Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File: P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier: lCfd7ln+JL3RjmmRdxaotJ4fWch8RCUT/0GZtk2jssI=
Subject key identifier: 96:65:05:FC:71:A7:A6:7A:36:A5:5E:C7:7C:EA:C3:51:12:10:8E:08
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer: /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial: 01958C600B299498B1AC65F8E288653F6CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number: 088F
Signing time: Wed 12 Mar 2025 22:00:59 +0000
Manifest this update: Wed 12 Mar 2025 22:00:59 +0000
Manifest next update: Thu 13 Mar 2025 22:00:59 +0000
Files and hashes: 1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: lcbI8SpG9cA3XVn0cG/B3yGO38NkFGWHymfNS+/v90E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:0b:29:94:98:b1:ac:65:f8:e2:88:65:3f:6c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Validity
Not Before: Mar 12 22:00:59 2025 GMT
Not After : Mar 13 22:00:59 2025 GMT
Subject: CN=966505fc71a7a67a36a55ec77ceac35112108e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:99:d4:4c:89:6c:86:83:bb:2c:0b:97:a7:6d:
98:39:3f:b4:49:02:6a:65:49:a7:a0:93:a9:13:e0:
68:e6:c8:5e:82:22:7f:b8:33:8a:d2:3d:37:6a:9b:
7c:02:7f:73:47:ef:ab:f9:bc:1e:29:53:30:11:12:
d6:1a:8f:2b:3e:e3:ce:06:7f:15:c9:c1:d7:fa:92:
76:4f:f1:fc:76:d1:4e:67:36:c5:64:d5:49:d2:80:
7e:35:7a:8c:bc:83:53:b3:d1:cd:62:63:b4:7e:cc:
b4:9b:10:a0:64:ca:a1:38:c1:87:02:f9:81:77:bd:
55:fd:fa:3a:14:36:d4:2c:26:eb:d6:61:9e:0f:33:
b7:97:6c:82:50:aa:d4:d8:bb:be:b1:a9:70:39:2c:
13:a3:60:6f:f0:c8:9d:a0:10:e2:bd:63:a4:ee:d4:
4b:75:4d:ef:a0:5b:bf:3f:4b:1a:99:9c:db:ea:69:
95:ad:07:86:1d:89:56:d2:6a:7c:6c:74:af:86:2e:
b1:67:02:22:4e:2d:85:ce:56:75:d9:51:8b:69:49:
d8:ee:ef:0c:41:32:94:03:a1:6e:a1:d0:13:a6:0b:
98:7e:a6:ab:aa:16:18:e4:91:45:dc:be:3f:cc:a2:
dd:27:da:84:ee:3e:ae:5a:3b:ee:09:11:9a:e9:34:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:65:05:FC:71:A7:A6:7A:36:A5:5E:C7:7C:EA:C3:51:12:10:8E:08
X509v3 Authority Key Identifier:
keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:44:94:e9:63:3e:b3:9d:1c:ff:30:5e:d5:41:5a:56:75:2f:
5d:a8:d3:4c:a6:f1:75:08:b4:44:c5:f6:c3:5a:5b:9b:43:b4:
11:e0:3f:57:13:5f:54:e7:73:14:6b:12:d4:d6:5f:22:87:d3:
29:24:15:4e:4e:db:1e:1c:36:9f:d6:23:fd:d8:37:7d:21:33:
70:51:51:9b:8b:0b:e5:70:0e:d0:9f:a6:7e:7f:c4:fb:12:6e:
b9:f2:ed:4e:3e:58:22:e7:ea:59:69:e3:d2:6d:14:18:c0:33:
99:a9:62:4a:f4:21:d5:da:a6:59:2e:c3:fc:0e:cb:5e:1e:da:
c5:f3:a9:bf:e8:60:59:eb:df:0c:39:e2:f2:de:fb:e8:85:1e:
d9:83:da:f2:38:ac:ab:88:75:04:07:07:aa:79:7f:9e:07:e1:
f2:6a:d5:6d:67:da:bd:cc:44:55:69:3c:f4:fa:ba:23:67:1b:
ef:c0:4c:59:43:9b:3e:58:37:bb:1a:0b:78:ef:86:3d:d9:8f:
cf:f9:0d:a3:6d:d0:fd:ad:f5:46:ce:8c:4e:3d:4c:a3:0e:73:
0c:9b:79:0b:3c:50:8c:4c:13:80:5d:5c:58:0d:14:5b:24:e1:
5f:1b:85:73:95:d3:19:13:6c:3b:92:de:40:78:24:6e:64:25:
57:18:15:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYAsplJixrGX44ohlP2zfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNjJjYTljNWVmZmZkMzIwYWJkMmQ4ZmM3ZThmODM1ZTdi
YmQxZWIwHhcNMjUwMzEyMjIwMDU5WhcNMjUwMzEzMjIwMDU5WjAzMTEwLwYDVQQD
Eyg5NjY1MDVmYzcxYTdhNjdhMzZhNTVlYzc3Y2VhYzM1MTEyMTA4ZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JnUTIlshoO7LAuXp22YOT+0SQJq
ZUmnoJOpE+Bo5shegiJ/uDOK0j03apt8An9zR++r+bweKVMwERLWGo8rPuPOBn8V
ycHX+pJ2T/H8dtFOZzbFZNVJ0oB+NXqMvINTs9HNYmO0fsy0mxCgZMqhOMGHAvmB
d71V/fo6FDbULCbr1mGeDzO3l2yCUKrU2Lu+salwOSwTo2Bv8MidoBDivWOk7tRL
dU3voFu/P0samZzb6mmVrQeGHYlW0mp8bHSvhi6xZwIiTi2FzlZ12VGLaUnY7u8M
QTKUA6FuodATpguYfqarqhYY5JFF3L4/zKLdJ9qE7j6uWjvuCRGa6TQtkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZlBfxxp6Z6NqVex3zqw1ESEI4IMB8GA1UdIwQY
MBaAFD9iypxe//0yCr0tj8fo+DXnu9HrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4Njkt
MDA5MDgwZThkZmY1LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hMzYxY2ItZjhiZS00YjUwLTk4NjktMDA5MDgwZThkZmY1
LzEvUDJMS25GN19fVElLdlMyUHgtajROZWU3MGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMESU6WM+
s50c/zBe1UFaVnUvXajTTKbxdQi0RMX2w1pbm0O0EeA/VxNfVOdzFGsS1NZfIofT
KSQVTk7bHhw2n9Yj/dg3fSEzcFFRm4sL5XAO0J+mfn/E+xJuufLtTj5YIufqWWnj
0m0UGMAzmaliSvQh1dqmWS7D/A7LXh7axfOpv+hgWevfDDni8t776IUe2YPa8jis
q4h1BAcHqnl/ngfh8mrVbWfavcxEVWk89Pq6I2cb78BMWUObPlg3uxoLeO+GPdmP
z/kNo23Q/a31Rs6MTj1Mow5zDJt5CzxQjEwTgF1cWA0UWyThXxuFc5XTGRNsO5Le
QHgkbmQlVxgVNQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:46:13 2025 by rpki-client