Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File: P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier: bp9KdFojPbPuhs/eApq9t6Rqm4Wr3RMm5l8FJ3lGqnE=
Subject key identifier: 7C:15:B5:2C:F1:13:D8:31:FC:00:BD:FE:A3:76:04:C4:3E:A2:BC:4D
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial: 01975BA573A589B81B12A8464D9D56B72A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number: 150A
Signing time: Tue 10 Jun 2025 21:00:59 +0000
Manifest this update: Tue 10 Jun 2025 21:00:59 +0000
Manifest next update: Wed 11 Jun 2025 21:00:59 +0000
Files and hashes: 1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: DcUjmfr8wi/WwCcPrfK7dOE3Nq4OcgeY64BeFgiuTo4=)
2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a5:73:a5:89:b8:1b:12:a8:46:4d:9d:56:b7:2a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Validity
Not Before: Jun 10 21:00:59 2025 GMT
Not After : Jun 11 21:00:59 2025 GMT
Subject: CN=7c15b52cf113d831fc00bdfea37604c43ea2bc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4d:05:61:5c:b4:86:8d:f8:1d:22:56:51:3a:
15:ca:5b:a0:00:a3:8b:7e:3d:d4:26:45:5c:c0:d1:
b8:c4:ef:2c:e6:59:d0:32:eb:2c:49:d3:37:07:7c:
42:b7:2f:94:77:87:00:61:2c:a3:bf:ae:b2:33:33:
82:b4:1b:99:fa:ba:f0:99:c2:da:eb:b2:8b:84:85:
b3:fe:55:e2:8e:8d:bc:d9:c6:18:a8:cd:a8:17:07:
86:b2:b3:9c:d4:9b:1d:de:54:86:05:cd:97:08:85:
a3:31:d7:7c:31:2e:14:a6:8f:9d:4b:17:3b:26:f3:
b4:cb:6a:82:03:53:7f:b5:f9:d7:5b:28:34:1a:3b:
06:28:15:a5:29:06:0d:70:dd:62:64:a8:dc:02:2b:
46:30:f3:ec:42:d9:a1:fd:e9:6f:1d:1c:38:b3:dd:
6b:db:a7:24:33:59:aa:5a:d3:67:08:f1:66:57:9e:
51:57:aa:a0:7d:10:02:46:99:f5:1c:04:7b:25:ef:
d7:55:6e:10:2a:d4:c2:e3:8b:54:ef:98:44:23:60:
a5:11:ad:81:2d:d7:10:62:a4:8e:de:93:23:55:3e:
35:e8:2d:41:f2:18:54:3b:66:7e:c6:35:d6:cf:91:
c5:02:c1:66:2d:0b:18:6b:28:e8:70:a5:80:d4:e1:
75:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:15:B5:2C:F1:13:D8:31:FC:00:BD:FE:A3:76:04:C4:3E:A2:BC:4D
X509v3 Authority Key Identifier:
keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a9:66:03:eb:59:82:af:a9:cc:1d:10:26:c9:59:97:31:07:
60:2c:18:d6:74:e7:27:cd:ad:df:f7:4f:d6:2d:18:97:f5:10:
1a:3d:e0:95:20:f5:42:c9:56:f1:5c:69:f4:7b:01:d7:f8:e5:
f8:bb:e1:06:70:c3:3e:a0:ea:2a:7d:4f:fc:c2:34:70:4d:0d:
82:16:e1:e7:55:98:9f:91:5c:a1:19:fc:ac:28:2d:88:be:4b:
8b:a4:dd:78:f8:d3:13:b7:59:b3:05:6a:b1:b8:5e:c2:f7:dc:
a3:a2:07:0b:dc:e7:75:56:35:3b:c3:50:f8:16:c0:25:54:1c:
1a:ad:69:42:c7:c5:1c:06:61:10:14:f5:c2:0a:38:53:ac:55:
12:96:9d:73:b6:92:21:ee:7d:46:1e:41:11:8a:20:d2:44:f8:
92:4f:b0:2d:95:f1:24:af:d2:f1:38:e7:f6:50:f7:2b:0a:d0:
97:45:ae:cd:db:04:88:a4:12:2d:2a:45:73:c9:61:8b:09:a2:
9b:ec:8a:3a:cf:8a:7a:de:93:58:24:2c:77:50:1c:ea:0b:3c:
8d:ef:11:3a:27:e0:d5:23:e7:c7:e7:3f:fc:19:37:66:3c:32:
31:db:b9:64:af:08:9d:2f:4b:2f:c2:10:15:d9:58:9f:c4:71:
97:b9:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 05:02:12 2025 by rpki-client