Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File: PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier: DMj+RxUd66+A7hWLcyRpex1nCjV7TiypwXSw2F3Odqs=
Subject key identifier: 19:43:09:18:F0:B9:02:95:24:61:D0:82:5A:DE:D0:A5:39:B9:DA:F2
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer: /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial: 0196A98B86CC6D2502A753987AA1893C575A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number: 1529
Signing time: Wed 07 May 2025 07:00:15 +0000
Manifest this update: Wed 07 May 2025 07:00:15 +0000
Manifest next update: Thu 08 May 2025 07:00:15 +0000
Files and hashes: 1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: WAImMoYrdK4SREBC6d3c3oNLcHCiIp6quByvPKQyQ2U=)
2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8b:86:cc:6d:25:02:a7:53:98:7a:a1:89:3c:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Validity
Not Before: May 7 07:00:15 2025 GMT
Not After : May 8 07:00:15 2025 GMT
Subject: CN=19430918f0b902952461d0825aded0a539b9daf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:1c:b9:7a:8b:bb:54:bf:f7:04:6d:c8:e8:
59:25:35:7f:70:57:c1:4a:0b:96:97:67:87:f1:bb:
63:c1:29:e2:86:10:6a:36:fc:e0:44:c9:43:83:5a:
f9:7d:ab:10:ee:d6:0d:b3:43:dc:7f:77:d2:ab:63:
0e:d6:13:0a:62:bb:da:3f:06:0d:7b:cb:8b:41:1f:
38:4c:3f:9f:6f:c9:32:18:f6:9b:d1:7e:90:74:67:
13:38:1e:81:34:42:ae:27:5a:b0:45:d2:f0:a1:e5:
e4:ff:e3:ab:90:86:12:e6:cc:76:58:34:2a:53:3a:
ae:97:13:2e:8d:4b:c2:44:13:3d:33:e3:4f:d0:76:
21:0a:4d:92:b9:fc:ff:0a:5b:2d:cf:e8:ac:8c:d8:
62:fa:74:76:0f:da:05:26:3c:1a:3d:77:67:b7:f9:
0c:09:bf:52:6a:8c:57:c1:89:76:78:8b:37:ae:a5:
1e:2e:49:3b:1a:52:0f:03:df:7b:9e:f6:a7:bc:6e:
1b:5d:2c:1b:9f:13:d9:29:5c:bf:a3:69:4a:fb:28:
dc:f1:df:93:54:b0:04:c0:13:51:a7:4d:54:6d:ac:
c1:e4:92:47:0b:4b:9d:e9:34:10:27:00:c1:ea:a4:
16:8f:c2:74:ec:16:ed:eb:12:97:75:03:5d:1f:71:
37:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:43:09:18:F0:B9:02:95:24:61:D0:82:5A:DE:D0:A5:39:B9:DA:F2
X509v3 Authority Key Identifier:
keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a9:75:41:e4:7a:fd:a6:a9:9e:81:42:8d:2b:c1:9a:b9:c8:
63:f2:f3:20:2b:df:e7:9e:a9:f0:b0:40:e6:8a:55:a2:9d:a4:
ad:a1:b2:d6:8b:f3:35:d8:40:a1:34:d6:5e:a4:ef:68:49:30:
dc:bf:22:a2:61:aa:a6:86:0b:b6:14:44:a8:6b:8f:ff:64:0d:
0e:25:b0:4a:a5:67:ac:e8:42:ee:4b:67:73:48:38:f1:23:ab:
e0:08:2e:b5:c0:74:d0:49:be:e4:5e:72:c0:0e:ad:70:ee:68:
f6:d9:05:ff:ea:b2:e9:a9:d7:2e:23:9c:a8:1d:10:40:31:02:
40:5e:64:e7:a4:d5:b8:d4:7c:79:de:c2:34:e5:c7:9f:7c:17:
1b:bf:41:b4:c1:55:82:24:12:64:6a:fb:a7:2a:af:74:4b:57:
53:2b:b4:c9:da:0c:8b:1c:20:95:97:a6:a5:00:21:b4:e1:87:
65:1a:a8:e7:55:7d:f4:90:f6:f5:fa:15:56:ad:c6:99:fc:9c:
46:02:4c:10:d9:de:87:fc:1d:7d:0a:64:69:31:df:ee:a6:fe:
d3:3f:a6:08:d8:6f:eb:de:32:d8:bc:ad:0c:01:ea:75:de:b7:
3c:bd:9f:15:76:63:93:0e:5d:d3:07:cf:07:08:45:fb:12:d9:
40:0a:fe:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZapi4bMbSUCp1OYeqGJPFdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzVkNDlkZWQyMDU2NmNhNzQ1YzI4ZjgwY2ZkOWE5MmY0
YjdkNDcwHhcNMjUwNTA3MDcwMDE1WhcNMjUwNTA4MDcwMDE1WjAzMTEwLwYDVQQD
EygxOTQzMDkxOGYwYjkwMjk1MjQ2MWQwODI1YWRlZDBhNTM5YjlkYWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DIcuXqLu1S/9wRtyOhZJTV/cFfB
SguWl2eH8btjwSnihhBqNvzgRMlDg1r5fasQ7tYNs0Pcf3fSq2MO1hMKYrvaPwYN
e8uLQR84TD+fb8kyGPab0X6QdGcTOB6BNEKuJ1qwRdLwoeXk/+OrkIYS5sx2WDQq
UzqulxMujUvCRBM9M+NP0HYhCk2Sufz/Clstz+isjNhi+nR2D9oFJjwaPXdnt/kM
Cb9SaoxXwYl2eIs3rqUeLkk7GlIPA997nvanvG4bXSwbnxPZKVy/o2lK+yjc8d+T
VLAEwBNRp01UbazB5JJHC0ud6TQQJwDB6qQWj8J07Bbt6xKXdQNdH3E3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlDCRjwuQKVJGHQglre0KU5udryMB8GA1UdIwQY
MBaAFD511J3tIFZsp0XCj4DP2akvS31HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2Qt
ODM2Mzg0NzVkOGFiLzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xYzE1YTItZDBlYy00YzNhLTg2Y2QtODM2Mzg0NzVkOGFi
LzEvUG5YVW5lMGdWbXluUmNLUGdNX1pxUzlMZlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6l1QeR6
/aapnoFCjSvBmrnIY/LzICvf556p8LBA5opVop2kraGy1ovzNdhAoTTWXqTvaEkw
3L8iomGqpoYLthREqGuP/2QNDiWwSqVnrOhC7ktnc0g48SOr4AgutcB00Em+5F5y
wA6tcO5o9tkF/+qy6anXLiOcqB0QQDECQF5k56TVuNR8ed7CNOXHn3wXG79BtMFV
giQSZGr7pyqvdEtXUyu0ydoMixwglZempQAhtOGHZRqo51V99JD29foVVq3Gmfyc
RgJMENneh/wdfQpkaTHf7qb+0z+mCNhv694y2LytDAHqdd63PL2fFXZjkw5d0wfP
BwhF+xLZQAr+vQ==
-----END CERTIFICATE-----
Generated at Wed May 7 10:40:08 2025 by rpki-client