:51:71:aa:8b:ab:e6:d4:0d:ce:3b:e9:69:9c:fd:83:a2:ad:
dd:aa:1b:a8:17:6d:a5:7d:f1:2c:a7:4c:41:86:76:e5:78:a5:
f9:75:a6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:05:54 2025 by rpki-client