Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: aaFmBiYdFX0bwo0J2v7/i42m6M+pOzyGENbBPPMDL90=
Subject key identifier: 41:F6:D8:54:87:08:D5:F4:93:5E:7E:45:8D:7D:F9:D7:B4:9D:48:6A
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 0196CBE102009A8165DBF6FD9D93888D6FC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 23:00:42 +0000
Manifest this update: Tue 13 May 2025 23:00:42 +0000
Manifest next update: Wed 14 May 2025 23:00:42 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: EbsWT1tZnoEvrZdUgD4PpmyxJaSB1ZYJTM13jrpWgeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e1:02:00:9a:81:65:db:f6:fd:9d:93:88:8d:6f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: May 13 23:00:42 2025 GMT
Not After : May 14 23:00:42 2025 GMT
Subject: CN=41f6d8548708d5f4935e7e458d7df9d7b49d486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:a7:ff:36:ba:e1:2d:8c:52:3e:2e:34:ae:
30:ac:04:d5:1d:a1:d8:30:0a:35:96:d6:b6:40:61:
8f:d4:05:42:4c:b0:a2:f8:59:35:de:ce:22:9a:d8:
3e:f5:d6:66:38:a5:2c:57:9f:58:8e:d1:5b:fd:5f:
be:c9:01:b0:1f:36:21:22:ba:de:43:ca:67:50:14:
7d:6a:fe:8f:0c:1f:89:3e:13:0f:cd:1c:07:dc:52:
48:17:0f:d7:a4:b2:7d:62:31:d1:ca:4c:ba:9b:5c:
d2:3e:a9:12:5d:08:8c:c1:36:03:cc:93:0d:90:f9:
05:81:9a:f9:bc:e7:e3:34:64:2e:c9:62:b6:27:9a:
43:f8:fe:2b:c1:d8:59:69:62:e8:2f:50:0f:78:6d:
3b:2c:7b:41:58:f4:71:b8:91:d9:85:82:68:9f:66:
fa:b0:b2:95:5c:88:1e:57:eb:90:10:65:33:cb:c3:
69:8f:df:0e:16:91:0e:d1:a4:65:ef:fd:d5:44:75:
27:8f:38:74:13:f7:9c:7a:fa:57:dc:49:b7:70:38:
24:51:ba:fc:ac:57:fa:ea:bb:10:29:4f:0e:eb:3f:
1e:94:74:da:77:0b:bc:cb:9d:ec:b2:ad:fe:f2:d8:
bf:33:8a:79:41:b2:05:a9:c4:9f:4e:9f:13:79:43:
d3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:D8:54:87:08:D5:F4:93:5E:7E:45:8D:7D:F9:D7:B4:9D:48:6A
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0c:2a:81:40:e7:e7:a5:a9:62:fc:e2:c1:80:51:27:da:0c:
f5:f9:30:8b:91:3d:6a:a9:c7:5e:18:8c:85:fc:d2:1a:77:db:
bf:78:88:ea:e3:81:cb:f4:b1:2c:6f:7a:b1:44:75:32:b0:a0:
b5:a9:6c:eb:4a:b1:2a:a7:37:8f:98:ca:95:de:6a:2f:0b:b8:
94:08:9d:40:59:d2:2f:54:ee:bc:24:95:c5:7c:2b:9a:2b:e7:
67:b8:5c:de:51:46:fe:dd:e5:cf:fa:b1:dc:ce:48:63:3c:d1:
3a:c0:2c:15:91:f0:eb:d3:3f:3e:8e:e1:56:e8:e1:da:66:c3:
7a:1c:fc:ff:8f:0e:9a:b3:cf:40:ba:b3:b3:86:50:fb:a4:33:
8a:59:51:25:28:b7:e3:5a:10:3f:e5:bf:cb:e3:6f:6a:ba:49:
f7:a1:6c:e4:28:ba:fd:95:b6:f6:af:83:12:02:67:8e:e2:5e:
77:42:1e:c5:e1:88:33:41:84:ce:d3:ae:99:bc:45:98:f3:e9:
1e:f7:6d:7a:72:ce:6c:af:45:bf:c1:07:5c:a8:ae:9b:f1:97:
b2:07:be:72:46:40:f6:0e:70:e5:09:81:50:89:d9:22:95:1d:
f0:87:af:38:e8:01:60:ff:71:de:f7:70:47:5b:3e:31:f7:ea:
9d:3e:e4:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:42:10 2025 by rpki-client