Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File: P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier: MmB3tu22/RRZ1tAcgQS3qDlmvE0I1hhroTU7PFif0rw=
Subject key identifier: AC:9D:49:92:68:B7:6D:29:95:25:3B:85:41:80:55:92:F7:21:AC:0C
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer: /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial: 0196D407FE6B77D4ED04AA294E74D24A1F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number: 0C20
Signing time: Thu 15 May 2025 13:00:15 +0000
Manifest this update: Thu 15 May 2025 13:00:15 +0000
Manifest next update: Fri 16 May 2025 13:00:15 +0000
Files and hashes: 1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: MHrbcHHBTm7v2EaTwy0Xz+bNRvnIq0Z4XT6JtGvYPBc=)
2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:07:fe:6b:77:d4:ed:04:aa:29:4e:74:d2:4a:1f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
Validity
Not Before: May 15 13:00:15 2025 GMT
Not After : May 16 13:00:15 2025 GMT
Subject: CN=ac9d499268b76d2995253b8541805592f721ac0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:57:20:11:77:57:83:86:93:e8:ce:be:a7:
2e:2c:02:f5:ae:7b:28:53:ab:bb:72:da:07:b9:66:
15:61:5f:a1:42:bf:f2:93:01:44:43:f0:4f:dd:40:
fc:3a:b3:c1:9e:8e:85:ee:ab:21:15:5b:77:6b:4d:
e9:5e:4e:11:59:8c:20:8b:ec:b2:b3:08:53:04:06:
8d:9a:0f:fa:84:0f:28:4a:7d:8f:11:d5:bf:c3:af:
a9:bd:98:60:13:c6:bb:3e:bd:ad:a1:61:37:bf:b3:
da:f4:d0:0b:c0:9b:d6:c3:41:a1:01:2c:13:85:40:
76:8b:f2:54:50:50:f6:2d:3c:0f:17:f7:d9:b7:c5:
6a:75:cd:d8:18:52:18:81:78:2f:99:bb:7d:7f:4c:
72:d5:40:da:1c:9c:a1:ad:5c:18:bf:5d:4c:ea:b8:
d5:e7:71:6e:39:02:59:e4:e6:17:6e:2d:4a:76:9a:
da:f6:ce:bd:3f:86:0e:33:75:96:fc:81:f0:28:fd:
49:bd:c2:1d:55:17:cb:45:1d:ad:5b:45:fb:17:80:
15:5f:74:50:71:c4:63:c8:c8:09:be:fe:b4:cb:70:
48:fe:2a:89:26:ed:48:88:cd:16:f5:1b:ff:b1:75:
eb:3d:dc:d3:97:7d:7d:56:69:5b:62:75:2d:e4:78:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:49:92:68:B7:6D:29:95:25:3B:85:41:80:55:92:F7:21:AC:0C
X509v3 Authority Key Identifier:
keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:21:cb:86:fe:c2:51:0f:22:55:fa:c5:e9:7c:6d:b7:ca:e4:
32:e1:b2:0c:f5:61:be:a9:50:f7:05:bf:42:8a:04:9c:88:97:
f9:91:14:a0:6e:c4:98:73:4b:78:8b:6e:d6:b2:f2:3e:95:c4:
07:87:47:39:f3:cd:b8:f0:f7:a2:01:8c:17:32:94:d0:dc:4f:
6d:87:2e:69:9d:9b:d6:75:57:74:4f:d1:42:b1:c1:89:be:06:
80:c9:47:34:19:9b:76:a5:4d:6f:96:1e:ea:18:17:77:f2:4a:
ff:a3:c6:8a:53:32:0a:77:45:9d:dd:f7:d8:c0:b5:08:18:bc:
d8:80:e8:fd:72:e1:39:b4:77:c4:b3:ea:cb:9e:11:80:ff:27:
a9:ab:6c:f7:58:67:19:8d:15:1f:62:35:47:01:fb:5e:8d:20:
aa:51:31:bb:a0:03:d6:c7:ef:d3:32:62:43:47:29:50:81:57:
16:38:8a:ea:06:14:bf:a6:65:5f:5a:a1:5b:c1:31:c3:1c:48:
6a:94:5a:32:0f:9c:60:b1:fe:69:de:06:a2:9e:48:6b:e1:7c:
d0:b1:ca:2f:56:97:ec:be:6d:b4:4c:bc:16:25:c5:65:a0:1b:
40:b9:73:55:6d:dc:38:81:3b:df:bb:79:03:f3:d5:b5:e1:31:
99:78:d3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:25:53 2025 by rpki-client