Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
File: PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft (raw, json)
Hash identifier: a0L8UlaHpll++QB0xSRbG4s24hB/fJwR/RjdrlighPU=
Subject key identifier: CE:3C:3C:98:70:EF:F0:6E:0E:A6:41:84:72:7E:FD:8A:FA:E5:C8:64
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 0196BB91DB7CB7BA2778D0A56F8F40B4B99F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
Manifest number: 049C
Signing time: Sat 10 May 2025 19:00:20 +0000
Manifest this update: Sat 10 May 2025 19:00:20 +0000
Manifest next update: Sun 11 May 2025 19:00:20 +0000
Files and hashes: 1: 6px4oQpQxURR5IW0gWezwsCgYUA.roa (hash: aKqSySkiQ4Z3UFY+0fQdpN2yWiQF1RqxRVXfSVXmnd4=)
2: PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl (hash: WVC1BvhmTz6IPc8Rl39KMD4BoKkyPpLsvFAAXZ1esAc=)
3: gdLyflAsCyF8taKXwI9Ohy9cbTg.roa (hash: watnTPY7ltSg0Ey7o57Cxg1ndShvduTve51cc1ZXeew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:91:db:7c:b7:ba:27:78:d0:a5:6f:8f:40:b4:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: May 10 19:00:20 2025 GMT
Not After : May 11 19:00:20 2025 GMT
Subject: CN=ce3c3c9870eff06e0ea64184727efd8afae5c864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:db:54:90:bc:9d:33:63:5a:04:1f:3d:52:07:
0b:09:05:55:c9:9a:75:3a:67:e8:d7:18:5e:d4:01:
84:40:cb:c0:16:04:99:9d:88:3c:cc:3f:74:25:a8:
af:7f:f7:99:d1:97:2e:35:eb:32:f1:b8:1b:29:c7:
16:bc:47:c1:61:db:1a:52:91:9b:d7:2c:3a:3f:91:
17:17:d9:3b:82:39:8c:7b:b7:c1:21:ff:76:0c:ed:
40:d5:b3:e5:7a:d8:42:28:8e:ea:87:76:2b:88:f4:
ce:e8:71:57:52:4f:65:bc:ba:5b:9f:27:05:ab:bf:
d4:61:f3:21:3c:d2:ea:1c:e0:ff:a0:c6:85:61:9f:
4b:3b:d9:49:16:d7:08:a4:9e:4d:96:51:35:a3:2c:
ca:dc:37:a5:e9:af:9c:79:5b:61:fe:d5:56:9a:e7:
4e:57:e0:9f:e2:24:b2:5c:64:e5:07:27:d8:f7:44:
80:c5:dc:18:b4:be:78:03:1f:dc:38:a9:90:d0:d7:
c0:e1:f4:a3:7d:1f:6d:2e:f0:91:53:ec:b0:fa:24:
f9:4d:f2:9e:86:17:26:82:b6:a1:f0:29:4f:64:1a:
61:61:e0:f3:3b:ba:ac:cb:f5:70:59:9f:1e:15:58:
e7:df:78:e2:3b:dd:31:4c:c3:a4:d2:05:3b:51:6a:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:3C:98:70:EF:F0:6E:0E:A6:41:84:72:7E:FD:8A:FA:E5:C8:64
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:47:05:8a:6f:3c:45:b9:2d:57:a4:c0:bc:3c:f9:41:c0:c6:
06:77:8e:f7:54:d6:34:d0:62:0c:23:b0:c1:59:fa:f3:13:8a:
98:59:54:fd:a7:9f:fc:58:d0:57:52:de:ec:c7:e1:28:e7:32:
fb:65:9a:6a:96:e2:96:73:37:d4:a4:4b:b8:b3:e9:e0:69:10:
22:d3:cf:ac:64:71:38:03:27:85:db:e4:b8:83:a4:65:ad:8b:
50:fa:ab:f8:d6:74:d4:a0:6a:f7:20:11:8f:40:32:0c:94:d8:
72:45:d3:64:b4:f7:d4:c2:fd:c4:61:f2:e5:6b:b3:8a:45:bd:
76:8d:6d:89:8f:09:eb:63:d4:42:b2:23:52:3b:b4:e6:1e:e9:
43:d5:37:2b:4d:00:ff:32:10:56:27:cd:d1:e0:31:6e:14:2e:
15:2c:aa:99:6b:d2:d2:b6:15:42:15:1f:06:b2:9f:d3:a8:e8:
18:14:60:6f:f0:75:60:2b:c8:a9:42:e6:92:af:68:91:be:77:
4b:14:d6:cc:18:35:8b:4c:f4:a8:46:0a:f3:e6:78:8a:ef:2e:
8e:f0:bb:5e:c4:d7:ce:25:62:eb:e0:85:ee:3e:db:5e:b6:81:
0a:87:cf:df:d7:61:b6:cd:9a:5f:92:08:6c:9e:8c:02:67:e9:
59:c0:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:12:31 2025 by rpki-client