Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: wX6hTZ6rqqbHbg8MU86jrJ1/TLnY5hjwcOCS8lz2zIE=
Subject key identifier: 84:D7:52:E2:99:D7:F4:46:27:28:C0:9B:DD:31:CF:79:89:A4:E3:AA
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 0197635F3ED4B6733943802AE4ABA5CFEC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 150E
Signing time: Thu 12 Jun 2025 09:01:15 +0000
Manifest this update: Thu 12 Jun 2025 09:01:15 +0000
Manifest next update: Fri 13 Jun 2025 09:01:15 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: Nwz7tClM23ba1JS98j6BuVK6T/P+HZ/JnYMwexJHrOc=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:5f:3e:d4:b6:73:39:43:80:2a:e4:ab:a5:cf:ec:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Jun 12 09:01:15 2025 GMT
Not After : Jun 13 09:01:15 2025 GMT
Subject: CN=84d752e299d7f4462728c09bdd31cf7989a4e3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9f:18:92:42:62:a0:00:c5:c8:34:f1:15:85:
ed:64:52:b6:b0:e3:a2:ce:31:cc:09:0f:d5:aa:fe:
46:93:5a:04:31:69:7c:a8:a3:c3:ee:c4:5c:52:73:
9e:8f:89:2f:23:c1:64:a0:03:4c:a0:b2:8c:cb:15:
59:71:42:c3:76:86:94:12:54:ba:21:28:f4:dd:69:
2c:c6:0c:f2:70:57:fe:64:9b:76:07:1c:4e:34:18:
1d:92:58:2e:d3:27:74:e7:c5:76:1d:c6:4c:29:5d:
88:83:5d:95:32:b3:a8:f1:7d:4b:42:22:19:8e:63:
a0:a2:45:d1:90:11:cb:94:87:b5:3d:b7:83:b4:8c:
1c:a5:c7:75:69:08:1a:7d:69:5c:3d:38:35:86:43:
d8:c6:2c:a9:fe:43:e3:d3:cf:12:da:37:65:79:a5:
99:1c:53:68:7b:25:01:d9:7b:52:fb:d2:22:23:a6:
1b:a5:78:d3:ee:f3:fb:93:f1:2a:16:ce:b1:88:06:
f4:1b:48:c7:98:e4:05:c3:a2:34:ed:9f:b1:f8:36:
92:a9:0f:24:d7:7f:9d:45:3a:ee:f2:bf:7a:2a:d6:
18:97:66:c2:58:cc:70:5b:ea:8a:dd:d1:fd:de:56:
71:36:c2:6a:e7:27:91:f5:de:6c:5a:76:96:dc:63:
65:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D7:52:E2:99:D7:F4:46:27:28:C0:9B:DD:31:CF:79:89:A4:E3:AA
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d9:9a:09:14:7b:06:f6:fd:25:c4:fb:06:db:34:84:0c:29:
90:aa:fa:e0:2c:48:0a:2a:4c:fd:75:f6:f5:85:df:91:b5:b8:
e9:42:66:12:21:75:73:86:31:8d:a1:02:94:1c:d0:ae:a4:14:
69:45:7b:48:72:ff:13:21:80:16:20:68:8f:12:89:0d:0e:77:
e1:64:ce:b9:7d:d8:67:f2:04:a7:ff:7f:6e:6e:9a:eb:77:88:
e4:6a:56:86:b9:ec:41:fb:43:d4:05:24:8b:af:8d:73:bb:75:
18:65:05:2d:29:6d:9c:c9:88:ce:4d:a2:2f:e6:70:3b:54:de:
ed:d0:94:c0:f9:33:5f:4a:41:96:e0:1f:2d:d1:4f:3f:59:ff:
08:bb:aa:7c:65:0c:aa:26:a2:d2:1f:32:d1:da:17:7b:d4:89:
5a:5c:ed:df:b4:3f:7d:e9:41:3c:6d:f6:50:95:33:27:1b:37:
bc:f6:48:75:84:bc:6f:f6:58:7c:40:65:d4:2e:ef:75:a1:06:
0d:6b:be:28:ba:3c:f3:ed:00:4e:65:6d:2f:b3:e2:e2:aa:02:
33:18:e5:21:86:d6:6b:34:e8:22:50:d4:bc:aa:81:17:2c:62:
77:bb:f8:85:ab:d9:e7:06:9b:cd:e7:70:a0:3e:23:53:99:4c:
7b:19:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 12:41:20 2025 by rpki-client