Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
File: P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft (raw, json)
Hash identifier: CxdPU7Qff15MPkCsrwl6rcy70eao89qx8+uqrn3wPLw=
Subject key identifier: 28:B1:3A:3B:14:EE:92:99:34:A6:80:AB:E4:91:9E:5A:90:60:10:F2
Authority key identifier: 3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
Certificate issuer: /CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Certificate serial: 019654C994BFA3561C4A4A66B8FAB82BDAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
Manifest number: 0207
Signing time: Sun 20 Apr 2025 20:00:19 +0000
Manifest this update: Sun 20 Apr 2025 20:00:19 +0000
Manifest next update: Mon 21 Apr 2025 20:00:19 +0000
Files and hashes: 1: P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl (hash: 90GG/DM97IDA7kSg9EghWHO/pIUasZcq8fHdYKnlPBg=)
2: mmWIUy6R5upz2L1YINLOdfsMMT0.roa (hash: wBplVEEyq+VUYs/M8XPCNDfyw39oDDlnudAvkLvbSPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:94:bf:a3:56:1c:4a:4a:66:b8:fa:b8:2b:da:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fc6abeae1b622256dbb2d8b7451d27490d274bb
Validity
Not Before: Apr 20 20:00:19 2025 GMT
Not After : Apr 21 20:00:19 2025 GMT
Subject: CN=28b13a3b14ee929934a680abe4919e5a906010f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:0e:24:05:50:e6:cc:a6:c5:2f:e0:0f:c3:
b3:fa:cc:83:67:d6:15:83:da:6f:66:e6:e3:43:6b:
60:f1:25:23:e7:e2:51:30:73:24:3b:3d:a9:36:ac:
6b:b1:67:ca:5b:ee:7c:56:94:01:58:a2:e3:01:5e:
64:c8:6a:0f:0c:ea:3a:6a:6e:22:1c:72:74:88:37:
3b:bd:60:5b:c8:30:8e:d8:d7:62:ba:28:72:98:65:
4b:d6:31:7a:94:4a:45:a0:51:51:bf:00:eb:a3:82:
e0:e3:7c:f6:da:0b:2b:5f:23:1d:bb:64:41:b1:bb:
02:bc:23:28:c9:01:d9:dd:b7:ab:44:88:2c:44:f7:
b8:b9:73:12:a5:e5:14:a2:a0:5a:ba:87:24:f7:3d:
25:ab:8e:8e:b0:80:e6:95:71:3d:43:fe:83:66:e8:
f3:6c:32:d0:2e:1b:64:0e:50:f1:db:29:4f:18:8d:
52:51:79:17:23:48:af:3f:ab:06:d2:85:3d:46:a4:
27:ed:29:2b:af:af:5b:30:85:c7:3e:55:fc:90:37:
d5:49:7f:f1:55:3c:d1:d0:03:7d:08:6a:3e:41:4e:
96:50:48:44:e9:c0:60:f3:82:49:6f:83:f0:20:1c:
f9:3c:55:66:55:3b:df:97:cf:11:1b:da:c6:ed:e6:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B1:3A:3B:14:EE:92:99:34:A6:80:AB:E4:91:9E:5A:90:60:10:F2
X509v3 Authority Key Identifier:
keyid:3F:C6:AB:EA:E1:B6:22:25:6D:BB:2D:8B:74:51:D2:74:90:D2:74:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P8ar6uG2IiVtuy2LdFHSdJDSdLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/70d112-0221-4b04-ac83-6123fd1f5fcd/1/P8ar6uG2IiVtuy2LdFHSdJDSdLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e8:88:d9:67:1c:e3:f8:bd:ea:9a:e1:0f:ee:39:32:f9:f7:
71:e5:21:7e:9e:1a:d7:64:23:12:86:0c:4a:99:91:5d:b6:1d:
c2:4c:39:2a:49:cd:f5:6c:46:ad:e4:34:fc:d8:2f:b8:23:a2:
b3:6d:b6:23:cb:a2:bb:91:4f:d3:e1:ef:04:7e:14:58:66:b8:
7c:12:ce:4f:ff:52:93:b0:46:62:33:b0:c3:f7:1a:7f:ac:04:
c0:d0:c0:13:bd:b5:f9:e0:ca:14:76:cb:49:61:df:7d:72:85:
91:af:1d:a9:06:b5:8c:07:ba:45:7b:29:a2:a1:54:9d:f7:93:
17:2f:f6:52:9d:b9:47:7c:c7:14:ee:48:84:b7:47:c4:82:0b:
fe:b4:c0:6c:76:60:c8:15:34:88:17:df:24:89:69:33:a2:d3:
e6:b4:6d:1a:8c:18:c9:b9:7c:b5:08:9d:fb:c1:74:98:d4:cc:
7e:01:2e:67:00:ec:50:07:4c:14:12:79:c6:55:d3:ee:74:f5:
a8:1d:06:4d:47:59:82:9b:6f:06:bc:9f:c9:35:4e:8e:58:dd:
e9:d0:05:8b:bf:cd:88:57:73:8d:f6:01:49:22:7d:69:bf:1e:
69:42:96:29:8e:24:e5:a4:80:48:25:2f:b0:c7:84:3c:43:05:
91:94:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:06:33 2025 by rpki-client