Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: jRe9UPhQQGgcNZWi6lRgbQ6Rbzw+KdeRhA7i8r2LhH4=
Subject key identifier: F7:6A:56:90:50:3B:EA:AE:6A:11:A3:56:95:24:BA:EA:DB:FF:93:A4
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 0196B71088A38DD0212DCE707A4D8750DF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 22:00:36 +0000
Manifest this update: Fri 09 May 2025 22:00:36 +0000
Manifest next update: Sat 10 May 2025 22:00:36 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: k4D/PcTDo5JYNkI5OE4LnicY9ds8z0md8JqCVqTIzfA=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:88:a3:8d:d0:21:2d:ce:70:7a:4d:87:50:df:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: May 9 22:00:36 2025 GMT
Not After : May 10 22:00:36 2025 GMT
Subject: CN=f76a5690503beaae6a11a3569524baeadbff93a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:e3:df:46:dd:40:2e:52:8f:5d:9b:a2:4d:
99:1f:b2:a4:9b:39:59:ef:a9:66:51:4f:c6:e2:c4:
ea:fe:5b:a5:eb:5b:f1:b3:3d:c7:3c:1e:b8:72:3c:
d1:6f:de:c5:4c:96:86:5e:33:12:14:4f:df:8c:1b:
ad:e5:d4:8b:d6:51:ff:e1:a0:1b:56:8e:21:4a:f2:
a5:94:d1:dd:d8:af:18:83:a7:57:0a:91:f2:91:4b:
c9:6b:a2:79:72:26:bc:70:2a:2b:55:ae:5c:e9:ac:
5e:da:e9:84:32:ef:6d:b1:86:2b:8a:06:97:69:c7:
ae:bb:05:8d:3b:d1:d6:df:cf:6e:83:36:cc:e6:69:
f3:93:ba:d3:07:f2:a3:02:a4:5a:f3:67:f6:c2:f9:
7d:57:f6:97:bc:92:c5:e8:b5:8e:53:ea:63:e9:1f:
13:be:47:b9:c2:b9:78:3b:88:78:24:c9:bd:a2:a6:
2d:d7:f0:73:03:3a:50:60:30:5a:c6:9f:68:aa:3f:
d3:1a:c4:43:8f:cd:48:a1:5e:30:11:e4:47:c1:a3:
03:97:5a:a2:8d:54:27:34:ae:c8:46:40:9c:0f:b5:
29:d4:d1:3b:68:83:95:75:c4:7a:c5:0d:a6:e8:55:
af:1d:54:45:98:f7:e3:19:ee:49:dc:a6:c1:d9:47:
d8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6A:56:90:50:3B:EA:AE:6A:11:A3:56:95:24:BA:EA:DB:FF:93:A4
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:6d:c7:0d:5e:8b:3d:b4:f8:4e:11:51:34:05:fd:af:0c:
32:0c:e0:21:e6:43:b0:39:8a:c9:e8:1e:5b:05:cb:69:f9:ae:
d9:25:46:0d:e6:4d:3e:94:a5:2d:93:14:dc:2a:85:ef:99:83:
ec:a3:06:5f:2e:c4:6d:92:6b:60:ad:2b:ef:23:ad:4a:e6:e5:
4c:b8:57:c4:7c:a9:46:39:58:6b:1c:98:7c:a8:35:65:0d:62:
64:07:3e:cc:d0:55:8f:60:8f:9f:e9:6f:41:d1:36:09:49:e7:
87:02:6b:05:f5:a6:64:36:81:3e:e9:14:ec:64:b2:67:3c:b4:
c1:2f:f6:80:26:6f:d4:b3:72:76:b4:b6:4e:80:6f:e5:7e:24:
83:78:d1:cb:e3:20:82:21:77:fa:fc:a7:63:9a:bc:b1:ef:3e:
a1:35:7a:ca:0f:2b:9a:47:95:41:00:77:c0:a4:79:c1:4b:79:
49:91:0b:92:29:2c:1b:85:0d:52:34:1e:ad:14:0a:86:5d:37:
6c:04:21:c9:c8:fb:ee:12:cc:37:7b:76:d2:a2:53:a3:f4:ad:
1d:c8:6c:51:5b:29:d8:30:db:07:28:f1:01:cd:12:95:48:a3:
38:af:e2:aa:e6:38:3e:a8:dc:18:1d:c0:da:78:00:a5:87:3f:
00:cf:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:39:52 2025 by rpki-client