Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
File: PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft (raw, json)
Hash identifier: MiK/cw5MilAWwyVMbZTsFStzP530QJ5HnMrYkHKcbtE=
Subject key identifier: B4:BC:B4:3E:BF:71:B1:63:2A:49:7F:6D:91:CA:28:C9:72:82:7F:B4
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 01969002D84E5245A73BFCA3E4C90D7FBE68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
Manifest number: 06C1
Signing time: Fri 02 May 2025 08:00:27 +0000
Manifest this update: Fri 02 May 2025 08:00:27 +0000
Manifest next update: Sat 03 May 2025 08:00:27 +0000
Files and hashes: 1: PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl (hash: 3QOh6boRhCuf/+XIJQJMgZwedw8rXnt52Q5KrYWG89Q=)
2: cIvicQwvTTI6J8NGKDerxCkfUpQ.roa (hash: KRBjaA428X4oNlaq/pV1Uncb9bEVRkbIjJIh/xlTHjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:d8:4e:52:45:a7:3b:fc:a3:e4:c9:0d:7f:be:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: May 2 08:00:27 2025 GMT
Not After : May 3 08:00:27 2025 GMT
Subject: CN=b4bcb43ebf71b1632a497f6d91ca28c972827fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:19:14:7d:08:bd:ca:25:86:35:af:c2:c6:c9:
0f:36:5c:f4:7d:7e:c6:22:1e:83:1d:a7:53:89:9f:
67:0d:e4:3c:03:ec:07:8b:25:bc:bf:79:8c:4c:71:
9f:e5:50:6d:a5:92:9d:7c:28:6a:31:b2:34:2e:11:
b0:de:f1:08:3e:49:8d:b0:79:1d:4a:0c:ce:09:c9:
dc:0f:7a:03:51:c1:79:ce:78:a2:cc:d2:48:60:13:
28:a9:39:1b:3c:bb:8d:1e:6b:db:2d:f3:a6:28:c0:
d7:74:33:2a:4c:b8:67:6e:80:2d:fe:97:18:fa:d1:
38:89:bd:8d:ef:c5:36:8d:65:ec:6e:0c:1b:85:d6:
13:2d:a9:b1:82:46:2e:0d:7a:9c:94:5f:e5:02:3e:
6b:8d:a3:32:9c:ae:bf:87:a7:7f:bd:de:24:48:31:
3d:ee:6c:cd:27:92:0d:d6:ce:66:c3:e8:32:17:e7:
c8:64:02:7a:bf:d7:2f:32:d6:91:90:cd:92:04:9d:
e5:9e:41:6e:f2:f5:66:da:d3:78:86:c3:fe:98:2b:
a2:fe:c4:42:14:61:96:6c:20:3a:a8:3a:f1:17:f5:
88:90:43:3f:93:62:79:6b:5e:1a:f6:7c:c0:b3:0a:
70:9e:98:52:7e:a5:0d:da:c5:a2:ae:73:2b:ed:85:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BC:B4:3E:BF:71:B1:63:2A:49:7F:6D:91:CA:28:C9:72:82:7F:B4
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:83:89:f9:c7:1d:49:b0:58:2a:b9:17:90:fd:5e:65:25:23:
3e:81:24:72:d2:1a:f3:90:66:6f:69:8c:61:d9:53:f1:b6:ed:
8b:bb:68:89:96:b2:da:2e:3f:98:08:25:53:26:b6:92:f8:d1:
9e:1b:91:5e:8f:82:af:25:eb:5e:86:e4:24:aa:7d:07:a8:e7:
48:36:09:12:cc:9a:95:a3:de:2c:0d:06:09:0f:7c:67:fe:56:
5f:7e:59:ee:5c:72:b7:85:03:71:34:ad:3f:ab:63:30:9a:58:
92:86:89:40:58:b1:9a:64:ee:91:d3:d6:69:a1:6a:6b:ff:c8:
51:f8:a3:2a:99:e2:87:f9:6d:8c:49:35:74:6d:82:1d:03:9b:
5b:55:ab:16:36:38:3b:dd:13:72:bc:c9:cb:41:3f:4e:50:74:
29:3f:35:9f:67:b0:f5:ba:65:bd:13:11:91:62:54:1c:9e:3b:
c4:34:95:6e:9a:64:81:9e:d1:3d:a2:91:f7:dc:ce:cc:1a:fe:
61:0d:29:28:82:3b:e2:12:a2:17:bc:88:57:5d:58:a3:0f:22:
9e:1a:75:2c:d8:53:ed:b0:6d:4b:b0:5a:a7:c8:9a:1a:6d:d1:
48:60:e6:e7:41:00:4c:bc:73:76:39:67:4c:13:6b:fa:bb:02:
87:79:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 14:33:41 2025 by rpki-client