Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
File: P6xo-RIFxE5zAzbmALYzT4yB6MI.mft (raw, json)
Hash identifier: /dMcaDGP5ypmpvowj3BmDget/99QPFzDvMfyEMshydc=
Subject key identifier: E3:61:E8:B7:FF:7B:9C:61:17:65:78:84:0E:53:8C:A0:1C:B6:48:B0
Authority key identifier: 3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
Certificate issuer: /CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Certificate serial: 0194C3888024FD1BBFE402AA79168865E9ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
Manifest number: 1D
Signing time: Sat 01 Feb 2025 22:01:30 +0000
Manifest this update: Sat 01 Feb 2025 22:01:30 +0000
Manifest next update: Sun 02 Feb 2025 22:01:30 +0000
Files and hashes: 1: GU1YI3vRymC8okEmp-zZRparjfs.roa (hash: q/QbAyjmOhWo1JcjW3JwZIKUXCaSn/iJ6pmWpIOWSpI=)
2: P6xo-RIFxE5zAzbmALYzT4yB6MI.crl (hash: uzCMrcLtpZeFG1ll2I6BoFGUYxUbTkFU6WjzjgM+XPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:88:80:24:fd:1b:bf:e4:02:aa:79:16:88:65:e9:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac68f91205c44e730336e600b6334f8c81e8c2
Validity
Not Before: Feb 1 22:01:30 2025 GMT
Not After : Feb 2 22:01:30 2025 GMT
Subject: CN=e361e8b7ff7b9c61176578840e538ca01cb648b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:f0:a5:33:02:98:bc:3d:d6:ee:a4:23:71:
35:b5:2f:e9:98:bb:dd:cf:98:b0:e0:fb:85:22:fe:
4a:61:1d:f8:8a:17:20:bb:1f:91:35:4a:3e:ac:7f:
6d:0c:07:84:68:a8:ca:29:3d:48:60:a4:8a:6e:c3:
84:05:48:fa:8c:ae:e9:14:78:60:14:8a:f1:d9:e8:
e1:6c:7d:2a:31:6f:a8:92:c2:f2:e1:9a:7b:26:76:
fa:f6:41:e6:c7:a9:df:02:a7:80:b4:4f:e2:ea:a0:
0b:13:a1:34:fa:92:7e:1e:ab:67:d9:c5:d5:79:f6:
08:de:25:8e:0b:e4:c0:c3:1e:aa:d4:47:b5:3d:6b:
27:e3:ee:55:3d:e5:0a:e4:9a:40:d4:0a:9f:49:d8:
7d:2c:5d:ef:0a:31:a0:db:21:74:ef:0a:8d:3c:d3:
92:52:0e:96:20:ff:22:79:bd:31:99:2f:e2:41:32:
f2:6a:bd:cf:8c:ab:8f:9c:2e:6b:61:7c:f3:98:c7:
5c:2a:64:e8:87:cb:3a:e8:16:db:09:df:84:7c:0d:
18:3f:1a:84:a9:d4:3e:18:90:08:90:27:7c:18:e2:
90:66:e6:95:b5:93:e1:e9:04:75:cf:9c:b6:00:90:
46:88:f5:da:b2:70:6e:c1:45:ba:01:8e:6d:04:38:
44:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:61:E8:B7:FF:7B:9C:61:17:65:78:84:0E:53:8C:A0:1C:B6:48:B0
X509v3 Authority Key Identifier:
keyid:3F:AC:68:F9:12:05:C4:4E:73:03:36:E6:00:B6:33:4F:8C:81:E8:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xo-RIFxE5zAzbmALYzT4yB6MI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e3e40f-1505-42e9-96f1-fea74e81051a/1/P6xo-RIFxE5zAzbmALYzT4yB6MI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:04:0f:5f:3f:e6:bc:f5:fd:74:3c:c0:29:85:8f:65:04:70:
a2:45:93:18:47:e0:3d:9b:0b:2e:5d:c1:7c:0f:a4:af:30:ab:
ab:ad:d2:77:f9:75:52:8f:33:27:39:81:66:44:5f:26:e7:f2:
0c:71:35:1f:05:37:b6:92:ff:35:e7:56:e4:ad:09:7a:eb:aa:
8e:1f:c7:89:a0:58:89:2e:a6:ef:98:fc:ab:fd:90:d7:d1:92:
f5:ea:89:d4:1f:30:57:8d:98:29:2c:78:d6:ce:53:35:1b:3a:
71:72:5d:47:64:51:2b:45:ff:52:8e:9d:f7:9a:4d:9d:b9:1f:
cf:20:2b:54:0d:c7:48:20:a9:f5:63:3f:cd:ac:87:3a:b7:91:
ad:3d:97:80:3f:fd:5f:96:2c:4c:6d:3b:d9:9b:14:8a:91:1d:
ec:64:18:68:96:d9:b9:ac:93:cd:40:6d:13:f1:68:80:c2:35:
62:9c:b3:eb:81:c8:78:46:46:32:8a:79:07:5f:fa:00:2f:d1:
ac:be:2e:7f:6c:27:bd:f2:47:e4:87:d1:2a:61:89:f1:a2:c4:
7e:81:4b:54:9c:bc:32:b9:5f:d1:d0:3b:07:7a:36:89:2e:a5:
ee:5b:c2:ed:df:39:83:b0:e1:74:ad:b1:27:fe:06:1b:83:93:
81:3c:08:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:43:26 2025 by rpki-client