Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: a1wgj99rvW595K+D8IDBhr3ViP+89W6Ap1fJP6d3qdQ=
Subject key identifier: 42:07:61:1D:5D:D4:E0:1E:87:DB:62:35:36:EB:BE:B6:E0:91:79:6F
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 0196A68AE033CE3434435D6744EF21AB0E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 0119
Signing time: Tue 06 May 2025 17:00:41 +0000
Manifest this update: Tue 06 May 2025 17:00:41 +0000
Manifest next update: Wed 07 May 2025 17:00:41 +0000
Files and hashes: 1: EiOlPx07xu7VkFJ-Fp9Fuqy8TzU.roa (hash: YTkNQ57L/BsF8+52AnZs1f7V2wA4xa87/fYc1vwFoig=)
2: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
3: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: 9ncDBKS6yihrMPMLgh167uSZnzb5NQ9Asww23IihiHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:8a:e0:33:ce:34:34:43:5d:67:44:ef:21:ab:0e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: May 6 17:00:41 2025 GMT
Not After : May 7 17:00:41 2025 GMT
Subject: CN=4207611d5dd4e01e87db623536ebbeb6e091796f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c0:14:bd:b6:bd:3b:93:70:22:b9:20:9d:10:
7f:e4:68:a3:33:55:30:b0:ae:a2:4c:42:9c:39:f7:
eb:e5:bf:f2:1e:c5:bb:36:e8:c5:a7:b4:bd:42:09:
c2:c9:08:48:cd:3c:d2:8a:ee:29:1f:df:6d:94:69:
09:86:63:31:16:69:59:77:fa:8c:bd:37:d2:de:77:
d8:2c:c0:95:e2:fb:51:24:65:be:88:83:e4:a0:dd:
2e:9c:7b:b4:06:80:b7:22:43:9d:e2:c2:e2:6f:92:
b4:05:a2:76:80:d7:ce:7d:47:0c:5f:0e:11:0e:56:
0b:54:7f:5b:e2:50:c9:99:ff:a1:25:12:ad:44:bb:
a5:d8:59:68:df:da:53:ea:3f:53:fc:cb:00:34:f8:
b8:03:3a:1b:b7:62:ca:e7:d3:9e:af:94:c2:16:54:
6d:77:62:7f:57:60:90:2f:5d:75:8d:45:c7:4c:30:
f1:1f:da:45:9b:ad:81:69:a5:f6:e0:87:ec:32:63:
a7:fa:32:ae:9c:db:b4:92:23:34:f0:c2:8b:4f:27:
72:da:80:98:4e:18:7b:54:a8:76:12:f5:3a:df:c2:
0f:fb:b2:5a:af:e1:ba:d6:56:3d:44:8b:92:fa:56:
8d:51:07:4f:64:29:95:da:1a:9d:2e:98:05:b2:77:
d5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:07:61:1D:5D:D4:E0:1E:87:DB:62:35:36:EB:BE:B6:E0:91:79:6F
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:31:ac:94:80:4b:2b:86:6b:85:6f:9c:34:8d:93:8b:3f:62:
a7:80:b2:29:5b:31:c5:c6:85:a0:03:7e:f7:f1:b1:c0:09:d9:
04:5e:d9:f7:4e:09:40:a8:1c:63:b3:66:79:10:05:57:e8:39:
40:3b:44:14:7b:10:9e:1d:8d:2a:1a:79:de:cb:aa:87:73:ac:
46:5f:82:bc:8b:ca:00:7c:39:08:8e:cd:92:6c:93:5b:37:75:
55:55:d7:00:7a:da:7a:c0:eb:24:a2:5c:93:5e:91:80:2f:63:
15:12:97:76:cd:e2:0e:7c:3e:f7:7e:3f:41:17:ed:58:ca:9b:
be:61:a9:2c:64:6f:9a:1d:a3:4f:59:50:4b:54:49:69:aa:73:
c8:c6:98:9c:cf:2f:a5:1c:05:55:31:9c:4a:e4:b0:66:f9:dc:
50:59:b8:85:00:00:90:61:ec:d9:ea:7c:0d:38:db:29:a9:54:
04:cf:51:39:ad:a9:f2:26:fd:68:ed:05:f7:4e:a0:eb:c5:27:
9a:8e:dd:b6:e5:8d:2f:ea:f2:30:a8:79:d5:0e:a8:0c:de:bd:
de:79:64:92:2e:68:16:ce:ab:64:2d:f7:f3:d3:af:e6:94:9e:
5c:be:11:a9:05:6b:6b:66:49:9e:4e:cb:72:cf:9d:df:57:1a:
4b:23:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:33:50 2025 by rpki-client