Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File: pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier: sVP5kqKZfrdAPCvuIpQXAbDMFpSLJgiaDqaVF/IloB4=
Subject key identifier: 6F:B1:E7:C5:92:78:E5:E2:40:40:B1:02:20:A8:18:01:78:A1:6D:99
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer: /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial: 0196C0B8B07246F1023A25909C853CE4CD54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 19:00:51 +0000
Manifest this update: Sun 11 May 2025 19:00:51 +0000
Manifest next update: Mon 12 May 2025 19:00:51 +0000
Files and hashes: 1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: KJpmvirYIS1HEPRhEQQH05knGxL+FjbyGxxK15Nwlak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:b0:72:46:f1:02:3a:25:90:9c:85:3c:e4:cd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Validity
Not Before: May 11 19:00:51 2025 GMT
Not After : May 12 19:00:51 2025 GMT
Subject: CN=6fb1e7c59278e5e24040b10220a8180178a16d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:81:5b:b5:ca:42:37:41:50:db:d4:05:84:
fc:01:f1:a1:5a:27:82:ee:15:d8:86:a1:c8:e9:ac:
ff:58:77:0e:85:c6:18:2b:18:53:7d:7a:85:81:7a:
80:1e:95:33:75:1e:e7:c4:40:18:7c:e1:ed:bc:a7:
e1:84:87:64:b8:c9:41:fb:3c:39:73:d4:25:3e:d8:
30:27:0c:b0:cc:bc:5a:76:6f:7c:4f:0b:5f:e0:3c:
e6:4e:b7:13:75:36:47:21:b9:d4:c3:74:32:d4:59:
75:a0:ca:13:b4:57:d6:45:4c:3c:31:f4:96:8b:7b:
68:16:03:38:2b:08:9b:20:12:98:f7:73:59:a9:4e:
a0:80:0a:17:e2:78:bf:95:82:78:f9:e0:31:37:6a:
e6:c1:20:28:df:f5:ad:04:70:f6:d1:c8:fd:33:e7:
78:02:d2:a3:0b:3a:e8:dc:84:89:92:33:99:d9:76:
93:93:1e:2f:31:36:a3:4d:36:7a:fb:42:90:48:d5:
aa:f0:4b:07:f6:1b:a5:7b:fc:d5:20:bb:30:53:5b:
f8:2d:17:73:ff:0f:d4:97:be:60:e2:8b:c7:b8:d4:
3b:74:2d:7a:cb:a3:4d:83:09:7c:37:51:1d:cf:95:
08:1c:1e:18:34:cf:78:db:fe:b3:fc:e5:d3:d9:01:
20:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B1:E7:C5:92:78:E5:E2:40:40:B1:02:20:A8:18:01:78:A1:6D:99
X509v3 Authority Key Identifier:
keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e9:03:88:b7:9a:54:6a:d7:05:48:42:98:5e:8e:ec:1a:d8:
68:06:48:df:99:ef:56:02:17:50:d0:a7:3b:59:34:a6:de:27:
52:dc:60:f7:36:de:37:ce:a6:ad:ec:3e:a6:df:82:7d:50:04:
d9:ac:ad:32:91:11:9a:bb:49:71:56:55:e2:39:1a:e5:24:3a:
fd:c6:c4:3d:1e:9c:43:bf:aa:88:ed:a2:40:a1:78:ba:51:9b:
bf:ce:49:d4:e4:cf:6f:3a:35:2b:3a:6a:b0:72:85:81:8f:5e:
a7:a6:4c:a2:94:c3:cc:17:d3:dd:c0:1b:b6:db:53:52:d9:7b:
ad:72:83:a1:1f:1c:55:7c:74:0e:72:96:1b:54:7b:7b:56:bd:
43:93:93:23:13:d0:cd:19:0b:15:83:c2:e6:6b:bc:e4:7b:e1:
d6:fa:fb:3f:e7:c7:34:2f:76:4e:bf:13:29:71:8d:fc:6e:bd:
29:0e:14:7e:ee:a9:d4:74:df:fa:6d:9a:a3:81:01:d6:a2:c7:
98:2c:9f:8c:67:8e:7d:1c:a8:b9:15:ef:8e:07:b9:9e:68:46:
94:2a:58:03:e4:f0:20:d0:22:f4:c6:3c:b1:c4:c6:4b:40:68:
bc:1d:0d:60:60:36:08:d7:8b:67:b2:05:3b:aa:bb:7d:6b:6f:
0c:42:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 00:11:52 2025 by rpki-client