
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File: P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier: GlAT11kuvEOCAnkrZU2Sa7a3NHtZ9j8ozPpblfnejDs=
Subject key identifier: 98:3F:B2:30:10:22:F0:32:99:FB:3E:0D:EE:53:41:AF:0A:96:54:D4
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer: /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial: 0196C426F864E441670A8A4585C99A69F974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number: 6D
Signing time: Mon 12 May 2025 11:00:10 +0000
Manifest this update: Mon 12 May 2025 11:00:10 +0000
Manifest next update: Tue 13 May 2025 11:00:10 +0000
Files and hashes: 1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: AqC5MG4UZjkxB+IpI/rykxn2ReXLXHmaUuJRQpU7By0=)
2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:26:f8:64:e4:41:67:0a:8a:45:85:c9:9a:69:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Validity
Not Before: May 12 11:00:10 2025 GMT
Not After : May 13 11:00:10 2025 GMT
Subject: CN=983fb2301022f03299fb3e0dee5341af0a9654d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5a:3c:e2:c5:b9:81:2f:5e:bb:65:67:8b:57:
05:04:5f:83:75:c6:85:b2:3d:ed:12:fe:81:9c:55:
2b:02:5d:b5:56:f0:76:17:64:7d:1e:c9:da:e1:fe:
49:0f:64:65:bc:a4:f7:a8:7a:b5:58:2e:26:2e:59:
f3:70:c9:71:45:09:22:75:79:63:b2:d4:00:65:3d:
69:72:ef:55:c6:1c:60:95:68:44:e4:91:bf:15:5e:
fd:fc:66:11:65:5a:1b:65:6d:9b:89:a9:45:49:ba:
fb:43:0e:18:b6:1a:46:62:93:8e:c7:0a:ec:ee:72:
6e:f5:e1:e7:84:73:36:58:be:1d:11:b7:ee:1c:45:
66:0e:03:fc:51:3d:69:11:76:d8:9b:c7:71:30:16:
f9:dd:86:84:0a:3b:32:63:b3:0f:71:c0:be:6a:4c:
1c:f9:5d:7f:38:73:61:e2:fe:90:6f:9c:46:cf:ae:
61:9b:79:59:bd:b4:32:40:83:ab:f9:80:eb:cd:70:
57:93:c3:d3:6f:d2:68:61:4b:ca:4d:a0:45:82:91:
b3:17:5f:9a:21:b9:af:e8:8b:e6:28:b3:79:2a:78:
1f:6a:1b:24:1b:2c:96:6b:3c:0a:cb:ba:28:f9:5c:
ee:57:03:90:87:24:7d:b8:c8:e6:c6:ff:2d:b5:8b:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3F:B2:30:10:22:F0:32:99:FB:3E:0D:EE:53:41:AF:0A:96:54:D4
X509v3 Authority Key Identifier:
keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6b:d5:9a:0a:d7:c4:8e:4c:b0:81:3e:a0:32:94:f8:30:88:
6c:e0:71:2c:dc:36:9a:06:b8:f5:d4:0c:f5:93:f1:3f:f0:3c:
39:71:ea:56:5d:6b:47:9e:9a:07:aa:6d:a7:4c:02:78:9b:d3:
5b:04:ac:55:fa:2a:34:a5:19:bc:b2:9e:18:4c:14:f9:b4:49:
f7:e1:b5:21:eb:f0:de:89:a4:90:0b:44:4b:81:bc:e4:cb:1a:
37:3d:a6:38:63:4d:59:f5:f2:98:f0:37:8d:61:25:40:eb:e7:
f7:47:a4:7d:ef:35:84:7d:5b:45:e8:7f:95:1f:3d:79:e7:4a:
01:a7:8a:77:89:28:41:0f:66:33:b9:9c:af:29:9a:fc:86:7a:
f4:5d:aa:67:14:a0:66:0b:67:8e:dc:f9:d9:f4:9f:0a:b6:d6:
b9:00:6c:92:fe:bb:eb:9d:1b:15:a9:de:a9:f9:ef:ae:dd:9c:
16:56:31:80:32:ca:5f:b3:1b:bb:32:ae:b9:83:fc:82:f6:a4:
f6:53:9e:f5:7d:e5:41:08:9c:e7:d6:ac:44:02:76:f9:d5:0c:
48:5a:b9:0c:77:10:38:62:92:2a:cd:28:cd:46:ff:9c:2b:bb:
ed:7c:27:25:4a:c3:cc:27:8c:e6:cc:65:cc:d4:8b:66:28:d0:
2c:cb:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:28:31 2025 by rpki-client