Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File: PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier: xCxgu5xe6YPcc7YrdbePNbGXFW4BtGRlqbv6t17PuWk=
Subject key identifier: 75:C9:11:8C:14:FD:4F:49:48:77:02:2B:AC:BE:07:FF:8C:7F:0C:ED
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer: /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial: 0196BFDD04B7DA153CD2A5ECC60BC12F49F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number: 0918
Signing time: Sun 11 May 2025 15:00:55 +0000
Manifest this update: Sun 11 May 2025 15:00:55 +0000
Manifest next update: Mon 12 May 2025 15:00:55 +0000
Files and hashes: 1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: PMDsJ3dmk1CupgYl/Rayy25NG2xwIT4eVGcEu/lOnBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dd:04:b7:da:15:3c:d2:a5:ec:c6:0b:c1:2f:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
Validity
Not Before: May 11 15:00:55 2025 GMT
Not After : May 12 15:00:55 2025 GMT
Subject: CN=75c9118c14fd4f494877022bacbe07ff8c7f0ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f2:ba:c7:f5:42:ec:8f:ae:6c:45:d8:54:7d:
7d:c2:77:ad:a5:d3:33:64:6f:1f:19:aa:de:27:8b:
ed:d5:08:41:01:35:c7:3f:31:08:e2:51:27:56:36:
78:c5:7f:43:7c:34:a1:6d:b3:c1:20:ef:14:c3:0a:
4c:8d:55:09:e1:fa:49:6a:5f:37:8a:14:b7:e1:08:
a4:91:09:54:0d:f6:a1:29:96:84:e8:ae:32:60:a6:
6c:b5:f9:4d:1e:c2:39:a0:f4:c1:fd:71:71:4d:72:
3a:ff:ea:9b:1b:45:47:40:61:db:c6:2f:49:68:d1:
fd:84:5e:fa:af:8d:f4:cd:b0:50:4f:28:d2:bc:62:
7a:8a:c7:c8:fe:42:83:6e:eb:ab:7d:bd:73:82:91:
3e:2a:71:58:12:67:c3:89:cf:8e:f2:5f:27:63:51:
51:3d:84:9e:f4:3c:17:0b:86:01:23:68:fc:35:95:
1d:89:53:5e:65:d6:a6:53:19:c9:58:92:92:ba:b0:
40:a1:43:b4:95:85:b3:ec:4d:4f:33:a2:e5:ae:b1:
40:76:67:be:05:b3:cf:4a:e4:c6:72:bb:3b:77:36:
e3:e3:20:8f:16:d2:f0:5c:e5:12:c2:25:a5:6a:e4:
0c:b2:f3:3e:69:b6:81:ae:e1:29:26:e0:b4:80:fc:
e8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:11:8C:14:FD:4F:49:48:77:02:2B:AC:BE:07:FF:8C:7F:0C:ED
X509v3 Authority Key Identifier:
keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c7:b3:2b:13:eb:4b:4f:2c:78:3c:89:86:31:a3:28:84:9a:
16:4e:a6:33:6c:97:d8:8a:82:4b:37:c9:20:48:4b:ff:8a:2e:
e8:26:df:18:45:41:f1:3a:80:d5:71:98:93:7b:34:f7:ba:f5:
77:70:71:41:09:85:78:96:8c:f7:8d:6e:13:3b:7d:2c:db:fd:
6c:9c:a9:db:b6:04:5f:bc:e1:eb:39:41:16:6e:f2:06:38:9c:
6e:c7:82:1a:30:8a:59:69:30:b7:91:93:65:ea:b2:a4:55:59:
44:6d:a9:a5:16:63:fa:3e:b4:13:6f:2d:b0:ec:bc:d3:dc:ab:
30:5f:8e:f2:49:ea:3d:5c:4b:ff:52:66:e1:51:52:36:ed:03:
73:6b:0b:17:34:6e:66:1d:8c:18:49:63:7d:67:2c:95:80:fb:
33:76:ad:19:26:2a:b7:b6:ca:ec:99:f8:64:b1:3c:4e:e6:4d:
93:0d:e2:14:d2:2e:5b:91:a1:07:1a:eb:5d:98:a5:1b:ca:9a:
3f:9f:39:75:ab:a3:d1:85:bf:a6:ae:74:ff:c5:a7:88:53:63:
4e:07:34:03:07:c7:c3:f4:a7:d9:c9:52:83:a5:e2:72:3e:08:
0a:13:91:fc:60:85:a8:d4:b3:c7:d1:3e:6e:d5:e9:d2:05:ca:
2b:52:49:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:16:29 2025 by rpki-client