Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
File: P-XZqjR4a6oW1Fa9857K-12XMPg.mft (raw, json)
Hash identifier: mjvy+aZFDEC8UoXOQaIrBSTzvyK5h0E2VwNEh2iwf5Y=
Subject key identifier: DD:A0:AD:88:8F:BD:64:86:F2:C2:BE:87:DE:29:11:16:4D:24:D6:2D
Authority key identifier: 3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
Certificate issuer: /CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Certificate serial: 0196C34BA2153A7BBF3A6BEA5E48C3E33D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
Manifest number: 1536
Signing time: Mon 12 May 2025 07:00:35 +0000
Manifest this update: Mon 12 May 2025 07:00:35 +0000
Manifest next update: Tue 13 May 2025 07:00:35 +0000
Files and hashes: 1: I8Hl2QUOJ6pW-HzuzhburaAUCcs.roa (hash: TO7xgPDDMwBnfoyPmeOZq+S6vszklMWr0Jg0Yq+3Oiw=)
2: P-XZqjR4a6oW1Fa9857K-12XMPg.crl (hash: 0o9f3+l+tar4DkYKyyD6DrX200hVYRyEcQYSQy8+Ecc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:a2:15:3a:7b:bf:3a:6b:ea:5e:48:c3:e3:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe5d9aa34786baa16d456bdf39ecafb5d9730f8
Validity
Not Before: May 12 07:00:35 2025 GMT
Not After : May 13 07:00:35 2025 GMT
Subject: CN=dda0ad888fbd6486f2c2be87de2911164d24d62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:b8:c3:96:08:03:f7:3d:5b:c9:99:1b:9c:
bf:06:4e:a2:7f:2c:0d:42:5d:39:75:65:df:65:ed:
03:48:90:3b:74:55:3c:f1:d2:4c:f1:fa:bf:64:e6:
61:a4:2e:79:7e:2f:ea:97:d5:87:b2:cd:20:f7:3b:
94:28:70:2c:4f:bf:98:6b:2b:df:c6:6a:98:97:c3:
c1:e1:5d:7f:e1:26:87:a7:e6:b1:1d:e0:55:11:28:
0b:c6:13:b8:5a:e8:85:3a:04:33:34:3a:f2:9a:92:
01:5b:98:2f:23:9d:61:ad:25:60:31:6b:43:a5:8e:
05:2c:1b:98:85:01:b8:5c:af:4f:92:7a:58:98:40:
41:d7:d9:22:c6:b1:e5:4b:1e:24:b0:ae:f3:7a:fb:
05:2b:f1:d9:13:84:94:6a:a2:46:e2:33:e2:c9:8c:
8c:61:e0:43:b3:6f:85:e6:cb:53:79:ef:17:5c:bf:
ad:36:8d:54:5d:4e:fa:00:8e:1d:49:93:7c:98:74:
c7:2a:56:7a:26:61:88:d0:98:19:c9:c4:bc:a2:72:
30:53:e3:90:eb:00:76:68:fc:a6:2a:02:94:86:b5:
e9:7f:cb:dd:a9:78:1f:f4:9d:75:41:9a:1b:3c:25:
79:0a:78:60:2d:af:19:ff:23:6d:86:ce:60:d2:a4:
af:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:AD:88:8F:BD:64:86:F2:C2:BE:87:DE:29:11:16:4D:24:D6:2D
X509v3 Authority Key Identifier:
keyid:3F:E5:D9:AA:34:78:6B:AA:16:D4:56:BD:F3:9E:CA:FB:5D:97:30:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-XZqjR4a6oW1Fa9857K-12XMPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a2fe68-761d-4e6c-9dcd-594c1acd9daf/1/P-XZqjR4a6oW1Fa9857K-12XMPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:13:dc:11:30:9e:28:11:66:c7:c9:85:ea:2f:5e:d7:3d:aa:
30:3f:59:55:47:b8:48:de:5d:ff:48:07:24:03:3b:df:64:36:
51:cc:4c:87:d8:ba:ba:e5:8d:38:33:fc:a5:54:38:4f:93:49:
36:f1:37:1a:27:ae:63:f4:d5:45:12:d2:98:25:4d:74:2b:22:
33:16:4c:f0:29:fe:70:ab:32:c4:b2:b1:7d:aa:5b:f5:bc:64:
c4:58:48:33:77:fc:3d:16:2c:52:1d:93:9a:a0:c5:56:00:f8:
59:5b:43:cf:6c:1c:03:bd:1b:86:cb:f9:71:9c:0e:0e:33:89:
b5:80:7d:3f:5b:ff:93:72:5d:51:22:37:00:fe:84:66:e0:56:
8f:6b:5f:dc:66:e6:a1:81:32:01:5f:e8:57:60:35:96:28:be:
97:b3:57:a7:a0:05:36:19:c1:f2:4d:12:c1:48:60:0e:23:0d:
32:fd:84:a6:c7:81:87:0d:c5:95:d4:e6:c2:d2:e2:1e:57:55:
2e:9a:42:fe:cd:a5:21:fa:33:fb:ce:f8:8c:d8:d6:02:23:f4:
14:c0:23:b8:68:18:8c:04:39:f7:63:37:ad:ba:7b:af:35:a0:
fa:65:60:2a:e8:f3:69:50:86:47:a5:e9:37:2e:e2:c6:0d:de:
99:f2:0b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:11:16 2025 by rpki-client