Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: Dkes1GCxPwu65Qal5SoMxjApz+lNra43Lo+ybL7QcJA=
Subject key identifier: CE:52:F6:02:D2:D1:81:9D:EC:8E:87:17:E4:21:02:45:1B:A8:A5:77
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 0196ADD64FD7D91119A7129D76F331284630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1428
Signing time: Thu 08 May 2025 03:00:25 +0000
Manifest this update: Thu 08 May 2025 03:00:25 +0000
Manifest next update: Fri 09 May 2025 03:00:25 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: M07yiwAVB3H48GlLbo1YCA0N7BPNolQ3O5401pQJV/4=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:d6:4f:d7:d9:11:19:a7:12:9d:76:f3:31:28:46:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: May 8 03:00:25 2025 GMT
Not After : May 9 03:00:25 2025 GMT
Subject: CN=ce52f602d2d1819dec8e8717e42102451ba8a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:18:96:5f:51:ce:cd:a3:d9:03:5c:ea:06:15:
16:4c:cf:54:5e:b1:d4:d4:61:ff:b9:8c:31:b3:b4:
07:60:cf:6a:e0:97:fd:91:a6:77:eb:9a:52:4f:ba:
d3:27:57:f0:99:7e:6f:4a:39:15:0d:f8:5f:d1:61:
ea:33:88:82:51:c3:17:72:44:fd:35:f7:b9:fc:32:
22:55:4d:7a:c2:a9:c6:aa:48:37:25:11:f9:90:ba:
fb:04:17:79:5a:a2:6b:a8:dc:87:62:37:f3:ac:b4:
dd:de:52:22:e3:3e:b1:6f:38:06:40:d0:38:75:0d:
48:a3:43:41:97:07:5e:d3:64:7a:81:ae:2b:16:04:
be:f9:79:6f:d7:e4:80:77:87:cc:c2:7c:7c:fb:8d:
09:69:1c:66:a4:01:f0:e7:78:e6:67:fc:bb:cc:d2:
10:af:30:df:09:57:2e:63:f8:48:21:6b:f8:34:83:
7b:fa:a6:68:07:df:9a:aa:1f:38:47:50:f7:65:c4:
b5:80:01:a7:e3:9b:e1:5e:fa:02:6c:16:40:c9:34:
90:86:d9:92:35:70:a1:2e:c7:e5:d4:49:3f:84:4c:
0b:48:67:d6:74:6b:54:36:d5:7d:03:bb:30:54:e6:
ba:4e:71:0f:8e:fe:e9:30:a1:1f:3e:47:ce:d1:e6:
c7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:52:F6:02:D2:D1:81:9D:EC:8E:87:17:E4:21:02:45:1B:A8:A5:77
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:73:1d:a3:e0:8e:a3:02:31:75:ab:63:d4:36:59:97:d8:
56:bf:48:ae:3e:fc:ce:c9:e5:61:72:19:9e:34:cf:bb:40:3d:
b6:dd:cb:01:ca:c5:48:0b:db:1c:5f:ab:d0:2e:c0:05:23:be:
04:88:76:ed:64:f7:b1:cc:b2:81:eb:c8:ae:aa:b1:e6:3d:31:
de:cd:77:9b:b4:b2:39:b0:06:08:5e:50:25:d8:30:5a:f2:ac:
4a:ee:a7:39:64:50:f2:25:be:6b:cd:75:32:09:a2:07:9b:62:
b9:42:38:1a:4d:14:e8:de:f3:0c:56:5b:10:41:b5:7f:91:1f:
0e:55:2b:03:6e:50:2e:d4:11:32:8f:d9:7a:27:99:47:2c:aa:
68:70:1d:67:59:86:63:19:f0:d9:04:3b:e2:e1:be:54:02:8f:
15:22:41:af:a0:d0:42:50:ca:16:6c:19:b9:31:14:98:b1:cc:
4f:89:5e:b1:8b:62:2e:c7:36:c3:91:66:66:66:b9:5b:96:84:
1c:17:45:51:17:3d:84:8f:32:7a:fd:1f:35:6d:c2:54:ac:02:
51:05:8f:fc:e6:d0:80:23:a9:b0:52:94:31:9d:7e:71:ed:86:
d7:2d:4e:8a:60:e4:2e:06:28:d5:38:f6:d5:cd:e0:e8:bd:1b:
d7:d1:a2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 08:04:25 2025 by rpki-client