Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File: P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier: LUBfOanTYQbycXRHx+gsYEfKaSiHWmJ8pO9R1lvGhUU=
Subject key identifier: FB:E0:11:2E:A2:47:06:4B:6B:FF:C8:A9:45:A5:7E:3D:69:D9:71:87
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer: /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial: 0196BD12A7CDD5D82EDB1BEBF45F9C19ABCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 02:00:38 +0000
Manifest this update: Sun 11 May 2025 02:00:38 +0000
Manifest next update: Mon 12 May 2025 02:00:38 +0000
Files and hashes: 1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: GLLRZ+5XgCyuzfe95kpq9VM3S/0BkR0Zofr3s3y99Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:12:a7:cd:d5:d8:2e:db:1b:eb:f4:5f:9c:19:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Validity
Not Before: May 11 02:00:38 2025 GMT
Not After : May 12 02:00:38 2025 GMT
Subject: CN=fbe0112ea247064b6bffc8a945a57e3d69d97187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:ea:23:0a:b0:5b:1a:3c:ce:96:40:bd:68:
a4:42:69:25:6f:c9:ab:da:aa:b2:61:f8:77:ac:ee:
6f:67:5c:2b:c8:e6:22:44:14:33:b4:ce:22:82:b7:
5c:64:28:4e:6f:19:4d:65:45:4a:23:f7:6d:de:a9:
58:66:b3:b7:42:c9:d5:18:43:02:56:39:f7:75:2f:
12:d4:63:b0:6e:59:fe:09:18:20:f4:f7:4a:d1:67:
fc:d8:3c:f0:45:a1:45:90:11:b9:47:54:f6:b6:51:
54:11:1e:b1:99:3f:90:be:6c:72:ad:3e:e9:3b:32:
30:c9:fd:32:47:05:99:e4:34:58:f8:a8:c4:1e:45:
bb:d5:15:d4:ce:60:cc:51:04:ba:da:0e:64:b6:d8:
27:9a:44:12:b1:af:2a:37:79:d5:1c:b1:f2:b4:41:
f5:45:62:c3:64:94:15:04:05:f1:de:93:3b:c4:66:
69:6b:07:23:49:0d:e0:c6:bf:d5:31:04:9d:ae:7c:
11:25:c7:3e:fb:ff:cf:3b:7d:6b:b6:0c:f7:69:1d:
d9:31:c0:bc:60:d6:c8:82:33:be:13:6b:ca:b9:3b:
b9:6e:be:30:1c:fb:ec:8d:44:39:b2:f5:00:8f:90:
bf:c9:d5:56:b5:3d:a8:8b:d7:74:ad:93:3a:3f:a7:
e2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E0:11:2E:A2:47:06:4B:6B:FF:C8:A9:45:A5:7E:3D:69:D9:71:87
X509v3 Authority Key Identifier:
keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c5:2c:46:cd:47:05:d1:78:02:9b:10:4b:1e:53:5d:2c:53:
c3:f4:62:ea:5b:c9:5f:fa:6f:46:84:1b:e1:33:6c:85:45:9b:
b5:71:9c:33:e9:fb:10:f9:c9:c3:1d:d8:87:c0:eb:ce:56:b7:
16:70:08:50:17:e8:36:9e:8d:fd:7a:92:b8:b1:78:7e:9d:8e:
7b:aa:f8:48:1b:9c:74:ee:bb:7d:03:df:58:85:fa:9f:e2:20:
36:75:c0:7d:cb:f8:42:8c:d3:c4:65:1a:e9:c2:96:ae:19:aa:
64:95:65:06:48:72:08:f9:90:7a:3a:ea:4f:6a:71:8c:98:31:
a9:54:08:5c:56:fe:80:39:6f:9a:12:15:14:ce:ff:18:7c:35:
b5:52:f9:9f:fe:ba:58:a4:92:bd:a5:28:da:a8:88:c2:2f:b2:
f0:d9:d9:8f:4d:23:c0:d1:34:3c:17:43:81:7c:20:9a:67:99:
ad:0e:c7:02:44:2e:5a:59:8b:66:84:ff:1a:90:fa:40:dd:0c:
c1:0e:71:8b:24:32:75:6a:ff:95:be:34:50:1e:e2:f7:80:a3:
f8:cf:96:68:e9:e7:43:f6:6a:72:95:7f:18:ed:19:6b:a4:c5:
da:07:ff:4f:a3:a4:5d:0c:fc:3b:75:c9:6c:dc:c2:00:c8:4a:
75:64:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:35:37 2025 by rpki-client