Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File: P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier: 6InTTS6PNMm55yggra7Wf3DRJ+IF+D5CUWxyesOnv4k=
Subject key identifier: 9E:46:30:39:FB:CA:08:43:42:19:E8:08:1D:5A:33:B3:2A:F8:B4:24
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer: /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial: 0196579437FB6B4C2D5B9B126AA9B93C2174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number: 140B
Signing time: Mon 21 Apr 2025 09:00:53 +0000
Manifest this update: Mon 21 Apr 2025 09:00:53 +0000
Manifest next update: Tue 22 Apr 2025 09:00:53 +0000
Files and hashes: 1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: yhj9MG2VLGnHGFr2gnyWB+VlTN6mPHrdtE1UBgF/AqM=)
2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:94:37:fb:6b:4c:2d:5b:9b:12:6a:a9:b9:3c:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Validity
Not Before: Apr 21 09:00:53 2025 GMT
Not After : Apr 22 09:00:53 2025 GMT
Subject: CN=9e463039fbca08434219e8081d5a33b32af8b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:09:fa:f1:df:19:ce:a6:2b:41:ec:8f:fe:
47:e0:b3:4d:3e:69:27:11:5b:4a:7a:be:98:d0:ed:
6d:c9:49:96:44:0e:58:ce:83:00:ac:b0:71:5c:8e:
30:fa:a7:23:ad:4e:3c:ae:d2:e2:8c:07:92:22:1e:
c9:44:bf:28:22:35:40:e8:4a:00:b9:bd:09:0d:29:
42:18:57:cb:0b:82:a9:7d:9a:ab:c5:5a:cf:36:83:
56:8c:9d:8e:c8:4a:40:20:b4:27:44:3b:7e:76:ee:
10:dd:fb:61:08:04:59:f5:ab:80:6c:90:1d:8a:85:
4c:1e:a1:40:55:32:11:c0:08:6a:fe:80:4e:ce:10:
06:aa:72:e2:54:8f:65:9f:e3:52:4e:30:0c:c1:f3:
24:09:3b:d5:05:43:fb:7b:44:2f:66:97:41:87:b3:
f7:4a:de:88:bd:9e:c6:b8:1d:11:6d:6a:cf:0f:f8:
3b:ae:84:59:20:02:c9:70:f8:fc:71:52:16:35:40:
23:cc:ae:da:2c:1c:6a:42:32:bb:8b:81:db:ca:b9:
2f:60:65:15:b9:12:f4:40:12:91:e6:0b:e1:bf:10:
63:48:27:f3:d8:fc:d0:fa:19:77:7e:2f:7a:ef:29:
3d:04:84:85:1d:63:7d:83:9a:52:e8:2f:8c:16:e9:
e8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:46:30:39:FB:CA:08:43:42:19:E8:08:1D:5A:33:B3:2A:F8:B4:24
X509v3 Authority Key Identifier:
keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a4:3b:c7:41:31:81:8c:f3:70:f4:08:db:6a:91:ba:18:35:
29:27:00:e1:ea:68:88:8e:6f:aa:b3:a0:c3:d2:75:8d:a3:c2:
ce:e5:fb:9b:22:b5:ed:f3:d9:0d:5e:96:87:c5:2e:ee:a9:30:
3c:ec:84:2f:6d:3e:56:09:71:77:8f:15:fc:4e:00:d8:7c:1a:
2b:c6:e7:32:f0:b3:6d:d7:0b:73:89:e7:ba:92:ff:be:65:e2:
6d:87:2d:3a:1d:ca:e8:89:4e:4a:2a:7c:21:41:10:7a:67:3c:
0e:16:7d:58:cd:c4:09:d4:15:3a:16:72:90:e3:de:53:19:96:
f6:29:d9:63:7f:e7:41:a7:38:07:3b:bf:ae:d1:ec:1f:39:52:
a5:b2:ee:6c:9c:fd:f8:20:07:db:bb:55:98:6a:7d:27:a0:70:
8b:3d:db:37:45:d6:28:e8:dd:c0:98:d3:24:b1:e1:64:4f:61:
00:e0:03:7a:5d:9c:02:23:d5:91:cb:d7:05:dc:30:be:61:03:
0d:05:57:87:b2:48:fe:df:55:d7:11:98:f8:7d:ca:48:a3:ac:
f6:02:dc:d1:a4:cd:0e:ed:07:76:e3:52:f9:73:7f:5d:af:54:
9d:fb:64:fd:de:ec:2b:2b:39:ab:d6:ef:72:db:70:e6:f7:f7:
fb:1b:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:11 2025 by rpki-client