
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
File: pWT0IqqXs96coPZ5Gfv4LrH93dI.mft (raw, json)
Hash identifier: ZatFTt9IdRiSRjjoUsylBiEHEd/HZk8LP8+0jdx0YJM=
Subject key identifier: 52:C4:ED:5C:39:32:09:13:0A:3A:1F:BA:C3:36:41:7E:D1:42:03:A9
Authority key identifier: A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
Certificate issuer: /CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Certificate serial: 01968B4A80C219996440E8E263F5B6C57AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
Manifest number: 0544
Signing time: Thu 01 May 2025 10:00:37 +0000
Manifest this update: Thu 01 May 2025 10:00:37 +0000
Manifest next update: Fri 02 May 2025 10:00:37 +0000
Files and hashes: 1: pWT0IqqXs96coPZ5Gfv4LrH93dI.crl (hash: jzwxcnRoJ8vJPD+1Vpp4sLOraxdnDG4Slu/Pm+N06uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:80:c2:19:99:64:40:e8:e2:63:f5:b6:c5:7a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a564f422aa97b3de9ca0f67919fbf82eb1fdddd2
Validity
Not Before: May 1 10:00:37 2025 GMT
Not After : May 2 10:00:37 2025 GMT
Subject: CN=52c4ed5c393209130a3a1fbac336417ed14203a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a5:25:10:a6:f3:e6:64:89:55:2c:e4:22:ab:
aa:d3:15:dd:85:19:97:ff:08:37:ad:0f:85:22:6a:
2e:1f:a9:3c:1a:63:d2:53:2c:af:72:1e:cc:0d:2e:
90:ce:5b:aa:0e:ba:ab:be:1b:3e:22:da:7c:e5:71:
67:59:fe:83:0d:35:73:d6:19:26:2d:d2:84:f1:15:
76:50:4c:a1:cc:f3:57:8e:dd:c0:90:15:3b:99:92:
ee:78:aa:ea:60:b0:c3:1b:a6:be:bb:11:72:c2:fd:
7e:54:c6:ed:56:65:e6:79:02:69:2d:50:48:00:55:
d6:ec:a7:e7:cd:ae:73:8f:7e:8b:ff:12:c2:de:48:
81:ec:ea:c4:87:9e:66:f3:6a:86:c4:6a:4f:eb:16:
06:df:7f:d1:43:23:6d:eb:ab:5c:72:54:e1:ce:ba:
a6:b6:da:c6:87:aa:17:0d:12:25:22:2f:50:9f:43:
43:0e:31:28:94:40:e1:74:e3:e1:e6:e7:00:07:26:
ed:9d:80:ea:30:18:5d:1f:68:ca:d7:2a:dc:b6:0e:
98:6f:3b:6b:a2:0c:8b:70:b3:da:3b:89:11:53:64:
be:50:c1:3a:1f:d1:c7:68:1e:f6:e7:9a:ee:11:1d:
e6:9c:9a:17:20:a3:aa:05:c6:e2:33:15:8f:48:06:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:ED:5C:39:32:09:13:0A:3A:1F:BA:C3:36:41:7E:D1:42:03:A9
X509v3 Authority Key Identifier:
keyid:A5:64:F4:22:AA:97:B3:DE:9C:A0:F6:79:19:FB:F8:2E:B1:FD:DD:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWT0IqqXs96coPZ5Gfv4LrH93dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d59e98-210f-4b55-ac4a-0268381107af/1/pWT0IqqXs96coPZ5Gfv4LrH93dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8a:25:5b:c1:9c:b3:01:60:d3:65:e7:4a:49:ba:cb:f8:0a:
ea:45:05:02:63:40:55:2f:01:46:57:b1:bd:4c:80:8c:25:0b:
01:08:e4:fe:bc:92:56:d9:ae:c2:e3:52:fe:f2:66:d1:01:7f:
d7:89:23:29:84:0c:61:06:0c:07:fc:a6:1d:50:24:d8:f6:23:
30:95:48:f5:3f:f6:26:72:ea:33:4b:26:59:80:2d:57:8a:a6:
6f:a4:0b:42:da:c7:1f:79:f5:81:55:e3:e3:19:32:1a:2b:4e:
c9:f0:ad:b8:11:61:eb:31:6a:15:52:44:e9:ce:35:cb:d5:dc:
82:67:2d:84:5b:f8:64:1c:c6:a9:2f:85:3e:2c:33:88:6f:0f:
fe:f1:2d:c6:cd:29:27:7e:fe:b4:f9:73:df:35:7c:2c:ff:63:
92:15:ce:18:4d:6a:a3:88:06:e6:f7:40:a7:42:e2:b8:e5:7d:
8f:3d:77:17:38:20:ed:1d:d4:e9:33:c3:9e:6b:1c:25:af:a8:
f4:2c:ac:34:6b:25:ea:20:f9:d2:f8:69:66:11:ad:99:a2:e5:
c6:92:63:2a:6f:29:a8:39:3c:30:ab:5d:9f:56:b0:22:7e:4f:
58:8f:53:76:c2:8b:0d:b2:64:2f:d4:33:ab:00:60:53:21:c5:
ba:a5:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:41:42 2025 by rpki-client