Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
File: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft (raw, json)
Hash identifier: RGzUg72E8swoI6gJmlQrCa4UR5nM7Bl32eKi/scmkyw=
Subject key identifier: 05:63:6B:25:39:CF:95:18:62:07:FC:00:0F:39:ED:27:E0:32:E8:DE
Authority key identifier: 3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
Certificate issuer: /CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Certificate serial: 0196C1CB032770DE0F26881CE133EA5F391C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 00:00:29 +0000
Manifest this update: Mon 12 May 2025 00:00:29 +0000
Manifest next update: Tue 13 May 2025 00:00:29 +0000
Files and hashes: 1: P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl (hash: YBFeP+9nFiS7wP4MG1i7vuHxXLLR7z1v8Ji0YVigGgU=)
2: T32ivR4pPT16GdJvEk3qcae9a-0.roa (hash: Ar4IuLNK/JbYrWnO/0jZmTGQAGYJO2SXqHxbBEnLR+A=)
3: uXJUN0yqzJ3TaQzP9cjAtVVx7hs.roa (hash: suoYCzad2UWOr/Nnpp8SMjjTemdQYZDDmDi97rBzGqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:03:27:70:de:0f:26:88:1c:e1:33:ea:5f:39:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f947c4fd2396d9edb8bc454405e57558d8b9502
Validity
Not Before: May 12 00:00:29 2025 GMT
Not After : May 13 00:00:29 2025 GMT
Subject: CN=05636b2539cf95186207fc000f39ed27e032e8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ef:7b:fd:ba:52:a1:db:96:af:d3:eb:2b:5a:
80:cc:c0:3d:b5:3c:ef:60:20:23:87:6b:38:cc:fc:
78:13:26:8e:2d:c0:08:09:30:0a:a8:e6:b4:07:d7:
31:cf:3a:71:25:4f:2b:d1:4e:8e:15:6b:b8:a9:d3:
5a:4e:e8:87:28:51:f2:35:fb:d1:6d:3e:f0:fe:62:
d1:43:23:32:c9:d0:ef:e1:96:4e:7a:86:00:17:04:
41:10:5e:80:8e:80:f1:ac:0f:34:ab:29:a6:5a:09:
74:2b:be:f6:0f:2d:90:b0:79:bd:eb:2a:3d:b7:36:
4d:aa:10:4f:a6:58:3a:11:f6:21:f4:e7:8f:43:a1:
27:2b:53:44:d2:fe:8b:94:a3:24:45:a4:a1:06:f3:
57:56:46:f3:cf:cf:f9:37:e8:fd:86:f7:86:07:33:
41:f6:6c:54:04:62:96:6f:5a:5c:81:7d:c2:25:3b:
d2:77:c4:fd:3f:2f:60:3e:5b:9f:a7:96:ea:d8:56:
32:61:13:e2:b9:23:f0:99:42:11:16:cf:e3:cc:a7:
da:de:8b:f4:74:60:0b:78:73:af:d6:54:27:e0:75:
18:80:b7:33:c1:1f:46:45:61:d4:11:bf:0e:f5:00:
e3:95:77:c1:5f:75:3d:07:41:d6:af:70:ff:01:50:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:63:6B:25:39:CF:95:18:62:07:FC:00:0F:39:ED:27:E0:32:E8:DE
X509v3 Authority Key Identifier:
keyid:3F:94:7C:4F:D2:39:6D:9E:DB:8B:C4:54:40:5E:57:55:8D:8B:95:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d9b450-729d-48de-ab8f-cec40e425264/1/P5R8T9I5bZ7bi8RUQF5XVY2LlQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bf:44:d7:e6:b6:f5:08:ce:f0:bc:b4:3e:ae:53:6b:50:a4:
72:f6:ef:f6:77:0c:d9:58:f5:ac:9a:18:0e:31:f6:ae:69:31:
ec:50:d8:30:3c:9e:ba:df:b2:4d:70:c6:cf:61:43:1e:9a:7f:
ce:0e:cd:89:d7:80:1b:40:73:ef:12:a5:d5:79:16:8e:40:e1:
e4:b8:d9:34:4d:e0:f1:d1:bb:37:19:d1:cf:a5:3d:53:d7:26:
cc:f1:29:af:1a:34:36:7e:87:d1:b4:02:30:df:ce:31:44:83:
8f:4a:34:a1:dd:25:bd:e7:c2:4c:cc:d4:52:4a:ca:84:57:29:
69:0b:83:73:8e:20:3a:8e:54:1d:5a:4b:04:64:28:21:91:03:
30:8c:41:3d:22:c4:e4:bb:7c:ab:f9:0c:e5:7e:bf:18:3f:08:
a6:11:2f:ef:9b:ec:f5:d6:0c:4d:ad:a4:c1:b7:67:f8:43:8c:
28:c6:9c:ca:63:df:73:75:37:20:32:5a:a3:a6:d7:0f:b6:3a:
fc:c0:e4:10:d0:bf:da:59:b3:7b:44:4c:d4:38:3e:92:20:ff:
f1:c3:d8:1d:d6:a7:b0:bb:2a:0d:40:2a:32:6a:41:dc:5b:f9:
12:ec:a1:08:a0:61:39:57:af:fe:0b:fa:f4:be:d9:82:f2:3b:
82:02:32:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:54:53 2025 by rpki-client