Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: JZHjPH2l+NMGE9i40FcByr9EWLkvdlLBmC4E6zetftA=
Subject key identifier: 93:D6:5F:78:DB:43:30:BD:45:60:83:E6:0A:5D:08:DB:07:76:16:44
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 01963FF9DBCB20F9434B1D24A6E3237CA8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 08EC
Signing time: Wed 16 Apr 2025 19:01:01 +0000
Manifest this update: Wed 16 Apr 2025 19:01:01 +0000
Manifest next update: Thu 17 Apr 2025 19:01:01 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: nCc5mp5PjYUUGmnBmmPF6DSFPszsNKRv06k4MvV/lvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:f9:db:cb:20:f9:43:4b:1d:24:a6:e3:23:7c:a8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Apr 16 19:01:01 2025 GMT
Not After : Apr 17 19:01:01 2025 GMT
Subject: CN=93d65f78db4330bd456083e60a5d08db07761644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:b5:61:83:c6:05:bf:90:2e:f1:ae:46:9b:
20:0d:19:e6:b3:ea:f4:1d:21:84:83:f8:94:39:9c:
c3:2e:25:7a:4b:95:b1:08:21:89:f5:53:1e:03:a3:
e4:85:9a:df:32:c4:32:5c:ba:75:e8:e3:1c:f9:c2:
bb:45:c9:e7:ca:a7:01:14:2f:78:15:af:8c:d3:fc:
e8:05:48:7b:b8:dd:b5:05:42:9f:de:bd:24:eb:6c:
8c:87:73:fc:33:07:ad:3d:31:02:3c:04:f3:91:eb:
bc:17:69:9a:ba:97:96:9d:81:25:d4:e0:3b:3e:44:
8d:81:eb:13:9e:1b:03:d8:f5:c4:aa:5d:10:51:10:
c3:4b:e2:10:78:9f:08:84:c2:6b:b2:1b:c9:11:e2:
65:2b:1b:c7:46:bf:38:92:fb:09:8c:c7:99:c5:5e:
8b:0f:52:ce:06:21:32:6f:f1:ed:39:b7:9e:8e:c5:
e9:c6:83:f9:34:85:6c:13:93:e0:25:c8:64:2b:7e:
52:3a:10:10:c7:45:d1:d7:fa:f1:b2:a0:53:e1:7b:
5f:94:ec:83:99:d5:dc:85:29:a6:75:39:e1:67:73:
d1:3c:2d:aa:b7:37:a0:17:90:b8:af:5b:d6:93:1d:
3e:f8:90:25:2f:79:6e:ed:c9:13:4b:9d:7b:8d:db:
c8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D6:5F:78:DB:43:30:BD:45:60:83:E6:0A:5D:08:DB:07:76:16:44
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:84:d7:23:0a:cb:c8:63:b7:d6:75:18:87:88:0f:5f:a2:01:
43:a7:b2:8f:b2:15:76:28:0e:a0:7f:58:9a:20:97:e3:11:68:
4f:bd:76:02:c5:4b:55:87:e3:19:9d:be:13:d3:e1:92:9d:41:
5e:33:3f:78:ac:0e:41:f0:e7:0e:00:8b:71:1d:b7:d5:e7:23:
86:4a:fb:39:75:33:bd:f3:da:e2:05:c2:4d:2a:f6:2b:9d:a0:
a5:0b:92:31:8b:20:ba:78:67:60:39:f9:f6:bf:2e:b2:74:b0:
bc:ab:f9:e3:8c:78:4c:43:fc:d6:31:db:62:1c:9d:ec:07:f4:
39:78:7b:0b:c8:35:d5:a2:21:86:c0:8d:fd:31:76:ab:ff:c5:
6e:03:f1:e3:20:62:e4:b2:47:df:6e:03:5c:43:f1:7c:db:34:
67:f0:e8:6a:1a:26:56:f9:40:51:11:21:a6:38:f4:30:66:a1:
df:25:e2:e1:8c:45:93:6d:0b:5f:19:81:62:3b:a1:6d:bf:ff:
61:b2:d5:46:04:04:63:83:e2:16:a4:2e:9a:60:89:54:4f:61:
5e:dd:75:78:65:5e:60:b7:3a:08:1b:3e:23:61:a0:62:9f:6c:
b2:e6:57:f5:6d:20:17:66:be:19:83:dd:98:73:48:7d:88:1c:
90:1a:71:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:05:52 2025 by rpki-client