Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
File: P1KMlfYICrE8sEl4PpJE0z2cSzI.mft (raw, json)
Hash identifier: x85JHIHdMA1J293rdFuASS9bIUOJULRPpv2wNWIGjus=
Subject key identifier: F1:A0:41:03:00:BE:A4:0D:7F:D2:0A:07:00:D7:02:B3:57:11:7A:04
Authority key identifier: 3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
Certificate issuer: /CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Certificate serial: 01958F97ED81BBC7FA34A77AD1EDF417C4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
Manifest number: 13AA
Signing time: Thu 13 Mar 2025 13:00:53 +0000
Manifest this update: Thu 13 Mar 2025 13:00:53 +0000
Manifest next update: Fri 14 Mar 2025 13:00:53 +0000
Files and hashes: 1: P1KMlfYICrE8sEl4PpJE0z2cSzI.crl (hash: HMeVwIcA7nLw4YEEYBV+erMfArKCX1uYwY6zME9i8co=)
2: w5HnLtF4Me5n7OHUmGug2mAnL6U.roa (hash: AsJuclUazy6myQDlUyLOaCVJ9azdwtM7AhIo+Ahv/h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:97:ed:81:bb:c7:fa:34:a7:7a:d1:ed:f4:17:c4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f528c95f6080ab13cb049783e9244d33d9c4b32
Validity
Not Before: Mar 13 13:00:53 2025 GMT
Not After : Mar 14 13:00:53 2025 GMT
Subject: CN=f1a0410300bea40d7fd20a0700d702b357117a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:c9:46:10:3d:12:a3:ad:8e:fb:c6:00:97:
6e:f1:e9:c1:1f:6e:85:46:17:22:54:ad:a8:d0:8e:
23:f1:7d:11:8c:dd:1b:38:5d:d2:26:ee:9b:f6:6c:
b6:a8:a4:a8:74:f0:23:3a:85:ed:fc:ed:0d:ac:56:
80:d1:e7:82:db:19:f8:39:9b:de:52:ef:5d:97:84:
34:a5:03:3a:1f:77:04:94:bd:3f:d8:63:46:54:ff:
4e:fa:a9:44:36:74:db:4b:ef:5b:f0:a0:85:04:0f:
d4:a3:40:38:d9:83:ae:c6:cb:7a:d0:2d:f7:15:d6:
46:b7:69:a4:89:5d:c6:e4:03:02:d2:d2:f8:29:1c:
b6:94:71:b4:ed:a8:af:6d:c7:ba:a3:d9:00:ed:82:
22:68:14:70:57:c0:25:51:f9:cc:46:a7:cc:fb:98:
3c:2b:bf:84:8a:05:19:fc:f4:8f:9e:f9:b4:da:b2:
2e:ad:07:41:a1:fb:1d:ee:c5:6f:16:2b:e5:c5:01:
ed:c6:df:60:13:0e:14:d5:a2:ad:71:50:fd:cd:f3:
f6:4d:1f:ad:95:09:79:5c:5f:4f:6a:e0:ce:7c:7e:
bf:d6:4b:bd:fa:b9:84:fc:de:42:3e:33:87:83:10:
b1:6f:f8:e1:f8:a8:77:84:dc:1f:8f:84:3e:21:0c:
05:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:41:03:00:BE:A4:0D:7F:D2:0A:07:00:D7:02:B3:57:11:7A:04
X509v3 Authority Key Identifier:
keyid:3F:52:8C:95:F6:08:0A:B1:3C:B0:49:78:3E:92:44:D3:3D:9C:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1KMlfYICrE8sEl4PpJE0z2cSzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c2fdf2-2a0a-443f-b7e0-a5bdbb145a78/1/P1KMlfYICrE8sEl4PpJE0z2cSzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:61:a1:04:46:07:d1:07:d9:ba:bd:d2:03:f4:66:b7:54:
13:43:d6:d4:8a:c4:62:cd:62:36:86:f7:b5:fb:a6:8a:2a:a8:
ed:99:2b:dd:76:c7:73:9f:b8:23:86:7c:52:05:24:ec:44:ba:
0c:a0:ca:77:99:8f:29:fc:fc:57:9a:4a:9b:8d:60:06:19:00:
8f:a1:6e:58:69:9d:f3:0d:fc:5c:87:9d:80:44:9d:21:9b:88:
f2:3c:8a:87:22:24:a4:48:2a:c3:7e:e1:ea:b1:f8:2b:c3:85:
cf:95:69:0f:c2:f0:e7:e6:6f:33:a7:00:53:c4:53:39:4c:19:
c0:99:da:d3:a9:f1:dc:bd:2f:59:a8:07:3c:8e:b5:83:c1:7a:
c8:95:89:74:f2:26:c0:1e:d9:32:64:99:de:b6:6a:d1:35:bb:
b8:a8:61:c4:01:a5:4d:1e:5c:06:ac:67:4f:89:81:e8:98:40:
57:7a:03:4a:7e:ad:3b:1c:d3:a5:6a:38:58:59:2b:74:92:7e:
f0:5a:a7:1b:10:c7:b9:08:0e:bc:53:22:5f:2f:24:67:d3:89:
44:41:8a:5b:37:a4:e0:3b:00:22:5f:87:4d:45:ed:51:fc:48:
e1:61:4a:e9:81:d5:dd:46:88:86:ea:ad:42:c6:37:98:38:3d:
57:df:08:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:27:58 2025 by rpki-client