Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File: P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier: vPRx6O0nlzpVS5Fv/8AD7gs6o9psmPfV1QijrYyfDBI=
Subject key identifier: 4D:B5:D3:2F:BF:4D:E5:8E:74:B5:1B:57:F2:74:42:97:C3:34:85:75
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer: /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial: 0196ABE846FF76907A74089B41F6BF02EC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number: 0573
Signing time: Wed 07 May 2025 18:00:48 +0000
Manifest this update: Wed 07 May 2025 18:00:48 +0000
Manifest next update: Thu 08 May 2025 18:00:48 +0000
Files and hashes: 1: HjgAjQeDaXZKdKIg65rJrSZ01bk.roa (hash: SKWIIQpiA+MIRyPfkYnv+UHlvY+ONfNHoHSQy81/bbk=)
2: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: 0qVEW6BEQy6OkO9rhP4VSybMfga8w/DVXAC6vSIEQq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 18:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ab:e8:46:ff:76:90:7a:74:08:9b:41:f6:bf:02:ec:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
Validity
Not Before: May 7 18:00:48 2025 GMT
Not After : May 8 18:00:48 2025 GMT
Subject: CN=4db5d32fbf4de58e74b51b57f2744297c3348575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:80:c7:f2:d8:62:e2:36:1f:8b:74:07:ba:
e3:13:68:1f:4c:bf:8d:cd:19:3f:e8:0b:93:c2:0a:
7a:d8:37:68:17:8f:d5:87:07:5f:21:a6:08:d6:19:
96:8f:44:c7:e1:99:97:27:57:f0:ce:b7:b1:2c:10:
0d:8d:fd:92:66:7e:3d:21:c0:88:b5:f2:79:24:72:
da:31:7a:4b:4b:2a:40:01:e6:e5:59:6b:22:c4:78:
37:83:a6:6a:91:16:91:8d:7b:fe:f5:4c:b9:90:2a:
b0:15:5f:19:1d:dd:25:70:18:14:30:13:f2:8a:51:
e0:95:27:12:c2:8f:c5:bc:b6:c5:f5:ed:79:17:84:
25:83:5e:5c:a7:a4:08:e7:9b:c2:d7:10:ef:01:70:
28:13:5c:de:a7:3c:e3:5a:f6:94:35:d9:b0:f9:e7:
92:af:25:80:f5:2b:69:d8:d8:ad:97:3e:c0:36:b9:
ed:84:49:0b:cf:ad:e7:2b:44:15:f8:5f:e2:78:8d:
6b:fa:e9:25:21:c6:a3:fd:9a:ef:2f:e9:f5:d4:c6:
0b:be:4b:31:54:ee:04:7d:d1:b0:1c:b1:e1:c2:7a:
55:7e:6f:21:d6:80:ac:b9:ed:7a:6f:e3:ee:9f:3a:
b7:b2:6e:71:90:24:7d:7f:e2:79:be:c5:9d:de:2f:
26:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B5:D3:2F:BF:4D:E5:8E:74:B5:1B:57:F2:74:42:97:C3:34:85:75
X509v3 Authority Key Identifier:
keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d3:1c:84:5e:ad:58:de:c9:0e:00:e0:7e:b2:59:e4:c8:6e:
9e:08:11:ae:59:e9:d5:d9:c4:21:ab:b8:ec:42:8e:0e:ec:4b:
d0:59:50:80:92:00:b8:21:0c:35:fa:c7:3a:62:7d:d1:f5:ec:
49:57:51:3d:a0:4a:bd:06:32:88:c4:1e:70:4a:ae:40:26:20:
b6:f2:ce:66:4b:b6:9a:83:99:35:bb:88:6e:a2:09:45:5d:05:
13:88:f9:c7:51:15:36:f0:7d:c5:54:c1:f5:90:1c:e3:b5:b4:
dc:24:97:cb:7e:79:ec:53:3e:67:8f:0b:3b:30:f9:63:e4:60:
91:73:71:a0:01:5c:d6:71:85:2c:50:3e:1c:1a:03:36:0f:08:
3f:0b:8d:32:47:91:5d:9c:54:35:8c:90:d9:04:4b:90:71:cf:
a3:dd:d1:06:b7:68:ff:de:de:fb:4e:b9:69:3e:5f:8f:e2:39:
92:da:40:7a:25:1e:f5:53:e0:e3:08:ed:e8:ce:c6:00:06:00:
1b:e8:d0:26:1a:bd:20:92:7a:52:86:2a:13:f4:62:da:b5:7a:
36:e4:af:bd:de:06:ac:6b:c6:ab:51:59:17:2a:66:01:fe:16:
51:de:b5:23:5b:c2:57:11:5a:9e:46:55:49:41:7b:fd:70:b8:
1b:6d:55:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 02:12:42 2025 by rpki-client