Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: dTl+JwqU07rx0mpmLCcF5suzx4PxxEkfMJ0uRNP5hEA=
Subject key identifier: A1:32:E8:EF:3E:A2:6F:C8:38:22:5B:D2:74:F0:91:54:6A:3F:14:5B
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 01974BC492F32B1D9F874AEC303743929AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 0969
Signing time: Sat 07 Jun 2025 19:01:03 +0000
Manifest this update: Sat 07 Jun 2025 19:01:03 +0000
Manifest next update: Sun 08 Jun 2025 19:01:03 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: t1YtOkhT7IIs66XB0QW55vSwdtue0sAGypdc30r6JxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:92:f3:2b:1d:9f:87:4a:ec:30:37:43:92:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Jun 7 19:01:03 2025 GMT
Not After : Jun 8 19:01:03 2025 GMT
Subject: CN=a132e8ef3ea26fc838225bd274f091546a3f145b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:10:1e:f8:41:81:37:f0:7e:d9:d8:bb:84:
95:96:f5:81:3d:72:0a:0a:61:7c:4f:48:7a:21:55:
44:0b:29:99:da:57:04:3e:ca:6f:2f:60:e5:dd:38:
cf:03:d9:79:a8:64:f6:71:c8:77:60:22:73:1b:52:
cc:ad:5d:c2:21:32:2f:40:52:35:23:2b:39:38:f7:
0e:cb:9f:40:68:44:70:7d:da:e9:79:c0:de:48:f2:
ee:10:29:c5:e9:b1:19:46:9e:b2:23:92:6c:a5:37:
4b:70:b5:e9:e1:fc:ae:c6:7a:97:56:29:8c:48:3f:
b8:cb:62:d7:57:f5:29:7a:54:e6:0d:3e:72:3b:b1:
30:37:6a:be:d1:e0:64:f7:82:f4:8f:b0:d5:ad:f5:
28:b0:2a:df:da:8c:c0:a6:c7:22:1c:c3:5c:f7:36:
59:b1:f9:e0:7d:94:6f:ba:3a:0d:23:c2:7b:22:1d:
04:b8:43:ac:3a:de:92:04:21:a6:5e:d7:05:ab:70:
4e:e1:32:7e:bf:07:8a:54:be:fb:f4:83:d3:0f:6c:
c1:b2:08:a6:e1:33:a5:1d:14:08:6e:35:81:83:bc:
58:08:ab:71:66:6f:4d:5f:a0:98:c4:c3:da:7c:a3:
c2:3b:72:43:e9:56:8d:d5:ca:3d:41:12:34:ed:22:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:32:E8:EF:3E:A2:6F:C8:38:22:5B:D2:74:F0:91:54:6A:3F:14:5B
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3d:54:dc:a8:d3:d2:88:b3:58:67:c8:f7:26:1a:25:41:28:
ce:1a:32:49:96:50:8f:cd:78:ec:ad:4e:5c:da:9a:59:ac:94:
f9:47:53:4f:9f:aa:96:c7:4c:44:8d:ba:df:1c:15:d8:6d:b7:
85:bf:8d:87:47:09:76:41:62:97:6d:39:9e:ce:eb:72:51:5e:
dc:d3:8a:f7:c6:27:90:71:d4:bc:12:17:08:6f:6e:45:12:cb:
3e:08:ef:df:fe:08:6d:0b:a0:30:48:2b:4a:9f:86:dc:ad:e3:
60:39:85:36:54:74:37:b6:18:61:3f:8c:a4:c4:70:aa:1f:79:
5b:ed:c5:51:e0:84:c9:b5:45:84:e5:42:d2:3d:6f:d3:a9:51:
b8:94:8a:42:16:12:26:d2:af:41:1c:5c:db:6e:c5:02:0b:59:
93:8d:54:67:77:7f:f8:3c:8d:93:3e:e3:7f:77:b1:ca:06:71:
7a:6c:49:f6:00:c7:bd:6e:0b:7d:ca:03:62:30:7e:87:31:c6:
70:94:76:3d:cc:16:01:15:7c:5a:db:d6:0d:23:75:1a:b6:a5:
a5:82:4c:93:3e:b6:d1:42:28:21:c9:cd:ce:ff:9e:68:67:bc:
4e:9e:a7:07:e3:d9:02:7c:76:ea:4c:9f:67:af:52:bf:fd:28:
93:79:3b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:07 2025 by rpki-client