Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
File: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft (raw, json)
Hash identifier: Zu+wSW9+zxMs2DHjYAcEcRSTcpX8yvM3ce0c4Uc75Ik=
Subject key identifier: AB:46:53:FA:16:1B:58:4D:F1:E2:81:FD:E6:8F:6C:62:D4:39:A7:93
Authority key identifier: 3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
Certificate issuer: /CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Certificate serial: 0196CC4EF638B2EA2C395B71C7E9173A5E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
Manifest number: 0F72
Signing time: Wed 14 May 2025 01:00:48 +0000
Manifest this update: Wed 14 May 2025 01:00:48 +0000
Manifest next update: Thu 15 May 2025 01:00:48 +0000
Files and hashes: 1: LsnRSFX0fJ6jFaMFhsNOF1N3rXk.roa (hash: dex17lVhtaQHFqLExDWweZahtCv1yqvsMMQYp4bDPYo=)
2: P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl (hash: cZJ/ah+LEOWr5rAtnKKBP3r3duu4YHldOsxNjfTkadM=)
3: ZCv1BvgxYc7es0hHXD_Z0b-Ht0s.roa (hash: M90TxVMUtw28EWlnD72m1jWls/YScUzAXqX8GMvniY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:4e:f6:38:b2:ea:2c:39:5b:71:c7:e9:17:3a:5e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96703f30e2099a3d9006bfa84e5c6c486a8d2e
Validity
Not Before: May 14 01:00:48 2025 GMT
Not After : May 15 01:00:48 2025 GMT
Subject: CN=ab4653fa161b584df1e281fde68f6c62d439a793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8f:f0:a9:4f:5c:3e:c3:c7:13:0e:5d:dd:96:
c6:ab:57:4e:85:20:8b:ec:0f:df:da:7b:ce:7e:d6:
1c:84:2a:93:72:46:4e:92:b0:da:4a:23:cb:e6:7e:
26:4c:b7:df:1d:0f:6b:59:50:4a:2d:ff:a3:c1:78:
79:9e:da:f9:1f:cb:ae:1d:7d:79:09:20:0f:fb:65:
63:69:8d:2b:3b:f4:8f:a8:03:5d:26:c9:a8:55:69:
1d:35:8e:7b:a3:f2:80:18:18:c1:92:59:32:7a:90:
a4:4f:da:59:8a:73:65:b8:db:9e:74:55:42:c0:b5:
ba:a5:fd:45:80:51:6e:18:b0:d7:91:4d:59:51:82:
2f:5c:16:6c:6e:de:bf:ad:e2:e5:3a:24:23:42:5f:
70:63:76:c8:70:60:e4:7b:a2:e4:04:3e:35:86:32:
2c:75:62:b8:5f:b1:73:7e:10:a2:67:f6:00:fe:de:
97:84:97:9b:fe:52:1a:48:f5:95:fa:03:d9:11:65:
c6:83:6e:58:6d:46:0b:94:53:e2:0a:c3:98:0e:05:
ff:80:35:69:7b:dd:59:e1:d0:57:0c:76:55:5a:18:
a4:2c:c8:b3:d1:39:11:0b:73:26:b2:4c:ca:b4:a2:
54:74:3d:29:17:d2:9d:b6:8c:db:b0:91:fe:53:c8:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:46:53:FA:16:1B:58:4D:F1:E2:81:FD:E6:8F:6C:62:D4:39:A7:93
X509v3 Authority Key Identifier:
keyid:3F:96:70:3F:30:E2:09:9A:3D:90:06:BF:A8:4E:5C:6C:48:6A:8D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/83647a-44e5-4049-b879-9337f374168e/1/P5ZwPzDiCZo9kAa_qE5cbEhqjS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:68:61:e2:1c:9d:1b:1b:b4:f0:f0:5a:1e:a6:27:fd:11:06:
21:d1:83:34:c3:80:ee:1c:20:58:bf:84:3f:cf:12:2b:bd:9c:
e0:b7:a0:92:01:fe:80:43:09:f9:2d:25:90:fc:cd:99:60:85:
d8:90:cf:37:fc:fd:72:2f:ff:48:ee:46:64:29:f1:59:5f:48:
f9:0f:1a:51:ae:1d:4f:a2:27:7b:43:22:fe:ec:82:4e:73:f4:
89:cc:f2:3a:ca:61:88:54:08:c9:6c:ce:5d:9e:76:c4:4d:fd:
de:ab:62:64:70:27:90:5f:b8:1e:2d:5b:51:18:2d:5e:93:a4:
2c:65:73:ac:f6:08:18:18:03:ea:80:e6:44:41:ca:6d:92:5f:
d2:5e:a5:9f:90:f1:1c:9c:de:ce:e5:7b:1f:b4:7c:ba:ca:72:
a7:33:7f:39:74:77:42:41:d1:8b:93:ad:45:33:6f:12:ab:7a:
9b:5e:ba:f0:e7:91:99:9e:35:cc:a0:25:79:56:a0:38:03:2f:
21:43:3b:fe:ca:a3:db:66:72:ae:99:66:72:fc:72:2e:e4:fa:
8a:80:d6:c7:0a:4b:fc:7e:d1:25:ab:fe:d9:6e:d4:42:b3:8a:
c9:a8:f9:d9:5a:11:a9:4a:08:c7:52:88:f6:d3:81:4c:f6:13:
38:45:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:28:09 2025 by rpki-client