Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
File: P6xJAcwjvke_qfEqYET6Y0USIQc.mft (raw, json)
Hash identifier: imdpH1vgKhGcXZmKBcsIlKV43Uvt2ft0Da0CIcNAG1M=
Subject key identifier: 04:EE:30:3A:53:65:51:FC:27:5A:79:E8:10:A4:B1:77:58:5E:2B:B2
Authority key identifier: 3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
Certificate issuer: /CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Certificate serial: 01958B4D85D1CC9373E997CE5D8F60FDE778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
Manifest number: 03D3
Signing time: Wed 12 Mar 2025 17:01:08 +0000
Manifest this update: Wed 12 Mar 2025 17:01:08 +0000
Manifest next update: Thu 13 Mar 2025 17:01:08 +0000
Files and hashes: 1: I2T3vW_f2hKmlZWnd51x-GtOD7M.roa (hash: oNoWZuXx4HX98BE5ZXv2y66gUnUeaQrrJOmk84paoXM=)
2: P6xJAcwjvke_qfEqYET6Y0USIQc.crl (hash: JG4hw7tqdcosltR9OhDxGhHx6EATy1dlZYuv1oIKJrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:85:d1:cc:93:73:e9:97:ce:5d:8f:60:fd:e7:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fac4901cc23be47bfa9f12a6044fa6345122107
Validity
Not Before: Mar 12 17:01:08 2025 GMT
Not After : Mar 13 17:01:08 2025 GMT
Subject: CN=04ee303a536551fc275a79e810a4b177585e2bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:1a:e1:4c:92:c5:1b:c8:49:9a:f1:57:64:
8d:4a:4c:fd:74:d6:a4:55:60:69:d8:e4:4e:d0:af:
bb:2b:70:0e:25:36:5d:e4:b1:af:52:a2:8b:84:9f:
cb:71:cb:f7:d2:cd:4b:f9:85:53:25:29:88:f3:d1:
50:dc:90:6d:52:c1:d2:aa:6b:10:5c:3f:3a:fd:64:
89:13:ed:55:8a:0a:4c:95:22:54:2d:b9:cf:49:64:
f6:70:5e:f6:15:0f:e1:36:d4:e5:0a:14:42:9b:62:
20:72:06:2e:43:34:90:f5:bd:34:3b:da:12:4a:2b:
cf:e8:7c:e2:3e:e0:60:9b:35:10:66:e8:4b:56:c0:
7f:d9:1d:0c:6f:06:1f:20:a6:f1:e1:3f:a8:2d:06:
dd:ff:51:bf:6b:e1:d0:64:bb:6c:60:81:6f:9f:87:
72:83:8b:d7:a0:38:17:ed:a1:86:eb:89:09:29:2f:
75:a8:08:29:f9:90:64:5c:0a:a1:f1:54:6b:02:ec:
1d:32:ed:76:bf:6a:1d:5a:b6:82:8f:0f:e4:5d:6c:
c4:f2:48:22:8e:e1:e3:9d:20:2a:36:c5:f0:75:af:
cf:4b:01:e0:68:8e:b9:22:84:79:5e:e8:9f:b8:0f:
8e:e5:23:6b:4f:8b:84:ea:e3:d2:9a:51:b8:2c:67:
b2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EE:30:3A:53:65:51:FC:27:5A:79:E8:10:A4:B1:77:58:5E:2B:B2
X509v3 Authority Key Identifier:
keyid:3F:AC:49:01:CC:23:BE:47:BF:A9:F1:2A:60:44:FA:63:45:12:21:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6xJAcwjvke_qfEqYET6Y0USIQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0ffd95-98e6-4279-987f-73a634155ee9/1/P6xJAcwjvke_qfEqYET6Y0USIQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ec:ac:49:56:5f:89:24:82:79:5d:fd:01:3a:82:ed:d4:4f:
22:fb:27:a4:1c:df:77:37:56:a0:10:2c:dc:2f:7b:80:50:84:
4b:ac:cc:f4:d2:17:29:db:0a:0a:2e:a1:35:ca:9e:92:51:52:
10:75:49:f2:3a:21:f1:c5:ef:2c:2c:05:29:e0:09:63:92:95:
0c:a3:92:53:ca:15:2b:bf:56:c9:69:33:68:5f:67:b0:1b:36:
91:41:1f:92:18:61:77:d9:80:51:38:c5:85:f6:aa:74:c3:59:
3f:f9:c9:45:eb:bb:ad:8b:ef:78:3e:55:c6:ed:f9:5c:39:96:
3f:7a:d3:03:95:bb:7e:f2:4b:2d:92:20:fe:ba:bb:cb:7a:ec:
68:ed:5c:e1:df:1e:a0:3d:88:e4:df:89:23:06:b0:38:f9:20:
e4:86:f0:28:2a:0f:25:c4:a9:6b:2b:32:cd:c1:87:85:6f:79:
a4:da:08:12:21:9e:65:d8:dd:f5:68:89:77:d6:3c:6d:b5:e5:
b8:e5:7e:9b:db:0b:42:cb:21:f8:b6:3c:7f:c7:a7:4e:e5:31:
09:e3:ac:b3:26:4c:b5:d4:c1:89:ed:8e:6b:c3:1b:41:e6:cb:
ec:5b:ca:d0:08:5c:3d:66:3b:38:89:b4:f4:96:27:eb:27:cf:
fe:25:00:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:25 2025 by rpki-client