Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.mft (raw, json)
Hash identifier: SlT/UKtuAwCnhRmXx6tac2iOsVCtsAS3Kw74hrQgvGg=
Subject key identifier: 82:35:90:0E:35:26:7A:52:40:8A:24:39:18:2B:2F:5C:A6:B4:4A:55
Authority key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Certificate issuer: /CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Certificate serial: 019652A515EF3FB2356DB03AC39522BB9AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
Manifest number: 08E8
Signing time: Sun 20 Apr 2025 10:01:12 +0000
Manifest this update: Sun 20 Apr 2025 10:01:12 +0000
Manifest next update: Mon 21 Apr 2025 10:01:12 +0000
Files and hashes: 1: P4_xyWZv4ZXySqH-jDRdecSOe8A.crl (hash: bso6ceSFjURWlpDu8qoPc99+vfQhf65mu3R3Z+zcGkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:15:ef:3f:b2:35:6d:b0:3a:c3:95:22:bb:9a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Validity
Not Before: Apr 20 10:01:12 2025 GMT
Not After : Apr 21 10:01:12 2025 GMT
Subject: CN=8235900e35267a52408a2439182b2f5ca6b44a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:f8:36:90:d6:6b:38:46:1c:f7:0c:93:2d:
d7:14:97:16:f1:22:b2:55:14:08:e6:59:aa:82:01:
f2:32:03:5c:74:d6:43:74:a0:42:5f:80:fe:fc:83:
3d:ac:18:01:db:96:a4:ff:11:a9:63:0d:a9:28:ee:
b8:58:0a:8c:f2:45:c7:84:73:97:6e:58:6d:45:b3:
7b:97:2e:ca:87:c0:88:ae:c3:b4:3a:21:3b:5b:38:
af:0a:32:66:59:bd:98:fd:b1:cf:27:e2:a3:4a:9a:
9c:d3:b9:2a:e3:12:b9:af:e4:74:8f:74:09:2c:4d:
7e:46:dc:10:c3:e8:a7:21:69:2d:81:e4:ea:8d:3c:
a5:75:09:c4:10:4c:f5:40:c9:e6:7d:dd:d4:10:89:
e8:4f:9b:d6:f8:35:34:f2:b1:c6:0d:84:a1:b6:11:
45:d5:80:ea:99:71:4a:32:a0:42:44:49:63:29:21:
26:40:4b:01:5b:88:e0:e6:b8:64:16:fc:6c:47:b8:
97:e0:6f:37:64:ce:33:5f:d2:9d:59:ff:d5:f0:8c:
af:16:7b:e3:bb:db:f4:28:c2:1c:d3:23:2c:f1:b7:
21:aa:06:28:75:81:bc:75:17:3e:f2:3d:5a:aa:40:
79:b8:6c:e2:cc:2e:53:7b:7f:64:51:08:b1:78:03:
68:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:35:90:0E:35:26:7A:52:40:8A:24:39:18:2B:2F:5C:A6:B4:4A:55
X509v3 Authority Key Identifier:
keyid:3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ad:88:0f:20:6a:0a:e6:70:b4:9e:87:80:ec:9d:23:45:0f:
e8:f0:49:d9:92:97:1b:8b:75:46:cb:13:2c:77:7c:19:e0:16:
bf:1d:79:7c:bb:aa:f4:6c:e5:06:2d:99:d5:08:7f:cb:04:52:
ba:34:b2:63:e0:85:bb:25:2f:43:d8:99:2e:11:58:7f:aa:00:
22:23:f4:cb:c1:d6:38:ec:30:7d:65:52:59:40:b9:cf:14:a5:
08:0d:90:aa:bf:fe:5c:45:0e:5f:53:a7:e1:6b:e0:9d:08:57:
2b:91:b5:6b:aa:e8:bf:ba:8a:9c:ef:df:cd:40:3b:7f:71:98:
76:c7:b3:13:a5:55:d7:35:fa:3b:93:a6:ef:b3:ea:f1:92:e7:
3c:0c:dd:f0:2c:ce:6e:10:73:75:95:d5:78:f8:8a:be:ea:f9:
a5:8c:3a:07:cb:32:f2:55:5e:ab:56:22:b1:9b:0b:41:9f:63:
df:d3:01:2b:00:af:f7:65:f9:2f:78:15:e7:d0:f2:ca:22:eb:
2f:cb:0d:85:23:83:3c:fd:2a:c8:e3:e8:3d:71:74:30:d3:98:
b4:a9:cf:99:9b:ab:67:2a:a2:3e:f4:ec:ce:11:1e:6d:07:95:
79:4c:3c:07:d3:61:e0:99:50:cb:ce:e6:56:f3:4b:6c:9e:d2:
8e:8d:58:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:29 2025 by rpki-client