Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
File: pWMWxxKYMeBREHlTLe2B3BLIHaA.mft (raw, json)
Hash identifier: 1gi6i6Id8SvykjrIQiITFwZWtXTaHM2Go6/ssyhKUiA=
Subject key identifier: 8D:F6:F2:94:E1:73:C1:C8:64:5B:D2:28:50:14:9E:DE:3D:8E:B6:7D
Authority key identifier: A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
Certificate issuer: /CN=a56316c7129831e0511079532ded81dc12c81da0
Certificate serial: 0196C3F055D8A48D604BD217B57B6537380B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
Manifest number: 0B46
Signing time: Mon 12 May 2025 10:00:29 +0000
Manifest this update: Mon 12 May 2025 10:00:29 +0000
Manifest next update: Tue 13 May 2025 10:00:29 +0000
Files and hashes: 1: XAMH6mQExatvC2LMnoXanctLKzE.roa (hash: pCAATiBl9IRxnVx1ZfARnp3JybBqcsAW/QN7pstrTq0=)
2: pWMWxxKYMeBREHlTLe2B3BLIHaA.crl (hash: L+V8+u770GZFM3QdbzYWFfiRzz8qXIf30RpsBrHvCLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:55:d8:a4:8d:60:4b:d2:17:b5:7b:65:37:38:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56316c7129831e0511079532ded81dc12c81da0
Validity
Not Before: May 12 10:00:29 2025 GMT
Not After : May 13 10:00:29 2025 GMT
Subject: CN=8df6f294e173c1c8645bd22850149ede3d8eb67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0f:75:34:b5:d5:5c:53:48:d0:ce:a6:f0:14:
dd:6f:9f:2a:fa:bf:e4:99:4c:23:0d:29:4d:de:49:
1b:5a:e5:70:3c:ac:37:f6:2e:b9:1d:89:b6:62:88:
d9:e2:a7:7b:96:b4:b4:85:c6:5c:e9:21:b1:ef:67:
64:2b:bf:6f:59:e0:10:f1:29:d4:5a:bc:10:5c:48:
eb:fe:d3:c1:03:94:8e:01:15:83:b4:71:6b:5a:41:
df:35:eb:67:99:53:46:ea:1b:43:20:c8:53:c3:58:
02:74:ef:1c:ee:42:90:b7:0d:09:da:2e:bf:65:7e:
98:0a:a8:43:87:6e:d9:b7:8b:d2:75:e0:eb:51:e5:
89:39:ca:d3:2a:ac:2a:7a:6c:01:72:a6:d5:d9:52:
68:3a:5e:16:88:41:a4:9d:94:af:89:81:3b:96:3b:
27:e7:d1:bb:65:4a:28:93:57:07:25:90:7d:ba:ed:
c4:ed:1e:85:d3:68:ef:83:13:2c:c6:86:4e:b6:54:
f4:42:dd:7e:54:1b:52:4b:b4:b7:4b:94:f1:1d:fc:
65:52:54:af:d6:48:9c:ad:95:0a:f2:81:0d:20:ac:
a6:42:5b:2a:46:63:56:9a:d8:48:92:21:2e:10:de:
11:0c:95:19:ab:50:14:e9:11:ef:ec:e7:ed:05:be:
a1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:F2:94:E1:73:C1:C8:64:5B:D2:28:50:14:9E:DE:3D:8E:B6:7D
X509v3 Authority Key Identifier:
keyid:A5:63:16:C7:12:98:31:E0:51:10:79:53:2D:ED:81:DC:12:C8:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWMWxxKYMeBREHlTLe2B3BLIHaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/4d9267-4eac-4213-9bcb-28b82c0a14f0/1/pWMWxxKYMeBREHlTLe2B3BLIHaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:00:5e:52:37:2a:03:66:2b:c7:2c:84:13:a4:98:c8:0c:37:
08:62:35:6f:9f:a4:b5:b6:48:d3:8d:80:09:e2:15:15:a0:52:
df:a2:5e:5e:bd:3d:68:94:6b:d7:ec:3c:ef:2e:3a:08:65:7e:
41:d9:db:72:88:7c:f0:38:90:84:f5:7c:c7:e1:fd:0e:19:26:
28:80:d3:d8:35:3e:51:2c:d4:89:e0:ac:66:47:9b:d6:a5:87:
16:92:64:4a:05:03:b0:63:30:4b:6c:b9:e8:11:74:e3:17:3b:
33:e1:0b:f9:5f:c6:ca:b3:9e:90:4b:fe:2e:fd:20:bd:24:a5:
cd:58:ce:8e:2f:76:19:8d:6f:e7:d8:70:de:21:0f:33:d3:38:
6e:7b:43:b6:8f:67:41:93:65:20:04:01:f1:fe:b6:1d:24:4d:
bb:95:93:95:24:c1:3a:68:6b:93:65:6f:b9:bb:fe:94:d7:e5:
52:d0:9c:80:1b:d7:64:85:a1:e8:a8:d5:b9:21:e0:3c:ac:dc:
c5:cc:72:dc:e7:36:8e:09:7f:2a:d8:b5:ed:70:e4:9d:8d:11:
09:20:a1:f5:36:a6:12:eb:4e:9c:17:c2:b6:a8:b3:a2:67:c4:
af:fb:c1:e2:d4:4c:9a:74:d2:ea:a3:fc:67:c7:e6:b0:4f:31:
90:7a:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:54:44 2025 by rpki-client