Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
File: P3lU2IwK4_Y5hpe_38GVanU-g9g.mft (raw, json)
Hash identifier: N2h6fSgGLhqLM3fZRytMbE8KKm4ss2iFkdIQpn8nWmk=
Subject key identifier: 36:22:8A:7F:F4:5F:B9:AF:82:DD:09:23:14:D1:EE:09:5C:DC:5E:F6
Authority key identifier: 3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
Certificate issuer: /CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Certificate serial: 0196BC6DFA9A741F000B271E8476607C3F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
Manifest number: 150C
Signing time: Sat 10 May 2025 23:00:46 +0000
Manifest this update: Sat 10 May 2025 23:00:46 +0000
Manifest next update: Sun 11 May 2025 23:00:46 +0000
Files and hashes: 1: P3lU2IwK4_Y5hpe_38GVanU-g9g.crl (hash: oaEqgBxOfZvktSLT6A5O2Z30jhBghLxbRrXcPgROFzQ=)
2: rf7Y9BfnjDYuwCtely2bugyEpys.roa (hash: 9y+7Sb1Y7U3Xr15ca0JClSv0KalX6Si92Kt+rNAmTHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:fa:9a:74:1f:00:0b:27:1e:84:76:60:7c:3f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7954d88c0ae3f6398697bfdfc1956a753e83d8
Validity
Not Before: May 10 23:00:46 2025 GMT
Not After : May 11 23:00:46 2025 GMT
Subject: CN=36228a7ff45fb9af82dd092314d1ee095cdc5ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c0:82:8c:d6:6f:74:04:13:b5:88:06:76:56:
e4:97:a9:1a:94:c5:f5:05:46:cb:61:63:3c:2d:42:
c2:cd:5a:de:2d:21:09:6a:39:3b:a4:53:74:5f:12:
31:d8:84:6c:ee:78:9e:62:c7:51:5e:8e:ee:a0:65:
5b:fe:55:e9:86:75:8b:7d:3e:e9:00:3e:d7:74:52:
bd:70:f0:54:58:5f:25:f7:ba:66:ac:53:08:01:2f:
25:7f:7c:f1:ea:e2:b1:96:02:25:0d:46:57:34:f4:
46:f3:ba:c4:9a:26:e4:82:6b:09:b5:f4:ae:e8:44:
cd:7d:18:06:eb:0a:11:34:94:2c:00:43:8d:2f:88:
20:97:0c:f1:66:0a:50:0e:22:97:5b:5b:87:d4:c4:
76:e9:cb:01:38:08:28:0e:d0:60:22:d9:f0:48:6b:
21:ca:91:5f:17:47:c7:23:fb:e2:d3:1a:9b:5b:23:
3b:9a:19:3a:37:35:c8:78:3f:08:50:7b:2a:ac:b6:
3f:4f:b9:c9:ed:20:36:5e:f0:fb:1a:74:8c:a7:08:
8b:8f:bc:33:33:25:9d:80:ee:11:61:2b:59:b6:66:
e4:44:bf:22:ac:1b:95:b7:59:fe:9d:ea:e2:4b:11:
56:1c:66:37:c8:18:28:44:c3:9e:f3:c9:a0:40:28:
41:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:22:8A:7F:F4:5F:B9:AF:82:DD:09:23:14:D1:EE:09:5C:DC:5E:F6
X509v3 Authority Key Identifier:
keyid:3F:79:54:D8:8C:0A:E3:F6:39:86:97:BF:DF:C1:95:6A:75:3E:83:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3lU2IwK4_Y5hpe_38GVanU-g9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e656-14a3-4e3a-9d6e-af406086b89b/1/P3lU2IwK4_Y5hpe_38GVanU-g9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a3:dd:9d:e2:ad:34:f3:ad:1a:9a:01:f8:89:4d:57:e6:3e:
39:9d:f9:3d:c0:19:58:24:7c:9c:12:45:94:0f:65:47:6f:d9:
86:58:db:5c:bc:d2:6d:6b:8e:25:e7:91:05:bb:2f:96:4e:84:
61:c2:d4:fc:68:72:22:99:82:16:e6:78:0a:71:33:0c:a4:5b:
0d:06:83:8e:f3:e6:1e:6f:ce:3a:15:eb:1b:29:22:86:02:f0:
eb:ec:35:77:28:0c:3e:22:28:46:32:b6:74:ad:cd:15:c3:71:
3e:79:1e:23:f3:04:a1:9d:55:16:8f:a2:d6:d2:c6:46:ed:51:
06:f7:45:d7:9a:43:c6:38:bd:1c:6f:60:ac:9d:41:e4:48:96:
f9:3f:6f:6e:d1:75:7b:2c:d3:48:fe:8e:c7:0d:33:68:ce:cd:
38:ff:50:04:fb:cc:81:63:72:19:0c:98:90:81:ec:cf:66:ca:
ef:19:97:e8:d8:91:46:3e:68:6d:44:c3:9b:41:e9:24:53:b2:
fa:e9:10:a6:07:92:0b:fe:15:f3:09:07:fa:f0:b9:b6:f9:e0:
71:d9:8e:74:0b:18:29:54:0c:8a:a6:eb:87:e9:f4:bd:40:f2:
20:01:7d:85:7f:6f:19:80:e2:de:9d:1e:aa:5b:b6:0e:2b:32:
04:12:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:47:37 2025 by rpki-client