
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: 8nehfsOOsTviD+lQfW40no0BnbHtdAQAGkNx2iFLu9I=
Subject key identifier: B5:32:78:6F:9B:4D:81:2D:FE:41:6F:1C:BE:D7:09:0D:18:74:56:78
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 0196CE062E94687105B4821EBE296D8E2624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0ED8
Signing time: Wed 14 May 2025 09:00:33 +0000
Manifest this update: Wed 14 May 2025 09:00:33 +0000
Manifest next update: Thu 15 May 2025 09:00:33 +0000
Files and hashes: 1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: 1TxDf+pTo4ScrrDNLisO4rdwvbImJ+i5KfvApy90fnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:2e:94:68:71:05:b4:82:1e:be:29:6d:8e:26:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: May 14 09:00:33 2025 GMT
Not After : May 15 09:00:33 2025 GMT
Subject: CN=b532786f9b4d812dfe416f1cbed7090d18745678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:1f:21:a2:53:dc:93:35:0d:1c:9e:19:62:
61:94:00:75:5f:46:cf:30:0d:84:4a:81:0a:04:7f:
60:2b:d7:7b:4c:e2:32:7d:90:79:6c:47:58:a3:d1:
49:82:d3:59:a3:7b:be:78:02:f9:2b:c4:53:56:d4:
4e:4d:b1:c5:30:f8:69:2d:00:8d:1f:d9:51:80:cb:
3b:df:c2:f5:7b:c1:0e:28:5e:a1:28:24:5b:3f:8e:
fc:a8:8a:55:16:e4:92:57:42:29:8c:ef:d0:e2:0f:
0b:90:d0:cf:f1:da:57:81:f4:cd:9e:82:d7:29:42:
52:c7:21:a9:ff:fe:54:69:27:7c:93:01:90:6f:3d:
7f:c0:a3:c6:6d:b7:42:99:fd:6f:68:96:70:e9:a4:
c2:6d:4a:ad:1b:4c:68:d0:1d:ee:ca:e1:78:19:7f:
06:d7:82:55:c2:4a:ef:af:86:7b:1c:30:3d:61:3c:
4d:7a:be:73:b5:fe:6d:f9:37:2b:26:f8:7d:01:2a:
a2:a8:e2:3f:ba:1e:7a:1b:b9:c9:67:ff:6f:de:5f:
12:fb:0a:62:27:c5:a2:15:59:f9:90:b8:c1:c3:86:
1d:9e:32:be:64:a4:81:fd:82:40:5b:75:d1:fa:72:
05:fc:c4:12:fd:bc:ca:08:ed:6c:f6:de:c4:17:15:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:32:78:6F:9B:4D:81:2D:FE:41:6F:1C:BE:D7:09:0D:18:74:56:78
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d4:5a:7a:68:a0:f2:fe:7d:4b:da:50:4c:7b:5e:0e:d4:ad:
dd:aa:8b:d7:32:3e:5a:ad:62:12:47:09:05:54:ec:11:40:cc:
34:19:d6:13:4c:e5:20:be:eb:01:08:11:88:d6:a6:bd:8e:9c:
a7:c3:64:cd:08:32:4e:58:39:c7:27:1d:87:ec:e5:36:3a:7f:
5b:f7:40:02:15:d1:b6:36:06:e9:05:79:d8:34:df:a2:62:80:
dc:a8:e3:91:5c:98:bb:e9:59:77:04:d8:6a:f6:59:df:e8:27:
7b:20:00:dc:35:ca:63:cc:e9:d9:e1:3e:78:aa:1e:4c:10:e7:
4c:c6:d9:86:fd:ce:32:e2:2e:b0:1e:7b:cd:6b:4d:61:bb:f4:
f7:e6:53:7a:a4:98:81:96:5c:30:23:8c:46:48:d8:30:29:1e:
5b:3b:c3:b4:59:43:fb:29:e1:da:06:c6:e9:10:f9:bc:14:2e:
a9:a3:83:4e:43:50:c3:2a:32:35:37:73:e3:73:be:3f:b6:88:
76:b7:a2:a5:8e:30:31:8a:38:38:fb:b6:46:09:89:ed:a0:68:
62:e0:b8:16:b6:58:6e:42:1d:db:85:ba:98:a1:15:f7:91:49:
ec:f2:03:86:d5:cf:eb:82:58:26:5f:9c:a5:85:74:d7:62:05:
99:ac:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:42:13 2025 by rpki-client