Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
File: PxnYdtwluWxdxZi-Lb9uywZal18.mft (raw, json)
Hash identifier: 97NYBavqSsFxCyyhOoYfAKBZR+IxCrGs3QGeEluAvLI=
Subject key identifier: 8B:EC:05:86:50:ED:47:31:E9:9D:8C:BF:86:4D:A7:21:4E:42:98:CC
Authority key identifier: 3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
Certificate issuer: /CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Certificate serial: 0196BFDC5D38F8D93E3BFB3A425F7A1A96A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
Manifest number: 0362
Signing time: Sun 11 May 2025 15:00:12 +0000
Manifest this update: Sun 11 May 2025 15:00:12 +0000
Manifest next update: Mon 12 May 2025 15:00:12 +0000
Files and hashes: 1: PxnYdtwluWxdxZi-Lb9uywZal18.crl (hash: 5E1t/Qi/LW+j8VtLwQmSpDvuI6jOr8Kc2IyLLSXT9JA=)
2: x8ghvFiQy8y7__Pm7K2GUSehU3A.roa (hash: 97TGydFeZ3RUDp9TsIz5UQ8MNV819kJP2yTvYQ+TbKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:5d:38:f8:d9:3e:3b:fb:3a:42:5f:7a:1a:96:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f19d876dc25b96c5dc598be2dbf6ecb065a975f
Validity
Not Before: May 11 15:00:12 2025 GMT
Not After : May 12 15:00:12 2025 GMT
Subject: CN=8bec058650ed4731e99d8cbf864da7214e4298cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:5b:dc:aa:82:c4:ae:1a:e9:94:f6:e9:0b:
43:0d:2b:61:4e:33:fe:06:e3:69:3a:42:de:03:6c:
80:13:6a:1a:9b:df:dc:5a:ad:4f:99:88:5d:59:44:
e6:fc:22:cc:68:fc:1a:4b:3a:41:e8:23:91:ed:58:
6f:4f:5a:62:49:a6:e6:18:fc:bf:52:59:c9:0a:17:
9b:15:32:a8:f0:7b:4f:f5:16:3d:aa:ad:0b:b8:83:
dc:a4:f0:5a:6e:0b:a5:16:f8:98:03:86:fb:c0:16:
17:5b:af:2d:6d:ad:4f:0d:b4:d8:1e:6b:e0:39:61:
1a:ae:7e:1d:69:e9:2c:16:ad:db:90:07:9b:5e:66:
42:e9:9e:e2:26:d6:50:83:a0:37:c4:9b:78:68:95:
52:00:e3:bc:95:e1:9a:f1:46:37:bf:f8:bd:47:bd:
48:2d:cb:78:7e:99:a5:5f:97:87:01:3a:b5:bb:77:
84:69:de:b2:2f:40:a2:96:69:06:28:3f:36:c1:cb:
f6:05:24:41:fb:ab:d6:b6:ec:b1:99:90:93:41:ca:
f7:f9:46:d5:b7:0c:44:e2:b2:27:ab:ca:36:3d:cb:
0b:29:4e:81:c6:b3:27:0d:ca:db:7d:51:6f:2f:bb:
63:db:d5:92:ac:31:16:2a:41:a3:69:ea:ac:bf:b0:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EC:05:86:50:ED:47:31:E9:9D:8C:BF:86:4D:A7:21:4E:42:98:CC
X509v3 Authority Key Identifier:
keyid:3F:19:D8:76:DC:25:B9:6C:5D:C5:98:BE:2D:BF:6E:CB:06:5A:97:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxnYdtwluWxdxZi-Lb9uywZal18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/226455-17a0-463c-8959-0fb1391b54eb/1/PxnYdtwluWxdxZi-Lb9uywZal18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:33:20:3b:0d:60:d0:dd:5e:91:67:8b:f8:06:42:cd:84:62:
b7:dd:3d:47:ca:28:d0:94:5d:09:c0:07:01:2e:78:0a:08:9e:
07:79:5e:2d:ce:91:12:3e:95:bc:ec:fe:12:f4:54:07:18:39:
3d:fd:36:28:88:b2:01:8d:dd:91:b4:68:c3:f3:29:81:fd:07:
c9:8c:67:91:3e:44:3b:c6:3d:ec:57:ad:6e:cb:de:5a:a6:84:
13:5c:78:68:ad:36:47:fe:72:d2:9d:b9:db:5d:36:73:50:2a:
93:65:da:02:af:9f:e3:ec:ff:b3:77:ba:44:9b:3d:50:45:fb:
c8:94:2c:d8:67:98:c0:b3:fa:ff:dc:b3:28:4e:5b:00:fd:97:
6c:72:05:f8:c5:8f:00:b2:6f:31:90:1e:66:30:7d:79:4e:e5:
81:d3:93:74:79:7d:d8:d1:33:6a:36:d6:46:d8:bd:47:07:41:
c8:24:5b:e8:19:5f:81:02:20:c2:44:2a:71:02:31:59:99:74:
4f:a5:29:19:07:7c:43:3b:dc:9c:43:a8:05:98:4f:c5:6e:ed:
33:46:5b:49:c8:c6:7f:a7:9f:65:b9:41:b0:ab:5f:49:c1:87:
77:e2:da:33:70:e1:b3:12:3d:e7:31:14:7f:53:9d:d7:b0:a2:
df:e9:5f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:20 2025 by rpki-client