Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
File: PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft (raw, json)
Hash identifier: wnb9I8Vw19tbzn2JlMFLpNETHuLeckUxhzGrYRVGQEE=
Subject key identifier: 25:78:E0:D2:4C:CB:F4:08:B7:DE:25:72:08:D7:26:B9:6E:9E:CB:97
Authority key identifier: 3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
Certificate issuer: /CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Certificate serial: 01969371971A109CE17149897CF41B5865C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
Manifest number: 0323
Signing time: Sat 03 May 2025 00:00:16 +0000
Manifest this update: Sat 03 May 2025 00:00:16 +0000
Manifest next update: Sun 04 May 2025 00:00:16 +0000
Files and hashes: 1: 0-NbRqc8zQ3-jTIYZOwXbybz260.roa (hash: F4aAH1P/CqccbM0rJQ6/jB1mC+tQi8oCbtTD8Uif+I8=)
2: PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl (hash: Ws/DMN9Y8hOP3p6TDGIieebj1agh1OqO7AD+J7ThEME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:71:97:1a:10:9c:e1:71:49:89:7c:f4:1b:58:65:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6abe5c48aecebd4a237e153c3684f30608d444
Validity
Not Before: May 3 00:00:16 2025 GMT
Not After : May 4 00:00:16 2025 GMT
Subject: CN=2578e0d24ccbf408b7de257208d726b96e9ecb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:5f:48:0f:96:36:d9:39:70:e8:a3:4e:19:
1a:af:6a:05:a9:32:7e:e5:3a:40:b5:38:27:3e:29:
71:df:4c:5e:2f:21:2e:1f:d3:1a:b5:86:bc:36:ca:
48:43:8c:94:02:a9:df:e0:1d:97:54:10:f1:ab:5d:
dc:ed:26:4c:98:bc:2c:00:be:97:cb:67:c1:6e:8f:
ef:f8:4f:9b:8a:2d:b4:2f:27:3c:5d:8c:51:f9:88:
1e:c0:9e:a1:07:16:6b:6c:23:d0:cc:b5:8c:01:97:
6c:fa:92:31:cf:77:24:f9:1d:b1:f0:c8:8f:8a:bc:
a6:a8:e5:06:cd:f7:a7:fd:3a:b1:6d:8b:23:b7:ad:
1d:31:fa:4e:0c:6b:55:0f:3a:af:97:db:04:52:8c:
a0:c6:df:5e:93:c0:a9:2f:79:f3:40:f2:a4:13:e1:
bd:cf:4a:57:45:19:3d:fe:fe:22:64:9b:40:03:02:
ec:4d:c7:e3:18:1c:04:5a:32:90:c3:68:83:4f:b6:
6a:af:2a:c5:0e:6b:7d:f4:0b:4f:c9:ad:d3:85:37:
22:2b:b9:cd:29:62:e9:9c:c3:1b:11:e0:55:88:bb:
15:e0:44:0f:e4:e4:06:3f:a6:5a:84:61:dd:52:06:
b4:30:6b:c5:30:2d:ce:71:c8:98:81:00:e1:d2:d1:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:E0:D2:4C:CB:F4:08:B7:DE:25:72:08:D7:26:B9:6E:9E:CB:97
X509v3 Authority Key Identifier:
keyid:3D:6A:BE:5C:48:AE:CE:BD:4A:23:7E:15:3C:36:84:F3:06:08:D4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWq-XEiuzr1KI34VPDaE8wYI1EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5fb803-4333-4175-90df-aec14ea17ebf/1/PWq-XEiuzr1KI34VPDaE8wYI1EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:53:bb:5b:04:07:7e:80:9f:96:43:a4:08:e8:19:e0:8f:0b:
c4:cc:d9:34:e5:8c:a8:5c:71:b4:c0:97:32:89:aa:6c:63:33:
04:a1:0a:4e:02:60:a6:2c:b0:dd:22:8b:95:b7:68:bc:5e:48:
33:7f:4a:3e:95:47:f4:1d:fd:75:f4:50:14:cc:43:e3:25:0a:
cb:7e:b1:d0:08:3b:4c:2f:8e:ce:16:69:74:90:f1:a7:c9:70:
d1:f6:f6:2e:c5:92:dd:3e:7a:88:22:2e:35:02:54:42:50:bf:
08:c1:67:55:b1:5a:07:2a:34:3e:6a:64:2e:fd:73:69:94:e1:
62:33:2d:c2:9d:3f:11:3b:52:02:0c:a5:d9:c7:25:60:35:56:
78:bc:e2:0d:ab:96:c0:f6:d2:95:61:f5:08:4d:5b:ea:6e:cf:
9e:fd:b7:ac:15:cf:5f:ce:0b:12:96:33:b7:f6:29:f9:4e:c1:
2f:43:c9:fe:33:37:e1:5f:91:7e:ff:09:e0:9a:ed:15:cb:8d:
98:02:93:af:d4:72:12:71:19:ac:32:98:00:2a:2a:04:c3:a6:
91:eb:66:f9:3e:f1:dc:8c:11:20:ba:b8:32:0c:a6:90:4a:23:
29:fc:ea:54:79:64:73:23:c0:70:b9:10:cf:a2:99:e0:f7:e4:
7f:6d:68:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:15:13 2025 by rpki-client