Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: 1V5DJT0dJth9SLQk91vW86hGG/zxVoIWpWVougoIUK0=
Subject key identifier: B7:F3:A5:9D:A3:8F:D7:1F:ED:8A:B9:EC:3E:8D:10:9A:AD:37:2E:37
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 01976170AEE0E585842B9ADC0D8FCDD55040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 150D
Signing time: Thu 12 Jun 2025 00:01:04 +0000
Manifest this update: Thu 12 Jun 2025 00:01:04 +0000
Manifest next update: Fri 13 Jun 2025 00:01:04 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: KxTVO8km0oekryQLvzXqRW+3J5qfwEStDc/hMNQ+Y5c=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:ae:e0:e5:85:84:2b:9a:dc:0d:8f:cd:d5:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Jun 12 00:01:04 2025 GMT
Not After : Jun 13 00:01:04 2025 GMT
Subject: CN=b7f3a59da38fd71fed8ab9ec3e8d109aad372e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:4e:f1:fe:9b:4e:2f:1b:92:b0:5f:7c:3d:
83:0c:07:6a:41:01:38:79:e6:76:09:0a:f9:a7:40:
ea:f4:0b:c9:af:25:b3:90:de:97:18:05:c2:48:f7:
ac:c9:52:f4:9f:31:a6:6c:16:3f:34:a7:23:b7:e2:
bf:c3:58:ad:33:aa:23:72:f8:6d:06:43:b5:f4:98:
ae:41:d6:89:50:3d:fc:2b:d8:69:23:96:19:d6:92:
18:cf:0e:9d:1d:8c:02:75:f1:76:7f:e1:21:f0:6f:
38:1a:a9:c1:75:98:7f:4f:e6:1e:c6:92:13:cc:6e:
af:4f:3a:7d:03:7d:22:cb:75:b6:2c:74:01:60:de:
cf:b0:1d:9f:c9:20:d1:d7:fe:0d:38:6f:be:ac:06:
a2:cc:0b:f9:38:d6:9f:91:69:51:a6:d6:53:1c:ef:
ed:b2:4b:d1:b1:84:17:0b:e8:2a:df:43:c3:84:12:
14:c6:9c:80:34:36:fb:72:e3:18:05:54:9f:a9:be:
33:1a:b1:03:f2:b5:bc:f0:9b:d0:e2:54:13:93:3e:
f5:4f:d7:51:ae:19:19:4d:3e:45:99:0c:94:98:87:
8b:84:db:d0:91:e4:e8:00:91:76:bf:cb:79:3c:6e:
0a:b9:c1:65:2f:d1:6e:44:fc:e0:b1:1a:3b:36:a8:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F3:A5:9D:A3:8F:D7:1F:ED:8A:B9:EC:3E:8D:10:9A:AD:37:2E:37
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:55:a7:9b:f8:5f:cd:c3:15:3d:79:dc:85:68:ee:47:01:
31:c2:81:d9:f6:cd:4b:50:2f:2d:ec:6b:04:1a:48:91:9d:40:
1a:c8:e5:9c:b0:d5:9a:b6:bc:2e:4d:72:76:43:cb:00:b3:25:
1f:d5:bc:14:48:88:94:1e:56:b5:2c:d7:00:ec:7d:9f:a9:07:
ea:94:37:36:59:e7:3b:bc:9f:4b:b6:14:ee:86:bc:31:1f:da:
13:26:20:93:a2:c3:87:ba:2b:25:04:a9:95:f0:77:48:ac:6e:
c2:60:5a:3c:0a:95:6f:ac:81:b6:20:1b:2a:f5:e2:e7:e6:88:
2a:6f:db:b1:d9:a4:b6:26:48:29:dc:f0:eb:1d:63:ae:f8:e3:
15:9f:03:90:eb:3b:7b:cd:42:23:a3:48:28:f8:bf:0b:68:84:
00:7d:17:95:8a:de:d8:8f:93:89:5c:17:bf:79:16:f3:92:52:
f4:d9:44:80:cb:dd:85:2e:29:b2:be:f8:c9:42:83:a8:50:94:
98:e1:77:9a:08:cd:b7:f8:8c:12:a0:0b:b6:78:74:c6:8a:b6:
1e:55:39:48:a6:91:20:fd:eb:a2:26:f8:f8:20:ea:a1:60:e4:
64:a4:a1:42:2c:85:4f:7c:ac:3d:16:6c:40:ab:d9:b7:a0:78:
90:0a:41:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:04:23 2025 by rpki-client