Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
File: pxn9xw058Tw3hNMlrith8PPJn0g.mft (raw, json)
Hash identifier: 5Wvf/7IEa3ah8U65Ax8rD1east3h2dt/aN/JhvdD4eM=
Subject key identifier: B4:C2:63:2A:F9:2D:16:6F:C1:A7:69:40:8A:40:A9:99:D4:2D:66:18
Authority key identifier: A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
Certificate issuer: /CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Certificate serial: 019676E7E5C7002C946D4DF5DB5131B8BB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 11:00:31 +0000
Manifest this update: Sun 27 Apr 2025 11:00:31 +0000
Manifest next update: Mon 28 Apr 2025 11:00:31 +0000
Files and hashes: 1: ldBjKa6qQD6NaVa0xAumkdWo3gI.roa (hash: 2YMpg6Ripbk87w4Re6g4mOYhXFU2yNWWD+lkjoRwRkM=)
2: pxn9xw058Tw3hNMlrith8PPJn0g.crl (hash: c4wJv0xj7uW5Uj/xS1T6eWGd88192BI1oxf0GyjpUIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e7:e5:c7:00:2c:94:6d:4d:f5:db:51:31:b8:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a719fdc70d39f13c3784d325ae2b61f0f3c99f48
Validity
Not Before: Apr 27 11:00:31 2025 GMT
Not After : Apr 28 11:00:31 2025 GMT
Subject: CN=b4c2632af92d166fc1a769408a40a999d42d6618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:cc:b1:0b:c0:cb:73:4f:70:4e:8b:c8:ce:
4c:7f:c3:66:4a:78:97:e6:33:89:03:21:b9:35:77:
24:eb:fc:45:b1:9c:2c:06:c3:2e:47:87:25:da:da:
2a:c1:58:2a:ef:fa:f6:40:9c:b9:c7:bb:9c:39:43:
4f:20:94:ac:ba:6a:9b:4b:09:fc:9e:86:06:eb:0e:
bc:24:e9:17:df:2f:10:9b:6b:a2:0c:2d:39:c4:cf:
47:1b:79:1d:20:cc:0d:d3:c3:66:d1:0f:66:2f:71:
50:c1:80:d6:94:3e:9f:34:b5:35:99:6e:b9:6f:5d:
01:df:dc:ad:37:2e:17:04:d8:76:f7:00:be:72:85:
74:95:6c:1c:ca:ad:54:92:7b:f6:c3:6e:49:7d:04:
02:78:74:a7:8d:79:e2:6c:b8:5d:20:64:54:6b:e2:
91:a7:f4:b3:b1:5a:10:82:7c:2b:2f:a1:38:fb:9b:
d2:71:fe:12:88:d0:7b:ef:46:3e:ec:93:66:c1:09:
84:a9:1c:4f:bb:41:36:ef:02:ea:cd:86:18:8f:5f:
c8:93:1e:74:a3:f8:f9:c4:2e:f6:c6:61:66:5f:e5:
b3:c5:33:44:62:ee:af:1b:47:dc:61:68:34:e7:b6:
5f:5b:77:e0:ff:80:7f:c5:d5:8a:7d:02:4b:a4:d8:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:63:2A:F9:2D:16:6F:C1:A7:69:40:8A:40:A9:99:D4:2D:66:18
X509v3 Authority Key Identifier:
keyid:A7:19:FD:C7:0D:39:F1:3C:37:84:D3:25:AE:2B:61:F0:F3:C9:9F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxn9xw058Tw3hNMlrith8PPJn0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d72bf3-1ca9-4023-acf5-d5a423442d35/1/pxn9xw058Tw3hNMlrith8PPJn0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:be:ac:6b:20:fd:fb:6e:b9:63:33:50:5a:42:0b:c0:78:21:
a5:22:bf:d3:07:15:81:9e:48:49:04:72:ff:c3:23:46:30:d4:
5e:89:ee:7a:c5:fe:92:1c:ed:a1:4b:8c:18:c5:5c:23:34:09:
3b:8c:c0:1d:31:f0:4d:81:60:5c:4f:fd:17:ce:25:ed:4c:14:
74:b2:0c:e0:98:2c:29:b4:08:d3:51:73:fe:0d:49:1e:ec:02:
74:30:9e:d8:8f:e3:60:d0:1a:d5:32:c7:16:06:52:52:bf:03:
70:a4:7b:be:a2:67:0c:f6:00:cd:f7:7c:61:ba:30:28:e0:a0:
eb:6d:7b:93:06:87:d3:9b:c1:dd:c8:90:ed:f9:b8:d2:1e:a5:
07:d1:13:20:c4:f4:39:08:4d:eb:79:cd:65:2f:49:89:e4:a7:
80:16:8e:5d:66:fd:0c:f5:11:f9:ab:d9:97:ee:04:cc:3a:fa:
51:12:f8:d9:a3:8e:0d:ea:de:ee:5c:f8:94:5c:5a:99:dc:ae:
f9:9c:41:6d:ca:f8:8a:23:c0:f7:f4:13:ee:3e:c3:2a:df:d0:
e9:88:b3:92:70:38:86:e2:68:99:ee:74:50:ce:03:09:4a:f2:
aa:e2:15:54:ac:6f:5e:19:d0:8a:8b:0e:2d:47:60:5c:a0:73:
28:5f:75:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:05 2025 by rpki-client