Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: BsII3fBtsqqqprLEunAF6B98Fc5a8T5aQ2xSHZtWAtQ=
Subject key identifier: 33:2C:1F:A4:71:33:A7:5A:37:85:0E:C3:75:BF:B7:D6:FA:81:BD:47
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 0196A3C0E0624D488F1236EA110090EF4910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0912
Signing time: Tue 06 May 2025 04:00:48 +0000
Manifest this update: Tue 06 May 2025 04:00:48 +0000
Manifest next update: Wed 07 May 2025 04:00:48 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: VhUEpTuS2F6GbQMqPXiFrfqgECOiRRdQEtLOKK04FmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c0:e0:62:4d:48:8f:12:36:ea:11:00:90:ef:49:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: May 6 04:00:48 2025 GMT
Not After : May 7 04:00:48 2025 GMT
Subject: CN=332c1fa47133a75a37850ec375bfb7d6fa81bd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:31:65:8e:21:60:63:8b:5c:f1:c4:b5:f8:
bf:a0:a4:84:31:ca:1d:4f:3d:23:0a:52:c6:87:35:
6b:52:9a:e4:50:a1:8c:b8:76:b7:2e:55:bb:c3:28:
06:6e:b4:09:21:92:62:cf:a1:be:48:65:f8:47:e4:
d3:2e:86:0c:9b:03:ba:3b:d8:7e:01:0a:e0:32:21:
cf:fc:cf:fa:70:dd:fb:01:3f:23:11:c0:b0:a0:82:
8d:fa:78:56:e7:5b:b6:0d:ef:ab:55:66:2c:47:8c:
08:96:5d:bb:8f:9f:58:22:5e:dd:60:b4:b9:e8:9d:
6d:1d:a8:f8:6e:df:c0:56:db:50:b0:46:e5:56:e3:
97:13:82:08:f3:33:47:4f:55:5a:a8:d5:3f:c5:d1:
86:ee:21:e3:3b:85:53:9c:9c:01:84:8d:66:5f:79:
1f:7c:da:6e:cf:4f:0e:6f:8b:25:d6:ae:69:aa:3f:
cb:17:b4:3e:3d:93:67:7e:75:be:42:8c:27:f5:e8:
ef:b1:45:ae:b6:b5:54:c4:1d:dc:07:f6:03:65:65:
f6:bf:cd:44:d5:56:cc:6f:b6:4e:55:42:79:3f:9e:
72:b2:28:f8:50:ea:3f:e2:b8:d4:cb:5d:00:3e:0b:
fb:d7:a0:fc:4e:4a:e8:6d:fd:df:cd:cc:e8:e5:02:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2C:1F:A4:71:33:A7:5A:37:85:0E:C3:75:BF:B7:D6:FA:81:BD:47
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:1e:3d:be:c8:b1:d3:b6:98:87:ab:66:5b:15:da:3c:37:72:
d5:07:5c:b6:00:1b:21:60:ba:f1:ab:9f:78:2a:39:58:78:4c:
52:fb:ed:6b:3f:87:18:26:df:3d:df:6c:12:7c:0c:65:49:b3:
ff:75:1f:b1:68:ea:42:a8:9c:4c:72:c9:ad:2b:c3:72:f1:da:
c6:2a:8f:39:64:33:19:d5:e0:dd:1c:6f:ed:65:47:81:03:2a:
61:5f:9b:a3:ab:39:eb:0e:05:81:7a:dc:9b:f9:c7:93:09:78:
44:9d:49:3b:0c:1f:07:a0:51:bf:af:0c:39:fc:a1:cd:83:89:
4e:d8:e7:b4:cb:38:c5:66:7e:b4:7c:d9:35:ff:cc:cc:21:3f:
cd:dd:9d:13:cc:af:93:16:5e:f7:39:fa:d0:84:cf:11:68:76:
c6:29:78:7b:7b:43:a8:8b:41:d1:32:e0:2b:23:5a:15:0a:c8:
12:ed:f7:b4:64:fa:25:cb:07:58:25:d5:0d:63:c4:9b:18:13:
96:62:26:7f:51:24:8b:6c:53:82:7a:bc:21:cd:58:07:55:2f:
d2:a1:b0:64:70:6d:fa:2a:a5:1d:5a:17:32:71:df:49:e8:ce:
19:c7:bf:a2:d6:14:3d:f3:4a:9d:2c:3a:e0:c7:26:58:33:a4:
3c:50:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:25:19 2025 by rpki-client