Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File: PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier: fz180wWt+vQGl3zWoPT8seQSJovna+v5Oaj/XtUmdB4=
Subject key identifier: B1:65:55:40:54:50:7F:61:4B:0C:1F:69:44:C6:B5:72:17:38:9E:A9
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer: /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial: 01965492FBD4989FC1806308A36F4F5E70AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 19:00:40 +0000
Manifest this update: Sun 20 Apr 2025 19:00:40 +0000
Manifest next update: Mon 21 Apr 2025 19:00:40 +0000
Files and hashes: 1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: tmj5yjF6/HIjmcFWcgJQAUOVz3zSLVQ/iHK1+6NS7aA=)
2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:fb:d4:98:9f:c1:80:63:08:a3:6f:4f:5e:70:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Validity
Not Before: Apr 20 19:00:40 2025 GMT
Not After : Apr 21 19:00:40 2025 GMT
Subject: CN=b165554054507f614b0c1f6944c6b57217389ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:8c:7f:e6:e8:04:ed:d4:9c:0f:79:9a:d8:
98:e9:d9:f6:a1:ab:ed:73:11:48:92:ac:85:01:81:
d6:0c:75:74:d9:36:cd:cf:be:80:be:72:50:d3:ff:
eb:97:80:7b:ca:90:a3:7c:dd:21:44:af:0d:4f:b6:
37:81:d9:04:27:8b:37:f9:db:73:b2:84:a1:88:a2:
34:74:d4:bc:84:82:67:7f:60:8e:c3:b9:b2:3c:cd:
4f:69:1d:2f:39:4e:ee:c2:3a:e3:86:3e:8d:61:b2:
14:96:29:6c:6c:20:ae:81:09:de:8d:bc:75:f9:36:
19:ad:cd:e1:30:bf:72:71:da:fc:4f:19:cf:eb:ff:
86:9d:33:71:e6:d7:6e:8c:ff:cc:da:0b:ef:be:6a:
74:c1:87:ce:67:82:d1:aa:51:2a:bf:d9:ef:1d:e8:
b5:d1:72:cb:5f:f1:c2:c6:1f:af:6c:f6:7e:3a:72:
4a:19:85:c9:96:9e:8e:46:7f:fa:e4:d8:b6:fd:0d:
f8:8f:2e:b2:70:a0:e2:4b:31:9f:58:d9:16:bf:68:
5b:19:85:8e:12:70:4f:d4:9b:b8:1c:3f:c4:ab:0c:
35:a9:f7:33:2b:74:23:a8:a3:6e:42:8e:b6:2e:be:
a3:c3:8e:ae:52:2e:31:5e:12:5c:7a:16:65:97:90:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:55:40:54:50:7F:61:4B:0C:1F:69:44:C6:B5:72:17:38:9E:A9
X509v3 Authority Key Identifier:
keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a0:b3:1b:0a:44:04:13:09:18:34:e7:ed:de:48:47:76:b6:
3b:b5:df:1e:a0:15:84:dd:47:1a:39:36:38:b9:5f:09:6d:bc:
79:96:17:79:3d:ab:90:75:ab:3a:1b:3b:2b:41:bc:87:02:42:
a7:e5:5e:0b:4e:1e:bd:97:d3:e5:d9:a4:80:aa:40:b5:23:bb:
a0:0c:ca:98:ee:40:72:e9:5c:fd:ef:54:05:29:dc:6c:fb:e5:
d9:3f:56:db:4c:0e:30:88:37:2b:40:04:77:98:3e:b3:40:e0:
b6:3f:66:c2:1e:a4:2f:db:83:2d:99:80:fc:b3:3f:68:a1:14:
96:13:9d:d6:f1:c8:6e:d2:fb:35:e7:14:0d:71:81:b3:1b:54:
c3:c4:ca:8d:f0:78:39:2a:3a:71:6a:43:8f:a2:38:ab:26:63:
fc:cd:e7:2b:cb:61:10:f4:e1:52:e8:7e:74:a8:0e:4f:42:86:
36:a0:8b:a7:c0:5c:4f:4c:37:3a:fb:91:1f:cb:8c:0a:cc:54:
3e:48:fe:43:a9:97:10:cd:81:4d:4e:d6:c3:93:25:e1:ed:7a:
1c:2b:97:b2:60:5a:35:73:c4:47:08:a9:99:2a:c8:42:e1:1e:
5d:a3:8c:27:00:a4:ea:8e:2b:c4:f7:d6:f3:f5:b6:60:fb:ca:
30:b5:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:35 2025 by rpki-client