Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
File: p_555OY70WvEI3WStoTQBDPL0PY.mft (raw, json)
Hash identifier: 1Fcr9hmhF0lOAbAQ3dSDH6zkDbGtEWPjmvNsLv5i99I=
Subject key identifier: 6D:36:8B:24:BA:3C:93:25:70:C2:65:5B:F0:BD:DB:D4:5B:1F:E5:42
Authority key identifier: A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
Certificate issuer: /CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Certificate serial: 0196A61CE1D9358B819996FF1DC91CE4DD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
Manifest number: 066A
Signing time: Tue 06 May 2025 15:00:32 +0000
Manifest this update: Tue 06 May 2025 15:00:32 +0000
Manifest next update: Wed 07 May 2025 15:00:32 +0000
Files and hashes: 1: p_555OY70WvEI3WStoTQBDPL0PY.crl (hash: fnwDhJjo3SGb7f6Idx766oOTpAvKN+cP30Has8WR+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:1c:e1:d9:35:8b:81:99:96:ff:1d:c9:1c:e4:dd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fe79e4e63bd16bc4237592b684d00433cbd0f6
Validity
Not Before: May 6 15:00:32 2025 GMT
Not After : May 7 15:00:32 2025 GMT
Subject: CN=6d368b24ba3c932570c2655bf0bddbd45b1fe542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:b2:d2:23:cd:bf:4a:c6:f6:e4:54:58:d1:
29:0b:04:b7:4e:8a:a1:10:5f:18:60:e4:0d:64:68:
0a:94:e3:56:42:d4:25:f5:37:2a:ee:7b:e0:04:8e:
27:3e:f4:84:93:8d:6a:8c:b3:46:17:29:b1:b8:20:
7d:cd:16:c0:e3:36:75:09:91:96:ec:39:67:a1:b8:
6c:03:2d:14:7a:cd:79:60:fa:5e:3c:fa:3e:7e:be:
47:01:c6:46:02:e1:29:c8:cc:fa:40:70:a1:70:47:
82:b1:13:ad:a1:42:a3:ab:ad:08:2e:36:28:c1:0a:
24:1c:d6:1e:33:83:c9:23:55:19:49:56:37:0d:7a:
fe:72:ec:4b:10:0a:86:60:0c:c5:36:e9:09:e6:e2:
de:9b:26:e9:a0:2c:23:85:01:b6:a5:0d:a7:7c:c4:
ad:28:e4:26:35:10:0a:05:df:3f:32:2b:f7:ee:aa:
99:d7:e9:69:58:95:1f:09:ac:6b:6b:fa:a9:c7:84:
11:ff:28:07:29:72:d2:44:0b:c4:e3:02:61:f7:f7:
90:6c:41:33:f0:b0:5c:cb:31:a4:fe:c1:7e:db:7b:
55:d8:9c:66:f5:b0:f2:ef:b7:99:68:63:a0:5a:0d:
0f:b4:a8:87:de:e6:5d:d9:26:02:e9:f2:32:f6:e8:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:8B:24:BA:3C:93:25:70:C2:65:5B:F0:BD:DB:D4:5B:1F:E5:42
X509v3 Authority Key Identifier:
keyid:A7:FE:79:E4:E6:3B:D1:6B:C4:23:75:92:B6:84:D0:04:33:CB:D0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_555OY70WvEI3WStoTQBDPL0PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/14b5c1-a333-449b-b280-251a7b13c118/1/p_555OY70WvEI3WStoTQBDPL0PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:99:53:26:9a:3f:72:fe:8d:61:e1:f0:aa:1d:a2:58:09:
9b:6b:03:57:b6:2e:81:83:a2:7f:c0:f9:96:7b:3f:de:1b:b0:
10:6c:6b:6b:b9:5e:c8:b9:6e:28:ac:78:48:ed:12:d7:f4:b2:
da:16:6a:d5:ee:8a:11:7e:34:b4:d4:cf:8a:e0:db:4c:d4:d9:
8d:b7:5e:68:fe:d9:86:ee:ac:42:d5:b8:e7:a3:0a:ab:af:d0:
1b:59:fb:7f:8e:62:36:62:48:00:63:af:f1:6d:69:0b:6a:4a:
5b:a2:d7:dd:82:33:fa:1c:f9:5d:1f:2a:31:54:56:68:fd:15:
b3:f8:d0:1f:fd:57:9d:91:43:21:bb:70:c5:7b:a0:ff:47:9f:
4b:1c:4d:10:8a:45:c0:26:6c:8b:10:34:e2:e6:11:44:c9:89:
33:23:66:b2:db:f9:2d:aa:ed:b5:17:ef:9c:c3:81:4f:d4:a0:
32:58:d5:29:f5:7e:85:db:ca:88:54:ab:77:81:73:91:ae:9a:
e4:97:80:9d:01:2b:97:9c:50:53:71:da:a0:66:a9:6c:b2:96:
92:33:49:84:ad:b8:ad:6d:c0:25:5f:10:34:19:da:f7:da:40:
a8:62:89:f2:f6:07:39:09:99:da:0f:10:a3:dd:f2:9f:ef:6e:
dc:80:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:24:14 2025 by rpki-client