Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: d9Co0Egym8mSOYM+TUy/0vaoY6oF3tKugtB0CRsTOYU=
Subject key identifier: 12:43:90:54:61:67:84:AE:65:9F:A2:94:D9:B1:56:F6:FC:91:82:CC
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 01969D1A2AC6C33F4F508D07840487077E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 1525
Signing time: Sun 04 May 2025 21:00:59 +0000
Manifest this update: Sun 04 May 2025 21:00:59 +0000
Manifest next update: Mon 05 May 2025 21:00:59 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: aC37AsN1olQg4nMYua1rd+VtLXHoi+w4QeuCxt3mP3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:1a:2a:c6:c3:3f:4f:50:8d:07:84:04:87:07:7e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: May 4 21:00:59 2025 GMT
Not After : May 5 21:00:59 2025 GMT
Subject: CN=12439054616784ae659fa294d9b156f6fc9182cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d2:07:6c:24:19:ce:ce:dd:96:71:3a:84:bc:
c5:d7:70:a8:26:db:05:ff:86:7d:cf:0f:12:23:57:
81:b5:a7:91:43:ff:98:79:07:76:db:10:25:72:d6:
b3:f8:e2:97:9d:ee:25:3a:ca:a2:44:04:07:67:8c:
69:6e:d7:1e:f5:8e:fe:e5:eb:db:5e:3b:a0:29:7f:
4e:73:6d:61:10:ce:13:b5:6f:41:eb:44:ba:60:b8:
07:45:40:a1:1a:b7:d3:a8:c2:00:1c:94:01:52:46:
6d:fe:96:20:2d:ce:cd:c7:9e:01:fc:11:be:7d:4d:
9f:63:75:e7:ca:5b:63:2a:53:72:73:e2:b7:ef:61:
3c:7c:31:9f:4d:7a:90:07:bf:f9:0a:21:68:ef:07:
0c:a9:93:0c:26:a8:6d:a3:93:82:b9:e2:38:52:05:
7b:9e:14:c8:fe:05:01:6a:5c:d0:d2:f3:96:e5:8f:
03:40:9b:3a:c7:a0:83:9f:a9:ea:22:bf:ea:7e:ee:
33:bc:f2:66:86:fc:5c:a3:04:f3:d5:db:0e:8c:b0:
04:24:bc:2a:3e:fd:5a:fb:66:dc:41:3f:82:df:d5:
e4:c5:22:20:97:13:38:b5:bb:11:15:98:09:83:ca:
59:ce:3a:3c:be:b4:d6:5d:72:35:21:98:34:8a:10:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:43:90:54:61:67:84:AE:65:9F:A2:94:D9:B1:56:F6:FC:91:82:CC
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:30:bb:32:13:5e:1f:4b:01:4b:c4:49:ac:19:24:b7:b3:24:
dc:ec:51:d7:fc:b7:84:3a:b1:2e:41:0e:ca:8c:17:00:11:c5:
25:c0:99:9f:88:f5:b0:7e:13:e2:83:6e:33:55:df:6a:3d:d1:
3c:01:d4:a2:d2:e7:5e:7f:a7:47:69:b7:a8:fe:5e:ae:d7:a0:
f6:12:b1:da:33:f9:fa:48:d3:75:bf:d2:c7:47:04:85:58:f5:
c0:c9:8c:fe:2d:94:04:56:00:e2:70:fe:8e:fc:75:2c:30:f3:
f4:81:9c:d6:7e:d6:9f:4e:36:9b:7a:13:18:e3:e8:5f:ff:08:
7a:95:0d:a4:36:73:67:72:80:f8:76:99:ed:f7:fe:d1:87:be:
de:19:05:1f:c1:44:a1:87:6b:60:3e:48:b0:1d:4e:a4:50:24:
b1:02:a3:de:8a:e2:b5:90:7a:84:05:5b:4c:20:78:d8:df:c1:
66:a3:21:93:f3:35:cd:f3:b4:fd:80:48:6b:90:78:4b:99:60:
ce:fb:52:ae:91:4e:5f:59:04:60:a1:ed:89:2a:fc:da:5e:dd:
39:75:85:21:98:c9:10:98:68:94:95:ac:79:cb:59:b5:6c:ad:
73:6e:b9:d9:a8:09:1d:01:c4:77:92:7b:99:30:9c:d5:7f:d0:
31:98:6a:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGirGwz9PUI0HhASHB354MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNDVjZTQwODVmMDJlYjhhMGVkMWFmZDJiNzk5MWE4YWE5
OTgzMzQwHhcNMjUwNTA0MjEwMDU5WhcNMjUwNTA1MjEwMDU5WjAzMTEwLwYDVQQD
EygxMjQzOTA1NDYxNjc4NGFlNjU5ZmEyOTRkOWIxNTZmNmZjOTE4MmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdIHbCQZzs7dlnE6hLzF13CoJtsF
/4Z9zw8SI1eBtaeRQ/+YeQd22xAlctaz+OKXne4lOsqiRAQHZ4xpbtce9Y7+5evb
XjugKX9Oc21hEM4TtW9B60S6YLgHRUChGrfTqMIAHJQBUkZt/pYgLc7Nx54B/BG+
fU2fY3XnyltjKlNyc+K372E8fDGfTXqQB7/5CiFo7wcMqZMMJqhto5OCueI4UgV7
nhTI/gUBalzQ0vOW5Y8DQJs6x6CDn6nqIr/qfu4zvPJmhvxcowTz1dsOjLAEJLwq
Pv1a+2bcQT+C39XkxSIglxM4tbsRFZgJg8pZzjo8vrTWXXI1IZg0ihAxTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJDkFRhZ4SuZZ+ilNmxVvb8kYLMMB8GA1UdIwQY
MBaAFDxFzkCF8C64oO0a/St5kaiqmYM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODIt
ZDg2NzZhODBjZmM3LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85NzMzNGEtYzk3Zi00N2M0LTk5ODItZDg2NzZhODBjZmM3
LzEvUEVYT1FJWHdMcmlnN1JyOUszbVJxS3FaZ3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTC7MhNe
H0sBS8RJrBkkt7Mk3OxR1/y3hDqxLkEOyowXABHFJcCZn4j1sH4T4oNuM1Xfaj3R
PAHUotLnXn+nR2m3qP5erteg9hKx2jP5+kjTdb/Sx0cEhVj1wMmM/i2UBFYA4nD+
jvx1LDDz9IGc1n7Wn042m3oTGOPoX/8IepUNpDZzZ3KA+HaZ7ff+0Ye+3hkFH8FE
oYdrYD5IsB1OpFAksQKj3oritZB6hAVbTCB42N/BZqMhk/M1zfO0/YBIa5B4S5lg
zvtSrpFOX1kEYKHtiSr82l7dOXWFIZjJEJholJWsectZtWytc2652agJHQHEd5J7
mTCc1X/QMZhqcw==
-----END CERTIFICATE-----
Generated at Mon May 5 06:16:07 2025 by rpki-client