Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: ET/+WQRMWYMsvZqrm2rHIzluaQbPGmqnEFAwOomXi2w=
Subject key identifier: 77:E8:B3:DE:A2:54:BF:62:C1:D7:36:63:66:43:4F:E6:9C:8E:65:44
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 019640D52241594BE73CEAF5F7DB97188047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 0431
Signing time: Wed 16 Apr 2025 23:00:31 +0000
Manifest this update: Wed 16 Apr 2025 23:00:31 +0000
Manifest next update: Thu 17 Apr 2025 23:00:31 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: SgNoi3vUkEJhwmq9BDVT5WNHM/rj5apFJ2KhSV6Bm2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:d5:22:41:59:4b:e7:3c:ea:f5:f7:db:97:18:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Apr 16 23:00:31 2025 GMT
Not After : Apr 17 23:00:31 2025 GMT
Subject: CN=77e8b3dea254bf62c1d7366366434fe69c8e6544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:48:fe:3f:dd:86:8e:81:65:05:9f:18:9b:96:
b5:86:4d:1a:a0:ff:cc:84:fe:67:83:8c:c2:fb:74:
48:c4:5f:a0:f1:fb:ba:0a:b6:6f:a5:53:e4:11:e0:
e3:4f:c4:1a:73:36:29:3f:f9:2c:95:5d:11:a7:7e:
84:9f:87:49:99:a7:b7:f1:92:7e:6f:81:fc:51:53:
f0:ce:1d:4e:f1:21:91:1e:50:95:59:55:1e:6e:be:
5e:fe:a0:6f:d4:c1:1a:5c:16:60:10:11:33:b1:60:
19:76:fc:16:41:4a:92:ca:b1:e6:21:54:44:ad:68:
17:c5:00:e6:48:d4:03:e4:9f:ba:98:01:9f:03:46:
35:6b:f6:47:b5:b7:a6:cc:00:fb:56:74:20:fc:8a:
1f:33:28:26:d9:e6:8a:d7:19:52:51:31:34:08:04:
c0:57:73:c8:e6:89:0f:71:2b:79:33:c8:27:69:bb:
ea:d5:66:c8:4a:f2:34:6a:7a:42:a9:09:80:6c:71:
4f:67:3c:e0:f9:83:7f:a0:30:e0:24:f4:4d:da:8c:
7f:45:d4:68:53:4c:de:50:e5:f4:82:93:1f:97:03:
59:cc:dd:80:39:14:17:ee:64:65:0e:1d:7d:31:a0:
ca:dd:ff:e1:90:fa:4e:5f:c0:f1:87:76:d1:bf:19:
21:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E8:B3:DE:A2:54:BF:62:C1:D7:36:63:66:43:4F:E6:9C:8E:65:44
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:2e:69:59:51:0e:a6:07:4a:50:a7:49:ee:41:6b:b0:ed:
cc:7b:50:17:50:e5:23:14:e7:54:06:5f:1c:40:51:c0:36:04:
fd:56:62:00:a7:f4:a6:29:ac:f9:4a:19:7f:0d:47:1d:4f:a3:
bb:3e:b1:da:87:cd:d3:f6:3a:b9:b0:76:77:60:68:cf:25:db:
95:f8:5f:c0:9f:a1:10:2d:2a:3c:65:6d:f2:42:55:b3:91:fa:
17:cd:fe:fd:0b:e5:32:05:6d:6f:4f:43:cb:7d:02:fe:5e:79:
67:9c:89:16:a1:d0:02:4f:b4:58:12:25:2f:c1:82:f5:75:a8:
d6:c4:dc:27:8d:8c:ea:ca:47:59:cf:00:69:d0:0c:ac:32:2c:
60:f8:a8:8c:8f:9f:b3:aa:c0:a8:39:42:13:03:cf:b1:bb:24:
94:91:e4:b6:26:bf:84:f2:25:c4:ee:a1:cd:05:02:26:b5:46:
c1:51:4f:d2:ac:83:23:75:84:be:c9:78:63:ff:8e:92:56:d1:
a5:02:48:40:ce:6e:28:db:e4:56:77:71:8e:e6:f9:bd:5c:f3:
18:72:80:06:95:ed:a6:75:59:6b:cd:cf:85:5d:63:06:96:82:
e6:d5:f2:6d:d2:c2:fb:8f:ba:bb:dd:73:08:6c:9b:a0:9f:91:
64:c8:bc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:35:27 2025 by rpki-client