Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
File: P6E212Q_3A0_sdU0Z9irspm3kXE.mft (raw, json)
Hash identifier: uf0sTU7Rm155Bw1CUdM2WxS/Z2g63MdgUlQOt4Dl72Q=
Subject key identifier: FF:DF:0B:08:A3:9D:CA:D3:F2:80:71:17:10:CE:0D:18:75:A2:2C:89
Authority key identifier: 3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
Certificate issuer: /CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Certificate serial: 01958C2938D43B8B1EE2957F99BEA37DB290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
Manifest number: 0480
Signing time: Wed 12 Mar 2025 21:01:06 +0000
Manifest this update: Wed 12 Mar 2025 21:01:06 +0000
Manifest next update: Thu 13 Mar 2025 21:01:06 +0000
Files and hashes: 1: P6E212Q_3A0_sdU0Z9irspm3kXE.crl (hash: l2iOm1F70NJbzz3JNgBOHuRFVkQO3K1T40OrJw6oGrE=)
2: aQLWCmdbg9aMVtpUr6kgFp-kl8g.roa (hash: MaYzTmKmtA6VMd+7uLB1yAAfoDrTIUYoMrGwKo2T4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:38:d4:3b:8b:1e:e2:95:7f:99:be:a3:7d:b2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fa136d7643fdc0d3fb1d53467d8abb299b79171
Validity
Not Before: Mar 12 21:01:06 2025 GMT
Not After : Mar 13 21:01:06 2025 GMT
Subject: CN=ffdf0b08a39dcad3f280711710ce0d1875a22c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:5f:24:c7:0e:bc:2c:b1:64:5d:d2:11:04:
67:03:5b:85:ee:c2:0c:f1:5e:be:81:6f:9f:56:2d:
24:ed:09:f9:32:38:f8:b8:b7:87:43:be:a7:c2:59:
77:f4:eb:32:0a:22:e6:02:6e:17:73:9a:0f:14:cc:
23:b3:c8:ea:9f:f8:34:df:21:dc:c5:cc:b4:e9:a0:
ed:ca:3b:96:54:e5:4c:26:b2:e6:25:c4:af:53:42:
b8:3f:d6:4b:82:a9:d8:3c:b1:e0:f5:48:0a:77:00:
a3:b6:eb:5f:9b:8a:07:15:9e:20:e2:b5:32:37:bc:
72:8c:49:bb:93:11:77:9f:d4:71:b8:9f:61:1c:cd:
8c:0a:58:4d:0e:c6:e5:d3:c7:0e:d2:7f:c6:ce:14:
1b:75:21:bc:78:a8:f4:91:03:90:d3:17:7a:be:84:
b4:97:ee:b6:57:fd:6f:88:de:b9:25:e0:41:2a:42:
99:ae:06:50:be:80:bd:10:5d:8e:cd:6a:f4:55:af:
b0:7e:4a:05:e6:f9:11:51:3e:77:c9:cc:ba:f3:27:
c9:d1:01:4d:9a:49:62:60:14:2c:7a:80:c8:43:8a:
21:76:d7:5b:0e:df:1a:ed:6a:3d:a9:8c:6c:db:f0:
15:bd:09:a7:d0:ec:fa:bf:fd:bd:eb:34:c9:3a:6f:
c5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DF:0B:08:A3:9D:CA:D3:F2:80:71:17:10:CE:0D:18:75:A2:2C:89
X509v3 Authority Key Identifier:
keyid:3F:A1:36:D7:64:3F:DC:0D:3F:B1:D5:34:67:D8:AB:B2:99:B7:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P6E212Q_3A0_sdU0Z9irspm3kXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/655d53-94c5-4a97-88a1-d277a5f3b9e0/1/P6E212Q_3A0_sdU0Z9irspm3kXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:10:f5:66:0b:92:54:bd:e2:16:b2:69:05:fb:f0:89:a9:75:
d9:45:38:5b:c1:e7:8b:a1:3d:4d:5b:5a:14:27:cd:66:c3:d4:
25:74:fc:a2:ba:bb:c4:dd:9f:0e:f5:ff:00:52:03:65:59:8a:
4a:5b:fe:b1:53:60:2c:d2:63:10:e2:d4:01:4f:bf:68:3d:ab:
28:e3:ec:9f:df:ab:5c:ce:50:42:54:ae:ae:d0:f6:d4:6d:1c:
77:5f:7d:1a:6c:07:7a:14:1b:fa:38:b0:6d:84:88:b1:f8:c4:
0b:f1:db:78:c9:3b:98:80:a8:ba:da:84:5d:6d:af:1e:b0:d0:
7d:31:65:08:02:16:2e:d1:1c:17:0f:19:5a:28:d0:cf:e3:c6:
7c:5b:74:7e:93:07:22:f5:3e:55:ed:3f:2b:77:95:70:75:40:
76:47:46:74:47:c9:60:b7:0c:7c:87:fe:9b:89:ed:80:db:7d:
03:a9:d6:71:40:23:a2:59:41:50:e6:a8:0f:01:b2:e0:4c:7f:
49:e1:e8:b1:08:b5:92:18:90:75:ef:a2:13:30:07:c0:93:76:
ca:7d:70:0e:6a:08:69:fd:1d:f8:53:eb:01:3c:d4:98:9e:4d:
05:5e:3d:fa:93:3a:c7:a6:ba:0b:d5:66:12:84:ee:61:4a:d1:
64:c1:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:49 2025 by rpki-client