
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File: P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier: t0KKXv0Q9pFH/AQ7lxxCozJH3FxPGDC66abHZCP+rWs=
Subject key identifier: FC:58:2A:DC:B1:A3:B6:22:9F:47:F5:67:DF:93:AF:41:35:F5:8F:C6
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer: /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial: 01964AEAF0D01A77026B3CDE7CF539739D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number: 0AE4
Signing time: Fri 18 Apr 2025 22:00:33 +0000
Manifest this update: Fri 18 Apr 2025 22:00:33 +0000
Manifest next update: Sat 19 Apr 2025 22:00:33 +0000
Files and hashes: 1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: iiO/DLr9Xo8iR9piSqJGa7Ofi84QEFJPq9Ov6cnJEoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 22:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:f0:d0:1a:77:02:6b:3c:de:7c:f5:39:73:9d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Validity
Not Before: Apr 18 22:00:33 2025 GMT
Not After : Apr 19 22:00:33 2025 GMT
Subject: CN=fc582adcb1a3b6229f47f567df93af4135f58fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:a3:ee:5e:a2:2b:cd:02:30:89:6d:63:aa:
75:eb:ad:b5:b4:b9:f3:8a:e6:27:b5:ff:d5:31:87:
8b:6d:90:33:af:ba:ae:15:46:2b:e9:be:de:a2:6b:
c4:62:5f:b9:ba:c1:d3:9c:b1:7e:e1:5e:3b:a3:0d:
68:41:58:70:26:77:66:7c:16:a2:0d:3a:c9:c9:e2:
81:96:77:20:c5:b5:eb:75:ab:58:2a:5b:92:7f:e7:
72:11:75:b2:42:92:a2:68:04:20:f1:1d:50:5e:f8:
13:41:b9:fc:e2:43:5e:e9:04:64:5b:71:e4:e8:67:
d9:0f:c8:8a:63:82:db:d2:3f:c2:f7:60:c6:e6:c0:
77:2a:b9:51:54:be:55:61:2f:40:7a:a5:13:e4:88:
3f:55:98:f9:f9:4b:9a:9e:3d:bf:57:34:9c:f6:ad:
ac:90:49:47:a1:ab:b6:7d:3a:b4:3f:97:3f:dd:c1:
83:7f:e2:d0:7b:da:bb:da:42:3a:c9:f4:c6:d5:80:
8f:b4:13:b5:e4:81:d2:09:90:7d:65:15:86:f3:8f:
a6:83:45:9c:cb:76:f2:cd:17:cc:3a:f6:6d:6c:87:
f3:58:05:65:d5:22:9b:42:e2:a6:51:61:0f:bd:43:
b0:4a:f4:b3:d9:2a:85:c3:17:2d:e5:bd:2e:53:c2:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:58:2A:DC:B1:A3:B6:22:9F:47:F5:67:DF:93:AF:41:35:F5:8F:C6
X509v3 Authority Key Identifier:
keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:19:26:43:12:3f:dc:2e:0b:fc:ee:1f:af:1d:ee:2b:71:e8:
58:02:d4:84:a9:7e:ef:ee:f8:21:4c:14:cd:5e:07:8d:ba:57:
b4:1d:83:12:e8:c4:ca:0f:b4:b1:16:19:e5:9b:de:5e:84:6d:
97:f2:9e:f1:8f:e5:79:c8:77:70:71:8f:54:bf:f2:4b:13:b8:
72:71:3f:dc:71:f3:f1:78:fd:31:cb:10:46:55:6e:92:2e:2f:
ea:e3:5f:c4:51:0b:3e:9c:60:3a:61:ab:33:e4:6d:b7:54:43:
09:ac:1e:14:e9:dc:58:3d:7a:55:00:06:09:be:ff:e8:54:e9:
cd:8d:b0:56:4a:b8:18:db:2f:16:1e:43:30:d7:ec:48:9c:45:
97:71:85:91:7d:f2:ea:99:cc:6c:71:6c:92:9e:7a:8a:5a:cf:
ef:93:83:e3:44:2d:82:45:bb:4a:0e:27:3a:21:b0:88:54:43:
9d:f3:71:b9:1f:6f:89:f5:54:14:96:f0:8e:3c:6a:ab:62:ea:
74:60:5f:f2:fe:80:9d:65:51:44:b9:ee:61:6b:bb:6a:f1:3a:
f0:2c:7d:6a:9d:50:d7:25:b7:c0:3b:87:59:58:a7:2f:e1:f1:
40:8d:d3:fd:df:db:00:29:83:26:e3:16:31:5d:9c:42:6d:7b:
52:1d:e9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:13:49 2025 by rpki-client