Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json)
Hash identifier: pZM/CEWaiD4ALkoy0zmS5qdZKYJiG+Yqyyn9/laRWT8=
Subject key identifier: 20:65:B0:31:21:34:C2:C7:26:33:14:B8:3C:C1:CE:3D:ED:F6:E1:C9
Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Certificate serial: 0196AA6791FB5F3DA82CA8B1E6BE79C905E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
Manifest number: 3E
Signing time: Wed 07 May 2025 11:00:36 +0000
Manifest this update: Wed 07 May 2025 11:00:36 +0000
Manifest next update: Thu 08 May 2025 11:00:36 +0000
Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 0vmatc+btPfwyni6ZXGMpF7fg6qDPafUXNFTXkoOdSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:91:fb:5f:3d:a8:2c:a8:b1:e6:be:79:c9:05:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9
Validity
Not Before: May 7 11:00:36 2025 GMT
Not After : May 8 11:00:36 2025 GMT
Subject: CN=2065b0312134c2c7263314b83cc1ce3dedf6e1c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:de:f4:ef:ba:19:79:75:c7:7d:17:8e:c3:
b9:7f:e0:cf:8b:28:2b:2c:44:4c:a4:51:c7:50:74:
87:e0:c0:ad:f7:72:74:1a:a3:e9:96:0a:f7:df:71:
e9:7c:16:8c:18:a1:37:fb:51:85:e6:f8:a9:d7:e1:
66:76:66:4e:dc:4f:ed:84:70:b5:dd:25:5c:f2:ef:
43:9f:35:30:93:d9:af:53:33:04:79:c8:6a:82:04:
40:08:da:b4:a5:2e:2e:09:e1:be:4d:01:aa:fe:77:
f9:cb:31:8c:1c:4d:44:54:de:82:b3:2a:f1:3a:44:
07:66:c5:49:9e:4a:dc:7a:7a:3a:8e:df:b0:f2:87:
a3:52:82:1c:c6:fa:e9:f7:88:3e:6d:85:39:ef:98:
5c:ba:0e:49:75:41:e0:fa:77:c3:87:8f:78:dd:0e:
f1:48:8f:16:a1:d9:55:9b:ae:89:c1:04:a5:4e:cf:
ee:68:da:07:b1:08:a1:d2:4e:dc:f8:03:db:48:ea:
65:23:38:cb:23:02:e5:4d:c8:41:5b:eb:1d:8e:67:
10:a2:8b:51:cd:b8:bd:16:c1:82:7d:76:99:30:8d:
7b:82:8f:69:f0:c0:44:2f:d3:91:dd:7b:2f:f0:ef:
02:d6:9b:ac:88:cc:87:ad:e3:ad:96:ad:bf:80:6b:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:65:B0:31:21:34:C2:C7:26:33:14:B8:3C:C1:CE:3D:ED:F6:E1:C9
X509v3 Authority Key Identifier:
keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c9:bf:ec:0f:ca:ff:49:b7:da:10:53:fa:2a:ed:74:e7:8f:
dc:bd:5c:fd:e2:26:7f:19:c5:a1:50:b8:68:9a:9d:4b:89:9d:
56:57:a2:5c:00:23:dd:60:c9:82:dc:c7:e6:77:5b:d8:58:c2:
41:75:3c:a6:a3:80:10:cd:cf:fe:15:cd:29:9b:2f:c3:2b:30:
0f:f0:80:4e:8e:19:17:5b:f9:78:39:10:ca:4b:5f:70:1e:4d:
9a:9b:8e:1d:e0:d1:8e:04:e9:d3:8c:25:52:58:ab:b9:af:2f:
76:4a:56:99:5f:55:fa:b0:c1:35:38:17:f9:35:be:8a:c7:e7:
ab:f5:f8:8a:ad:e3:12:63:7e:c4:0f:51:a5:59:1d:14:12:36:
a3:30:e9:14:17:eb:18:65:8c:dc:d6:f0:8b:ca:5d:ff:0d:44:
38:9d:20:78:6d:83:3e:ca:16:ad:94:3c:5c:9c:35:75:a4:bd:
e5:fb:e5:2c:ae:16:be:68:48:83:62:4d:f6:e7:db:59:fb:01:
66:c2:f8:3f:0f:f1:98:3f:7c:35:d7:ab:ea:31:a1:41:f8:26:
2a:8d:63:c9:55:f8:13:7c:19:94:e3:81:02:26:fc:aa:64:1a:
0b:b2:31:a1:61:c6:40:a9:dc:f3:c1:94:6a:7e:65:4d:5b:43:
e3:80:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 17:38:47 2025 by rpki-client