Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: Q75YExaq/Y2sBpL36ySfJTh7zUmOJbc4YqshXvmJvmU=
Subject key identifier: 59:62:F0:E9:F7:E0:51:A2:A4:7B:02:36:07:A6:B0:A1:B5:B6:1E:85
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 019590AB70414E2205A06C6E5FA9591C3BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 058F
Signing time: Thu 13 Mar 2025 18:01:49 +0000
Manifest this update: Thu 13 Mar 2025 18:01:49 +0000
Manifest next update: Fri 14 Mar 2025 18:01:49 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: suBL5SwoW2HUk/oa1jlr9VHzQhd3hLpchG3fRe+k5ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:ab:70:41:4e:22:05:a0:6c:6e:5f:a9:59:1c:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Mar 13 18:01:49 2025 GMT
Not After : Mar 14 18:01:49 2025 GMT
Subject: CN=5962f0e9f7e051a2a47b023607a6b0a1b5b61e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5c:f9:e1:78:e9:2b:d1:7b:1d:23:dd:b7:b8:
4c:eb:d5:45:74:02:09:4a:4c:42:94:c2:25:a4:da:
7f:1f:f7:0b:73:fd:1d:06:21:05:e4:67:ad:a3:95:
dd:a3:b9:6c:c8:0a:db:47:d2:78:30:15:31:88:4d:
a5:75:ca:8c:22:12:9c:c6:38:e9:b8:ac:fa:ea:ce:
14:2f:f4:9a:40:ee:41:ce:10:1d:22:47:5b:22:6e:
e5:b4:71:87:f6:7a:fe:a4:2f:58:a6:0b:21:d5:e5:
14:5a:90:0c:cc:68:01:60:d8:0e:5e:ce:b7:0e:58:
1b:16:c6:2b:c5:95:da:9d:14:e8:b8:cc:50:aa:43:
6a:85:c4:e4:c8:1b:ae:d3:91:40:c4:54:fd:16:2c:
b5:72:d7:56:0c:fd:d7:f5:ab:2d:5d:10:8a:0d:7d:
07:e9:df:77:4d:b0:da:a1:bd:f0:2f:bb:6d:96:fd:
69:6c:95:e2:2c:e9:ce:c2:f7:f6:0d:89:b5:f9:21:
45:8e:11:db:82:75:f4:02:32:6d:72:f8:11:57:b7:
6f:16:5a:56:f6:1d:5d:bb:c9:94:3c:da:dc:80:eb:
62:90:47:d4:dc:df:50:1c:ed:5e:15:e2:39:c9:bc:
f8:bc:e0:f4:76:8f:1e:81:28:37:2a:96:61:54:2e:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:62:F0:E9:F7:E0:51:A2:A4:7B:02:36:07:A6:B0:A1:B5:B6:1E:85
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:44:4a:9a:2d:28:53:86:47:4b:7f:05:7a:b0:78:fb:79:
05:5f:9b:5a:82:9f:58:59:e6:f4:2d:3e:ee:23:30:f2:46:5d:
5d:7f:cc:bf:7c:11:0d:0a:30:34:dd:2a:65:57:6c:91:52:8f:
2c:f2:36:d5:e3:15:33:89:c1:45:f9:14:0c:66:ce:03:89:53:
1c:c6:b0:56:23:d0:44:43:f8:28:23:63:4e:20:e1:68:61:c2:
56:ba:2c:4b:78:ef:cd:bb:cd:3c:0d:b7:91:9f:8d:10:94:81:
49:d5:30:cf:3e:42:13:ca:b8:58:13:1e:c0:ed:df:5c:b6:14:
cc:3b:74:bb:f0:fe:56:ff:cf:62:df:b1:99:8b:96:c7:7d:9c:
4f:b2:f7:39:c4:10:15:ea:6e:aa:56:fb:5b:18:08:a4:f7:64:
40:e4:41:e6:54:9d:7f:2e:58:6e:08:b1:82:91:03:ea:79:3e:
8f:45:aa:79:7b:ff:b5:d4:98:b2:db:7a:54:15:d4:21:65:bc:
1e:bc:9c:75:ac:2b:11:e4:d1:d2:e3:2a:b0:13:99:78:33:a5:
4d:6f:40:11:a9:e1:29:cb:2b:e3:4b:13:10:24:81:33:b2:79:
81:fe:aa:b6:3e:32:9e:c0:ff:d8:64:3e:92:21:c4:e3:b6:77:
61:fc:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:59 2025 by rpki-client