Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: /nGlKF8KztPUDzo7NOXotQvb+ATL2+Y9cmzcnx7PdSo=
Subject key identifier: 98:E6:AF:9D:33:C0:CB:05:7D:A0:22:71:7C:4D:CB:5C:32:07:72:EF
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 0195113535A8B05D43639A10084B77B2D560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 054D
Signing time: Mon 17 Feb 2025 00:00:54 +0000
Manifest this update: Mon 17 Feb 2025 00:00:54 +0000
Manifest next update: Tue 18 Feb 2025 00:00:54 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: CR6jerWwgl2VnRW3RwHesXyKK7p1bPluk5XAAlXtMVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:35:a8:b0:5d:43:63:9a:10:08:4b:77:b2:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Feb 17 00:00:54 2025 GMT
Not After : Feb 18 00:00:54 2025 GMT
Subject: CN=98e6af9d33c0cb057da022717c4dcb5c320772ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:68:00:c3:21:3b:50:9f:f9:e7:f6:a8:c0:
c0:b5:5a:0d:c9:5d:3a:69:ac:40:17:be:cc:b2:a2:
d8:77:75:31:b5:c7:5e:02:7a:e7:3d:3c:79:9e:cf:
2e:70:a2:cd:a3:19:67:4f:ed:ea:6c:9a:57:a3:80:
f7:b9:b0:50:66:02:91:da:eb:6c:77:0a:02:6e:eb:
2b:ea:9c:c4:91:03:22:ca:5d:ed:2e:4f:64:0f:2a:
08:e1:b1:17:e0:21:bf:9c:4e:7c:dc:82:af:59:3c:
c7:c0:b2:fa:b5:87:3e:bb:e4:5d:29:41:14:dc:14:
9c:4f:f3:1d:fa:ab:4d:8f:e0:42:b7:57:a8:2a:a2:
75:73:fb:22:3c:41:70:b1:71:1e:ec:6b:ef:36:64:
73:21:10:17:c1:b6:94:dc:40:ab:90:4e:03:6d:c4:
5a:2d:c1:1c:92:fa:af:de:bc:ce:57:a3:38:8b:ef:
cb:93:e7:d2:4d:99:e9:7c:37:2c:16:8a:e8:7b:24:
c2:c6:6c:db:91:95:73:09:16:19:59:62:7c:75:ae:
6e:2e:9c:61:88:8e:e9:ed:24:d0:3f:c9:a4:f7:f9:
90:c2:e8:3e:cb:0a:c4:55:cb:96:82:53:2b:3f:5b:
76:4c:ce:47:e7:19:52:be:c7:81:13:0a:c7:d5:e6:
41:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:AF:9D:33:C0:CB:05:7D:A0:22:71:7C:4D:CB:5C:32:07:72:EF
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6a:43:fa:41:d4:32:09:a3:79:b2:2f:6e:c8:bd:ca:b5:03:
01:43:1e:2d:40:cb:19:01:a6:cf:ea:9c:2e:5d:ed:94:fe:55:
8f:4e:d6:1f:9b:55:e9:e9:68:b4:09:69:d5:10:34:19:cb:9d:
24:45:c0:3a:5c:18:09:7c:69:21:f8:80:c4:be:15:02:92:48:
26:92:7c:86:01:28:e5:97:e2:ad:95:42:51:c7:e2:19:63:b3:
cc:5e:b7:cf:24:09:fd:92:b3:1e:1d:9e:d8:75:5e:7b:50:74:
f9:04:1d:93:b8:ef:30:67:d5:da:05:12:19:72:63:eb:57:fe:
d6:6d:93:33:d5:44:0f:3a:d5:90:ec:03:53:57:1a:f0:52:bd:
a6:34:39:df:60:82:a4:d8:6b:f5:24:5c:f3:5e:c3:1e:c3:9a:
fd:34:0e:01:35:7d:e0:39:07:bc:99:28:ea:f1:96:c3:d2:a8:
ed:68:dd:2c:bd:71:61:7f:a6:77:bc:2a:f8:d9:49:8d:d7:6a:
8e:bc:40:94:ac:62:d4:44:6b:7e:f1:c9:16:33:31:5f:48:34:
df:c9:96:d8:30:87:50:a3:8d:c6:72:41:a6:87:1a:76:5c:f4:
3b:b4:81:97:40:c0:f9:d3:81:9e:a1:a4:3e:68:3c:d6:1f:e1:
c1:d4:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:14 2025 by rpki-client