Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
File: P5YkCZj85BJMPLTfusuw7RYYQFo.mft (raw, json)
Hash identifier: 2sW/G4mzGUbkEUx0xkK801I59bjvAWVHcGbXfUl6L5k=
Subject key identifier: 80:5E:F4:58:AA:03:9D:C0:83:05:BA:3D:32:BA:F1:3B:73:B4:44:E5
Authority key identifier: 3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
Certificate issuer: /CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Certificate serial: 01958F982AAC5610E7B9CB1CBAA9B0E5F114
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
Manifest number: 149A
Signing time: Thu 13 Mar 2025 13:01:08 +0000
Manifest this update: Thu 13 Mar 2025 13:01:08 +0000
Manifest next update: Fri 14 Mar 2025 13:01:08 +0000
Files and hashes: 1: P5YkCZj85BJMPLTfusuw7RYYQFo.crl (hash: UPmEA5ZjRxO7OaQzE8DVqx+MJMo9rdAz3siWGtBQRZI=)
2: UXaxt-b39pINfZ1Y1ojLfS7SwMw.roa (hash: IC6xINcQpVjUgVum+7114aRM3S8XEivwvk3gYzMafvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:2a:ac:56:10:e7:b9:cb:1c:ba:a9:b0:e5:f1:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f96240998fce4124c3cb4dfbacbb0ed1618405a
Validity
Not Before: Mar 13 13:01:08 2025 GMT
Not After : Mar 14 13:01:08 2025 GMT
Subject: CN=805ef458aa039dc08305ba3d32baf13b73b444e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:9a:d7:55:a4:ba:78:e0:ea:af:14:fb:59:
dd:59:36:3f:59:4f:0e:d7:11:f4:a9:d6:02:1b:ae:
fe:43:1f:c2:da:58:17:f4:52:f2:93:24:1b:d3:8d:
d4:92:53:be:12:85:6f:1d:10:67:81:26:6e:f1:54:
07:10:49:96:d8:34:7b:83:79:e4:9f:0b:71:cf:ae:
5d:e3:c0:90:fa:25:24:f4:03:f2:b8:1e:7a:a8:f8:
44:9b:5a:67:c2:3e:8e:98:c4:2a:e9:7b:2c:62:ce:
c7:d7:db:e7:c4:97:63:ee:4d:82:74:41:ac:14:34:
84:84:0f:32:f6:65:0b:a8:c1:77:fb:2a:08:fe:8b:
17:85:0f:c7:23:03:a6:40:2c:67:96:f8:6d:8e:05:
0f:c0:2e:53:ee:67:f7:8c:63:7d:24:ce:1b:2c:96:
31:e2:8b:0f:c8:f7:98:87:e1:65:43:d2:47:0d:b2:
0b:b1:cf:d4:2b:67:6f:74:25:d3:8b:7e:08:63:c5:
59:78:e0:50:1b:a9:30:d4:2c:a7:3e:7e:28:09:ac:
5b:af:b2:42:1f:f6:15:1e:ca:8d:30:b7:3f:e6:d2:
6c:3c:cd:39:ad:4f:57:92:8f:2d:ea:fc:c4:32:9f:
f1:48:96:17:08:d9:a7:2a:ab:d7:f5:07:9d:6f:de:
51:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5E:F4:58:AA:03:9D:C0:83:05:BA:3D:32:BA:F1:3B:73:B4:44:E5
X509v3 Authority Key Identifier:
keyid:3F:96:24:09:98:FC:E4:12:4C:3C:B4:DF:BA:CB:B0:ED:16:18:40:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P5YkCZj85BJMPLTfusuw7RYYQFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/60fec7-0b51-4446-9b5d-c741c27b4e22/1/P5YkCZj85BJMPLTfusuw7RYYQFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:fa:c8:8d:be:a0:f0:67:f1:ca:53:dc:36:89:c9:d8:6c:01:
8d:8c:61:e9:0f:26:2d:34:f5:eb:da:66:11:63:09:33:b9:92:
5f:31:ff:cb:d3:0b:ff:e6:b4:04:84:0d:86:39:f6:81:24:9f:
a5:da:3f:4c:c1:87:a3:fb:d3:d2:22:76:8a:a6:11:4a:c5:f5:
fb:23:b3:4d:f0:d4:74:a5:8a:b1:71:07:47:a7:03:e5:9f:84:
bb:24:09:5b:04:55:ec:b5:2e:41:d7:40:80:60:d1:46:38:16:
58:b0:04:f1:7d:b5:38:e0:54:97:a6:e5:78:f8:38:9d:f2:ed:
4b:e9:f5:1f:94:f6:28:f5:15:0b:6a:b4:83:7e:cc:ec:14:c9:
8c:77:d5:b9:bb:3f:a6:df:98:74:b4:c7:2c:1f:8f:c7:6f:ad:
ce:da:42:0c:dd:a7:a8:15:aa:1c:1b:b6:6f:95:5b:4b:19:3a:
d5:44:13:83:67:e2:45:24:b4:d7:fd:b3:32:0e:ef:a3:7b:0d:
c3:b5:41:aa:c8:a0:6e:d6:8d:bf:5c:70:83:57:ab:2a:a5:15:
be:85:86:98:a2:79:79:f7:ca:4a:b7:96:81:41:84:18:24:04:
c3:40:55:c3:ce:40:2c:30:f2:26:1a:a1:0a:bb:1b:c4:7d:c0:
ff:c3:2f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:45 2025 by rpki-client