Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: gzA38ofdEX0r1U/n1RGjHbxtYYgXVDQ4s/03XRyPg0A=
Subject key identifier: 7D:22:44:11:AE:F2:AC:0E:02:71:8A:7E:C6:E1:19:D9:2A:26:80:1B
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 0197B9D8E93C022F8374400007CE71FFCC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 09A2
Signing time: Sun 29 Jun 2025 04:01:29 +0000
Manifest this update: Sun 29 Jun 2025 04:01:29 +0000
Manifest next update: Mon 30 Jun 2025 04:01:29 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: ZUolGozzt9Wet4S5Zgi5oF/VcOV3IYP70n0bOVBjnB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:e9:3c:02:2f:83:74:40:00:07:ce:71:ff:cc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Jun 29 04:01:29 2025 GMT
Not After : Jun 30 04:01:29 2025 GMT
Subject: CN=7d224411aef2ac0e02718a7ec6e119d92a26801b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:b6:d1:fd:16:fd:97:3a:0e:ee:25:e1:93:
03:46:ca:92:01:12:a9:81:e5:2e:46:0f:cc:45:9b:
58:75:4f:8f:e1:38:5f:a3:d0:31:46:4e:e5:a0:42:
cb:9e:3e:06:e2:97:cc:5b:cd:19:73:f5:e9:02:e0:
56:d8:bd:41:8b:1c:ff:b2:c1:b0:86:a2:e8:8c:31:
f2:49:de:5e:0f:3b:ad:74:2b:0d:4f:fd:d3:53:11:
98:a5:1e:af:90:57:0c:82:20:70:42:c8:80:c9:4a:
12:1d:fa:f3:90:e7:1b:37:fd:9e:4e:44:2b:d2:a2:
2b:9a:11:1f:c1:10:ff:be:83:e4:83:34:f5:6d:a0:
32:38:0a:21:1b:3c:f7:95:77:0a:46:57:3e:08:77:
75:15:2e:0f:c7:a7:74:71:59:f2:4d:b5:4d:bc:7c:
10:3f:79:12:77:1d:b1:e2:2e:eb:d5:98:0f:78:fb:
20:8d:a6:1c:25:e8:bf:7f:ee:5e:7a:40:a0:38:97:
a2:4d:59:b2:bf:35:bf:13:fc:c0:e7:d4:74:56:d6:
ff:1e:25:91:de:9d:dd:2b:55:a1:03:27:ad:9c:cb:
fe:60:eb:87:e7:40:4e:95:95:b0:44:68:f7:53:f2:
17:f9:13:1f:76:4f:dd:c5:81:c7:e1:07:4d:0b:b3:
9f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:44:11:AE:F2:AC:0E:02:71:8A:7E:C6:E1:19:D9:2A:26:80:1B
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:26:fa:94:dc:46:2a:f6:84:14:c6:ec:5f:df:e4:d7:9b:00:
06:b9:73:be:a5:28:3b:22:01:fa:0b:5c:66:b1:9f:39:91:6d:
06:86:7a:f8:28:6e:c1:3a:83:16:16:0d:df:c9:a4:ce:62:7a:
31:8b:61:74:80:78:26:a5:dd:39:59:73:52:b0:92:45:5c:38:
f4:d4:a1:1b:f3:31:b2:be:38:b4:b1:9d:eb:65:c2:b6:4d:3d:
57:24:a0:92:3b:4a:24:3a:03:f6:75:ed:1d:6e:02:53:9c:6d:
15:85:ff:58:4d:05:cc:f8:e2:33:5b:ec:33:a2:0f:89:51:ca:
1b:57:cf:1a:51:f4:97:e1:66:fe:91:1a:66:50:18:cf:a6:43:
9a:d8:bb:29:f0:c0:e7:ba:55:cd:d5:5e:2e:5d:a5:da:c5:64:
6f:a0:51:0d:51:10:ce:a1:c7:48:7c:a2:80:79:51:38:57:f4:
3c:2a:0c:51:6d:c2:6d:25:79:d6:50:6c:64:ec:45:a0:ed:b9:
2b:50:92:dd:87:a0:a2:62:a5:79:69:7c:6a:e4:93:e8:fe:03:
58:bb:57:d5:36:0f:6a:c7:05:93:fb:17:2c:59:fa:df:41:d2:
3e:48:68:06:6d:75:86:ea:89:7c:4d:7d:3c:f2:63:88:a9:f8:
b6:1f:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:34 2025 by rpki-client