Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: u0LcurG+tNRrHvUdqKepKjWgWYBTyup2T3rYcaTpdcM=
Subject key identifier: B5:FA:9E:A2:EB:C8:16:E6:04:78:47:41:B1:54:7D:9F:55:E9:0C:72
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019655A646A85AC30031093D8276556BCFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 04E5
Signing time: Mon 21 Apr 2025 00:01:22 +0000
Manifest this update: Mon 21 Apr 2025 00:01:22 +0000
Manifest next update: Tue 22 Apr 2025 00:01:22 +0000
Files and hashes: 1: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: 8TbHRLxHn+gSwaRgD872UwzyXgtZLzrWDnwjLCR9/to=)
2: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (hash: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:46:a8:5a:c3:00:31:09:3d:82:76:55:6b:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Apr 21 00:01:22 2025 GMT
Not After : Apr 22 00:01:22 2025 GMT
Subject: CN=b5fa9ea2ebc816e604784741b1547d9f55e90c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:ad:f4:3e:65:9b:01:78:01:94:f0:bd:05:
2f:a8:f6:cf:66:bf:61:08:96:1c:66:70:33:0d:dd:
7d:09:7a:da:03:68:d0:58:27:c2:13:d7:e3:4b:27:
8d:24:6e:81:67:dd:00:ad:19:b3:cb:1d:8c:b7:fc:
3a:e7:0f:6d:4c:3d:cf:d3:7f:2a:c1:46:af:f6:09:
30:59:5a:ec:80:58:66:b4:70:17:7d:4f:14:26:5e:
1e:8b:ed:c2:ce:03:81:8d:03:97:57:7f:27:7f:e2:
4d:2f:3e:17:16:42:2b:20:d5:82:06:eb:13:1f:ad:
88:d0:0c:a1:97:cc:10:fc:cc:c9:85:9d:29:52:cb:
34:eb:dc:97:7d:2f:d0:e0:02:94:6f:c0:cc:3b:e0:
1c:f1:5b:bd:99:2e:d6:d7:11:f3:a0:ea:a7:40:4b:
63:c5:94:dd:42:0f:c7:e0:45:e5:3b:05:8a:cf:9f:
fe:44:51:ec:a3:98:d6:6f:68:a5:51:6e:e4:f0:55:
f4:2d:ee:f2:e9:ba:b3:da:44:9c:99:6d:b9:f9:0e:
10:c4:94:bf:43:f1:3a:e1:35:41:8b:9d:6f:ad:78:
63:dc:6c:9c:22:36:2c:27:a4:36:53:2b:b4:e1:33:
30:cf:74:fd:f2:cc:b2:5b:7d:16:8e:dc:f5:69:05:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FA:9E:A2:EB:C8:16:E6:04:78:47:41:B1:54:7D:9F:55:E9:0C:72
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ed:35:d3:b4:9a:fe:3c:d8:b3:c9:3a:80:62:2b:bf:25:f2:
9f:9f:9e:31:f5:5a:8e:87:70:f6:04:51:07:bb:11:93:9f:23:
ad:ab:dd:2a:ef:04:3e:53:0a:fd:5d:59:6c:cd:95:8f:d0:cc:
79:aa:14:0f:d8:3c:9d:82:64:7b:91:ba:e4:f1:c3:07:15:49:
ca:7c:c0:b7:29:ff:83:9e:fc:e4:1b:42:71:e7:b3:c3:49:5b:
28:19:4c:0d:ef:c7:49:ca:a3:39:3e:d4:d8:61:32:f6:92:1d:
fe:8a:e4:71:62:20:c2:e8:24:75:c2:71:cd:13:f8:f5:43:80:
f2:6a:6b:50:b8:a5:c3:84:91:f6:ce:2d:56:02:8c:ec:df:4e:
38:cc:8b:f5:21:75:74:c5:77:41:8d:75:59:63:fe:d2:de:4c:
37:4b:c7:2d:59:5d:5c:04:58:5b:b1:24:98:cb:b8:81:49:7f:
80:39:d2:be:84:2d:d3:9a:58:f1:03:63:0e:ad:7a:2c:82:5a:
f9:a5:be:32:7c:32:9d:5a:df:d0:4e:63:99:0f:fc:29:5d:34:
2f:68:9a:c7:36:7d:ae:77:54:85:b3:04:fa:00:dc:5a:6b:25:
f8:5f:29:e4:cc:04:a9:03:93:0c:24:d8:90:b7:2f:56:bd:2e:
f4:a4:38:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:29:32 2025 by rpki-client