Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: SbNqyTeVAcMaM8CyQSIOMIrvkVAjbSO/vuH2uhY3tTA=
Subject key identifier: 31:BD:F4:1D:DB:84:C7:82:6B:88:41:9B:AF:CC:A6:A7:57:0B:91:30
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0196C270259CC885D9870C0A24301E4B4CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 02B5
Signing time: Mon 12 May 2025 03:00:51 +0000
Manifest this update: Mon 12 May 2025 03:00:51 +0000
Manifest next update: Tue 13 May 2025 03:00:51 +0000
Files and hashes: 1: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: 01x/y/ACG+zFR0L5uRz51uMDogADAtSaHw2rt3XkZVw=)
2: hjDsKa7PgCyxLZd-n7fPu4YJNMY.roa (hash: QbjTyyOso0F6DQuk2NtMyiPym++x2bG0DkG5mbISZEk=)
3: oXW8GWaKetGdBKsu2Z2IY-9T_9A.roa (hash: HV9TKH6QRnK6qfQ0eObEVR7yRAca23tprem52+Wydrk=)
4: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:70:25:9c:c8:85:d9:87:0c:0a:24:30:1e:4b:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: May 12 03:00:51 2025 GMT
Not After : May 13 03:00:51 2025 GMT
Subject: CN=31bdf41ddb84c7826b88419bafcca6a7570b9130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:ef:78:68:4d:6c:37:c8:59:dc:fe:03:c9:
ed:d1:45:45:38:09:41:02:a8:df:10:0c:fc:2e:8b:
90:68:01:48:f2:d9:26:a9:8f:9c:cb:6f:c7:df:1d:
34:25:dc:0d:6e:8b:32:91:6d:a7:48:77:d1:2d:59:
c7:35:04:18:c9:f8:f9:76:25:74:10:ad:57:b0:a5:
28:b1:69:5a:08:df:eb:38:cd:d8:57:94:f6:98:6f:
2e:e1:26:ca:9e:6d:49:55:c9:a7:2d:8b:2e:68:09:
8c:3f:c7:63:80:4d:2a:ca:ac:4e:70:c5:9e:2d:9f:
bb:b1:18:c4:28:a6:82:c1:85:47:e1:44:0e:19:06:
78:aa:62:07:cb:99:c3:ae:00:ee:e5:d0:9a:70:55:
36:7f:dc:9b:be:6f:99:06:8d:99:b3:58:9b:ab:41:
f6:e9:60:db:a2:8c:ba:69:bf:19:43:b9:57:4b:6c:
de:95:2a:2b:b1:33:e7:4f:81:a3:8d:cf:af:63:68:
8d:ca:18:d3:f6:4b:42:52:fc:55:52:bc:77:08:de:
5c:f0:a3:51:de:0e:33:5c:a0:23:42:8c:43:7d:0e:
fb:3b:ce:c7:c7:9d:d0:01:cc:dc:6b:39:5c:9e:02:
86:04:a9:a2:cb:a9:af:5f:b5:3b:bc:7d:b1:66:de:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BD:F4:1D:DB:84:C7:82:6B:88:41:9B:AF:CC:A6:A7:57:0B:91:30
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:61:20:f6:90:ea:58:61:49:fc:fb:41:71:b0:a9:50:15:a8:
36:ae:70:83:bd:88:57:81:c5:4e:da:b8:bf:97:86:a7:ed:92:
cf:65:86:41:90:bb:2e:e4:a6:d9:d0:e8:e1:bb:92:c7:7a:8f:
42:33:3b:0b:ef:b3:ee:3d:7e:46:a4:35:52:91:53:17:e3:73:
2e:26:e6:8c:d4:d7:b4:37:a5:36:76:ee:f1:6d:54:72:90:b8:
fb:26:d6:65:8a:de:ec:88:9f:2e:c9:08:7c:47:b7:18:d1:01:
8a:2e:3c:fe:ba:35:d4:0a:ca:cb:93:38:1f:bd:9a:9a:58:6f:
b3:cd:39:2b:4f:de:4a:d9:5e:42:23:ca:1a:de:cb:0c:66:d6:
7a:f0:6f:3c:ad:72:86:f3:b4:6e:29:9f:60:74:8c:95:37:14:
ad:cc:76:30:9a:3d:04:03:ea:a7:f3:29:2f:60:a8:5a:1f:e3:
30:10:5f:47:e5:18:3c:55:48:cb:9a:ca:64:ec:95:b5:ba:cc:
73:a9:ed:36:55:b0:5e:17:e0:62:63:d6:52:15:84:b4:a7:46:
78:4f:90:77:55:7d:a7:99:fb:00:f2:da:b8:09:20:2a:ad:6f:
03:37:65:df:44:f3:31:9e:6e:3e:9e:15:a5:a6:0f:8a:fd:d0:
ee:13:fd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:31:44 2025 by rpki-client