Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: 7ijmRUA1p7TmCEkzXcO+kDgpQjqtx2G47LzaP/GWGKs=
Subject key identifier: 2C:96:98:47:D5:59:56:88:47:81:21:1E:54:B4:31:94:26:9B:F9:D7
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 0196A0894EB9E2FBAB1173E4D3BD37C4A198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1493
Signing time: Mon 05 May 2025 13:01:15 +0000
Manifest this update: Mon 05 May 2025 13:01:15 +0000
Manifest next update: Tue 06 May 2025 13:01:15 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: HiIUS5z3lh/JE66Is6rKN3yIYQkHRBKAykJBiZLEqa0=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:89:4e:b9:e2:fb:ab:11:73:e4:d3:bd:37:c4:a1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: May 5 13:01:15 2025 GMT
Not After : May 6 13:01:15 2025 GMT
Subject: CN=2c969847d55956884781211e54b43194269bf9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:8a:92:8f:c1:aa:f7:f3:2d:15:45:29:99:
d3:75:5b:2c:6b:7d:39:e5:5d:c0:34:f2:6f:07:4f:
66:2c:2a:95:c7:1e:48:dd:bd:f8:00:c3:a5:58:73:
cb:38:07:8e:f4:d3:25:05:7e:81:e1:d1:83:bd:b8:
e1:c9:4f:91:05:14:27:e2:36:a2:51:1c:b9:93:0e:
35:7a:55:a0:a9:59:cd:e0:99:c4:0a:6c:1d:08:f2:
72:13:12:a7:48:c5:54:ab:97:81:1a:e0:bd:94:e7:
be:0e:fc:fa:9f:64:33:30:5c:2b:2b:20:9c:62:74:
a4:9a:11:09:96:5d:ef:eb:97:4c:64:16:2f:0f:ca:
56:ec:d7:71:fc:2d:96:87:cb:73:18:32:e6:cd:31:
69:8e:60:51:f3:97:ba:c7:e4:2c:90:94:7c:38:a3:
1f:fa:7c:00:cb:ce:ee:d8:4a:a7:53:b1:10:ff:54:
f2:60:f8:3b:e7:7c:77:e1:60:cb:5a:f2:69:2a:5b:
de:a1:28:fc:fc:45:fe:85:78:3b:5e:fc:89:80:b7:
66:ff:bc:4b:91:bc:a4:f6:5e:95:b0:4d:4e:26:4f:
8e:b0:1c:a3:2b:c0:fd:69:1d:b6:0a:cf:72:fa:89:
68:8e:68:b5:69:c0:73:56:c5:2e:d1:2b:7c:4e:40:
c6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:96:98:47:D5:59:56:88:47:81:21:1E:54:B4:31:94:26:9B:F9:D7
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e0:d4:82:b6:22:ae:a5:49:aa:7c:4a:18:da:9e:c0:ff:b7:
94:ed:4a:3d:1a:93:01:fd:e1:79:85:ab:46:1c:a4:33:d6:9f:
66:1d:2d:d6:3d:72:04:f4:90:f5:5c:d5:40:ec:b8:26:80:34:
6f:04:53:b1:06:24:5b:08:e0:55:eb:6a:8d:43:70:96:e6:7f:
a7:01:ea:a6:9b:48:4a:b0:b1:1a:76:d7:2e:38:dd:a7:26:24:
1b:7a:a1:80:80:1d:eb:e7:9c:94:07:5b:c3:95:fe:a1:38:1b:
9d:3e:e2:19:c7:65:cf:c6:bf:8c:b1:82:54:da:6b:05:ea:84:
57:50:44:22:6f:7a:c8:04:7b:ee:c2:b0:72:f1:68:bf:6d:2c:
16:05:6e:a9:e9:79:27:06:8e:3d:03:76:9a:2e:93:46:e8:28:
50:86:24:dc:49:00:b0:a7:38:28:96:2e:a1:f5:33:40:b9:06:
bf:18:bb:b9:6a:ae:0f:d1:04:55:c2:1d:71:07:da:6a:85:d1:
29:78:6f:5e:53:8f:31:fd:7e:df:39:4d:6a:73:d1:87:5f:29:
94:48:33:45:48:48:6c:c4:c1:6a:46:d6:65:cc:cc:21:f9:61:
38:1d:e8:08:e4:d7:8d:69:c1:29:97:89:3f:57:f2:e1:38:b0:
3e:e2:9f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:56:50 2025 by rpki-client