Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: EVY7uwgpOlE5b1xIBhsDgcRlWD3XoSZSDHELocnqAf8=
Subject key identifier: EF:08:DE:E9:D0:7B:32:A2:E4:0F:2F:B8:3E:D7:75:8E:8F:A6:01:16
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 0196BA118CF4E2ECC642E13EC911EF1AD6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 12:00:34 +0000
Manifest this update: Sat 10 May 2025 12:00:34 +0000
Manifest next update: Sun 11 May 2025 12:00:34 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: zwRXI8ro/WY+w5e1vnDNEYcJ8/7zy8f7AxfoRx6FxN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:8c:f4:e2:ec:c6:42:e1:3e:c9:11:ef:1a:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: May 10 12:00:34 2025 GMT
Not After : May 11 12:00:34 2025 GMT
Subject: CN=ef08dee9d07b32a2e40f2fb83ed7758e8fa60116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ca:eb:a9:bf:b3:3b:98:00:7a:3b:25:f6:ab:
c4:8d:a3:ff:f8:10:9e:02:3d:8d:d9:60:24:e8:00:
f8:47:85:57:52:72:5a:39:83:95:74:5a:7f:f1:8c:
e7:3b:15:d8:5d:b7:b5:60:9d:ea:da:8c:1e:c1:f3:
7f:c1:6d:ff:75:8e:74:4a:89:2d:13:a8:27:e8:d9:
12:4b:26:dc:32:b7:6b:b1:d7:d4:7b:30:2b:c3:3e:
05:db:59:13:51:e1:19:47:af:d4:34:c8:d0:09:5c:
55:71:03:b8:24:ed:2b:c0:93:19:b8:42:fa:1f:0b:
d5:de:0a:b0:09:fc:7f:33:85:9b:5e:27:e0:49:55:
86:a1:d0:e4:7b:d3:1c:22:bc:62:8c:32:98:46:06:
c7:5d:a3:21:3b:1a:2e:47:76:3d:73:4c:5e:83:42:
53:e9:34:f7:8a:0d:9f:c5:12:f9:1b:39:44:3e:47:
68:1f:6f:e5:8f:f0:3f:a3:1f:b6:d6:f3:41:37:2f:
a6:da:00:7f:1d:c1:b5:8c:fe:1b:19:f4:64:4a:9b:
ac:67:ea:f4:87:35:3e:4c:07:c4:3f:d8:30:5e:48:
a5:8f:9e:3b:0d:e2:91:71:88:51:45:5e:e1:86:26:
08:43:f4:7a:b2:96:fd:8b:54:67:91:21:aa:1e:88:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:08:DE:E9:D0:7B:32:A2:E4:0F:2F:B8:3E:D7:75:8E:8F:A6:01:16
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:28:d7:13:5a:7d:85:9c:61:70:e2:0a:c5:c2:bd:a5:c3:60:
f0:9c:99:4d:8d:ab:6a:34:ca:0e:05:06:d9:fe:b5:bd:e1:a6:
78:31:50:e8:8d:b9:db:e1:24:2d:87:e0:92:11:1d:cd:d5:6c:
9a:3b:f9:ee:77:5a:c1:60:d3:33:81:35:c0:54:cd:3c:d2:87:
ad:a6:bc:e6:7d:14:dd:e6:ab:95:9a:b4:d8:2b:2e:5f:09:dc:
c1:09:6e:c9:6e:bc:1a:ac:eb:c0:48:48:5d:b1:f7:08:e4:76:
ae:3e:48:6c:dd:83:34:6f:31:0a:9e:72:73:3c:8a:cc:cc:1e:
4e:76:50:7e:f4:bc:95:64:37:4b:19:22:78:38:ff:88:f5:be:
50:89:43:35:1d:df:93:c4:ae:1f:cd:84:47:dc:20:53:d0:85:
ad:57:9f:c2:05:0c:d4:eb:14:3e:09:38:35:d9:a7:1a:1c:11:
35:66:39:80:2a:04:5b:19:b3:9b:9c:40:f5:e9:3f:22:84:20:
8e:20:a1:f8:14:ae:4a:e9:a9:d4:de:5a:9e:05:53:ea:1c:dd:
1a:46:a4:b8:89:6d:13:f4:08:fe:71:ed:dd:e9:5f:9b:c2:81:
a3:cc:5c:5c:8a:35:80:e8:7e:ff:40:f2:23:d0:69:ca:ca:5c:
78:ce:36:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:05:06 2025 by rpki-client