Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: P+St8aZ5yx00RxvxFF3XKdpfEJX/bMd5uAKH1EZuVXA=
Subject key identifier: BF:EA:66:4B:BE:52:D2:C0:DD:08:14:17:FE:1C:F0:A0:D2:90:F8:2C
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 0196CB739EB0099DD1582653150D916808FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 0340
Signing time: Tue 13 May 2025 21:01:14 +0000
Manifest this update: Tue 13 May 2025 21:01:14 +0000
Manifest next update: Wed 14 May 2025 21:01:14 +0000
Files and hashes: 1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=)
2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: XiyyUBKMT+qeLPqzaqPUOdaoFHjARGNH0Eb605nM48Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:9e:b0:09:9d:d1:58:26:53:15:0d:91:68:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: May 13 21:01:14 2025 GMT
Not After : May 14 21:01:14 2025 GMT
Subject: CN=bfea664bbe52d2c0dd081417fe1cf0a0d290f82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:ab:8e:d9:0b:ff:fa:cd:20:ca:0f:b0:00:
92:db:ae:ee:20:30:ca:40:28:7b:b2:6a:90:36:e3:
93:a9:ee:06:21:1c:4b:9c:83:5e:7f:3a:9d:83:d5:
50:58:e2:bb:a8:b9:d5:14:79:fd:ad:69:1a:e9:8f:
1f:1c:bb:f4:e8:25:94:26:9a:c6:ec:64:f0:4a:1e:
e6:32:bf:75:2c:7a:b7:7d:a4:b0:a8:16:6d:01:cc:
ed:76:e3:5a:46:09:c1:55:c1:4d:f8:d5:f2:0f:23:
cc:cd:71:59:6f:d9:53:5e:c3:89:30:f0:09:59:f5:
0c:b3:a2:df:6d:d5:a8:db:9f:25:e1:5b:5e:72:2d:
1a:91:34:7c:fb:87:cd:15:7d:35:58:6d:ec:67:0b:
bc:5f:6e:7d:16:af:05:fc:4a:47:c3:70:91:ea:ad:
0b:2b:fb:a3:93:fd:28:92:47:60:1b:76:0c:ce:12:
23:51:bc:67:2c:ef:e8:2c:91:a8:15:32:f9:d4:6c:
b3:c5:dc:08:8a:62:52:40:38:e1:7c:f1:0a:30:27:
ba:97:68:d2:7f:31:08:df:25:d4:02:ef:5d:16:48:
87:99:9d:e0:f5:e5:ad:4f:0e:ea:f1:02:62:8d:7c:
96:fc:3f:19:b5:23:e2:5e:a9:4a:05:2e:7e:e2:7f:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:66:4B:BE:52:D2:C0:DD:08:14:17:FE:1C:F0:A0:D2:90:F8:2C
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:04:6b:ab:1e:b0:7c:81:c1:7a:e7:c4:1a:b2:a2:85:35:b3:
2c:90:67:b7:b8:53:eb:f3:cd:63:6b:93:58:ab:5a:ee:c1:a2:
9d:1f:83:7a:fc:46:e3:0a:81:18:45:9f:b5:24:34:6a:64:27:
5b:88:c8:b2:ba:e1:4e:77:ad:0e:35:55:6f:66:67:76:a2:e8:
d1:78:98:d5:10:a5:a7:52:01:e5:73:19:0d:50:3c:ed:91:8a:
ca:2f:b4:41:5c:87:e3:75:7d:21:bc:aa:40:12:b1:87:f1:bc:
dd:fe:cf:a9:81:83:14:9a:db:fd:c3:31:05:4e:23:c8:83:4f:
75:f5:a6:b6:b5:38:b0:d1:92:36:5c:d1:57:a5:cb:6e:22:73:
fa:6c:bc:a0:1a:ef:2f:4e:f8:25:6d:db:38:3a:2c:07:e7:fb:
39:b5:4d:4a:f3:ae:cb:a5:32:b9:69:75:ea:07:1c:64:cf:fa:
8e:7a:5b:77:f2:96:af:44:3a:1d:25:41:ad:06:12:01:53:b3:
1f:0b:48:7a:08:e3:c6:f4:e3:38:4a:53:73:19:aa:bf:df:0f:
db:24:d9:ef:8a:3b:ac:8c:a0:f7:2c:87:2f:58:99:86:c8:85:
da:7b:db:e6:4d:bb:e0:f5:8d:7c:b8:e0:2d:e0:54:9a:ae:b4:
af:8f:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:55:57 2025 by rpki-client