Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
File: P3cnpBMI2bn25j3xsg6LnNgjgSA.mft (raw, json)
Hash identifier: qWXFFL6Qp5uMYypdFiSpY/tsSgpBFyupDFIjL7kY+3o=
Subject key identifier: 02:9B:11:9E:7B:EF:C4:6D:09:F0:44:A7:C5:9C:4A:63:FD:49:37:14
Authority key identifier: 3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
Certificate issuer: /CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Certificate serial: 01974CD6965B6F8E08D8A16DA6CF3A2C6EF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
Manifest number: 0675
Signing time: Sun 08 Jun 2025 00:00:20 +0000
Manifest this update: Sun 08 Jun 2025 00:00:20 +0000
Manifest next update: Mon 09 Jun 2025 00:00:20 +0000
Files and hashes: 1: P3cnpBMI2bn25j3xsg6LnNgjgSA.crl (hash: pJrcBJQAiWx8D2+7FRLk964qm1JnVDEJDVWl6qdV57A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d6:96:5b:6f:8e:08:d8:a1:6d:a6:cf:3a:2c:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f7727a41308d9b9f6e63df1b20e8b9cd8238120
Validity
Not Before: Jun 8 00:00:20 2025 GMT
Not After : Jun 9 00:00:20 2025 GMT
Subject: CN=029b119e7befc46d09f044a7c59c4a63fd493714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:d1:9b:ea:97:dc:26:04:b5:2e:59:09:76:
06:bf:4f:30:90:0b:1a:11:7d:39:07:20:c7:6d:b8:
45:d3:ad:af:43:f1:56:68:85:d0:72:83:f0:b8:7d:
06:05:37:4b:53:3f:27:1a:05:fd:24:0d:70:ae:99:
1f:c5:be:34:d8:dd:e7:4d:66:82:a7:29:94:1c:f4:
4b:0b:4d:ce:71:0c:29:07:d6:32:78:08:e6:c5:a8:
0f:19:da:bb:d7:96:4e:e8:37:66:4a:36:3b:99:1d:
23:9a:3a:0e:76:5d:60:3a:5c:5f:94:9f:6d:c8:ff:
ce:cf:57:c0:9f:57:0c:52:bf:67:a8:6b:5a:3a:ab:
f3:d3:d9:4e:05:24:63:48:e8:ec:46:8d:80:1a:69:
f4:98:9f:5b:fa:37:e0:14:3a:58:d5:d9:e6:74:76:
f6:fa:fc:b8:10:0c:9d:b2:cf:eb:56:fa:5d:fc:91:
29:fe:7c:d3:38:77:e4:5d:27:e4:93:cb:50:bc:34:
c8:e2:8c:4d:4a:16:22:d9:a9:3f:e7:bb:33:3e:3b:
78:dc:41:e1:00:1b:4f:38:f1:d8:9e:bb:a9:63:ae:
50:fa:b1:6b:73:7f:c0:6f:48:df:1c:fd:4e:db:81:
47:9f:8d:0e:55:1a:d4:91:61:d0:5a:91:2b:bb:fb:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9B:11:9E:7B:EF:C4:6D:09:F0:44:A7:C5:9C:4A:63:FD:49:37:14
X509v3 Authority Key Identifier:
keyid:3F:77:27:A4:13:08:D9:B9:F6:E6:3D:F1:B2:0E:8B:9C:D8:23:81:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P3cnpBMI2bn25j3xsg6LnNgjgSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a88f30-6e1c-4c28-b079-97ecc0706bf0/1/P3cnpBMI2bn25j3xsg6LnNgjgSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4a:d3:11:2e:fe:ec:d5:30:1f:46:8b:ca:0a:09:8c:41:1d:
14:2a:02:51:de:de:91:35:54:f5:2e:66:ea:95:f9:66:76:ca:
db:5a:19:38:31:d3:b4:0a:a9:b9:26:3a:a5:86:67:8c:1d:b2:
9e:1c:7f:fc:d6:ae:7d:1c:07:7d:61:91:16:27:56:a3:50:af:
8d:93:cd:90:40:13:0e:5d:ae:60:9a:5b:95:6b:cc:53:8b:0c:
83:5c:d9:48:ad:f8:fe:b7:54:fd:9b:6e:16:9e:d5:7b:f0:f9:
72:88:84:89:b1:75:b9:13:23:07:dc:c9:9f:d9:05:3f:ac:3c:
64:87:5a:8f:53:ed:7f:d3:ae:82:ee:8a:43:d5:64:97:f3:33:
fd:6e:40:59:a5:41:00:88:58:cd:44:88:5b:1f:b8:f4:b2:f3:
5a:60:a9:d3:7c:71:4e:c2:f3:a9:50:b3:d7:27:8f:61:30:d5:
7b:62:2a:2f:e6:23:aa:98:d9:8f:44:15:a8:4f:4f:00:8d:39:
94:81:24:99:ba:40:e3:a2:2e:c5:7d:2d:1d:cd:2f:7c:b7:60:
d8:e7:c3:e8:2e:0e:3c:8f:b0:69:7a:33:5c:74:ff:ae:61:4c:
29:9a:96:cb:2b:f9:fe:f1:d9:50:64:a4:ce:37:eb:e4:27:2b:
a2:35:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:17:03 2025 by rpki-client