Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: kLzU8YqR28dF5bwKlJNTXB3UV2sxz0O8Ol/Ok+MvDro=
Subject key identifier: 37:FE:E5:54:25:66:3B:60:3F:2F:40:83:99:5F:08:D5:A4:7F:19:AD
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 0196B8FEBD2DA13100BD2C7118C16A410E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0B1D
Signing time: Sat 10 May 2025 07:00:24 +0000
Manifest this update: Sat 10 May 2025 07:00:24 +0000
Manifest next update: Sun 11 May 2025 07:00:24 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: dgvvPMAW4OgqfcTlrNX344TtDiowHCQLupPxO4dcKJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:bd:2d:a1:31:00:bd:2c:71:18:c1:6a:41:0e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: May 10 07:00:24 2025 GMT
Not After : May 11 07:00:24 2025 GMT
Subject: CN=37fee55425663b603f2f4083995f08d5a47f19ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:75:f0:c1:50:dd:c3:4c:0f:c8:63:c6:db:
6b:59:07:01:7c:62:ff:2e:05:b8:59:b9:e2:83:f1:
0e:19:c0:16:62:9a:7b:b5:98:5f:68:ee:af:6c:e4:
ec:cc:bb:ea:6f:58:8f:ce:50:30:d5:86:97:ea:eb:
ea:1f:d8:09:e2:ab:a0:7e:29:5d:b2:2b:82:69:45:
46:42:9b:fd:de:a3:62:39:c4:35:3f:b6:45:6b:d8:
18:c2:e3:48:a1:6e:17:ba:8b:95:38:b0:f3:b2:68:
3b:c2:bd:11:fc:35:5e:e3:b6:5b:98:3e:6e:6d:25:
07:91:8b:ec:54:f9:63:ef:d7:81:c0:f0:59:e5:dd:
39:4d:68:11:36:9a:5f:c1:3d:19:de:f3:19:a8:e2:
fb:d5:23:57:9a:de:ba:61:b5:03:a7:bb:7d:53:dc:
22:ec:3a:44:02:f0:98:3a:5b:5c:be:86:48:71:e6:
c4:b3:00:2d:43:2f:63:e6:11:48:a5:6b:6a:4e:fd:
3d:c2:d9:4e:66:4b:28:95:a5:b0:dc:13:9b:99:47:
b8:95:52:d6:09:fd:a1:bd:62:11:b1:2d:57:00:25:
4a:b2:89:9c:c4:86:1d:ae:dd:22:db:23:75:09:3f:
54:a0:6c:8b:35:58:6f:67:5b:a4:80:7a:ea:3e:eb:
7e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FE:E5:54:25:66:3B:60:3F:2F:40:83:99:5F:08:D5:A4:7F:19:AD
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:9f:49:3c:9b:db:64:1f:1c:f4:42:84:c2:5a:2d:36:15:
ba:88:40:32:e2:a0:13:04:87:9b:8e:2a:17:03:f0:f0:69:f4:
55:cb:ba:75:07:5a:c9:dd:5e:2d:3f:5d:04:2d:90:6b:48:f7:
8e:2c:07:84:f1:b8:db:f7:e2:8d:0d:82:9b:73:b1:1b:23:fc:
43:5e:28:40:99:06:62:ee:37:ea:a5:e5:59:c9:7d:88:96:93:
79:6a:ca:2e:46:65:c0:61:55:3f:15:4f:c7:91:b3:6c:90:db:
e3:a3:35:d6:c9:59:46:2a:85:d8:83:64:a3:6c:61:83:75:d7:
73:a5:2a:b1:0b:87:10:eb:ad:b1:35:93:d3:10:ed:06:b4:1b:
9a:5b:35:4d:ec:16:a8:9c:3e:54:e3:7f:fa:6b:66:0b:a2:02:
9b:95:db:60:52:73:40:1a:db:a1:87:9b:6a:0d:46:90:02:e4:
84:fb:fc:03:7b:aa:91:83:76:eb:0b:25:0b:93:4b:fd:ae:a2:
b3:e2:c2:ec:34:6a:4b:4b:df:01:1d:9b:88:d9:ab:5d:93:68:
e1:17:54:9f:f7:02:ee:a5:dc:c0:07:64:f2:4e:6c:6f:a5:b8:
bf:ed:bd:73:88:46:e9:08:9b:98:1e:e8:e6:8e:af:b3:11:45:
7a:d6:5a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:06:06 2025 by rpki-client