Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
File: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft (raw, json)
Hash identifier: z4xeQcizsxWHBaEh0KklC5RSDOgyyyS3+PNMDSuNsGk=
Subject key identifier: 43:0C:E9:03:16:42:78:06:61:5E:0C:8C:5E:6E:B2:CE:1C:92:9A:E6
Authority key identifier: 3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
Certificate issuer: /CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Certificate serial: 0196767A6F0DE2E0D47A43F525E72487D3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
Manifest number: 1511
Signing time: Sun 27 Apr 2025 09:00:57 +0000
Manifest this update: Sun 27 Apr 2025 09:00:57 +0000
Manifest next update: Mon 28 Apr 2025 09:00:57 +0000
Files and hashes: 1: B29MvHY6zeEvGzG4mIu0G_C1t3k.roa (hash: 2w6PM7Xh404gJeZoq9hPqo7jK8P7Uk4U1TIQbaY+1sM=)
2: PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl (hash: 6rZvmZHPgYtDex3IMq6x1rolEiwdD7aR7TtGusNQ/Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:6f:0d:e2:e0:d4:7a:43:f5:25:e7:24:87:d3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c45ce4085f02eb8a0ed1afd2b7991a8aa998334
Validity
Not Before: Apr 27 09:00:57 2025 GMT
Not After : Apr 28 09:00:57 2025 GMT
Subject: CN=430ce90316427806615e0c8c5e6eb2ce1c929ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:d8:ca:27:7d:e5:50:e4:c3:0a:6e:4e:65:
36:ff:fc:8c:f6:7c:17:24:61:e1:b2:13:af:2f:98:
14:18:3c:30:fd:66:ac:6a:dd:26:d5:17:ae:b6:23:
62:7c:57:9d:21:e1:c2:d8:14:f3:55:f2:91:5b:33:
de:94:18:eb:58:ec:00:1a:39:ac:73:6f:83:0d:4a:
fb:85:8e:16:5a:22:b5:11:f1:17:a8:46:01:16:12:
96:5d:aa:33:d6:a2:6c:c8:08:2d:df:6b:1d:99:c9:
3a:5c:97:f0:ac:75:f7:b2:cb:33:23:4f:54:53:c0:
f0:af:3f:47:ad:fa:f0:b6:54:84:8a:0c:b5:3d:e7:
67:2c:2a:46:22:41:6f:58:95:10:de:cd:f8:81:f9:
82:4c:b9:82:d2:1c:88:02:14:6f:07:22:c7:aa:8b:
44:8f:dd:b1:83:07:8f:57:d4:df:23:90:22:e0:45:
f5:9a:a6:a2:91:e4:d9:3d:7b:9c:87:14:56:24:7a:
45:b5:5c:2f:0d:9e:a7:94:af:d9:8c:fa:cf:65:55:
cb:0a:87:c1:29:00:90:26:56:47:ce:c0:46:3c:21:
bd:d6:49:7b:e0:52:7c:6d:ce:90:c5:1d:c1:74:5f:
1e:16:68:4d:97:48:ee:db:c6:67:1d:e6:96:a9:e3:
da:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:E9:03:16:42:78:06:61:5E:0C:8C:5E:6E:B2:CE:1C:92:9A:E6
X509v3 Authority Key Identifier:
keyid:3C:45:CE:40:85:F0:2E:B8:A0:ED:1A:FD:2B:79:91:A8:AA:99:83:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/97334a-c97f-47c4-9982-d8676a80cfc7/1/PEXOQIXwLrig7Rr9K3mRqKqZgzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:63:43:0a:c0:2b:f6:58:8d:7d:62:9c:aa:1a:3b:9f:ea:ef:
36:cc:e4:51:7c:67:a4:d6:1c:e4:b6:b4:b3:d1:09:ed:0b:02:
71:05:09:6b:47:3a:62:11:96:65:7a:b2:70:59:fa:8c:23:9f:
ac:04:96:d5:0c:92:5d:e0:2d:39:15:29:f8:3b:0b:a9:1b:f8:
42:3c:ce:2a:a1:07:22:b7:ae:4e:6f:15:d3:df:76:6f:b6:14:
d3:b3:0c:9c:56:cb:ea:bc:7a:73:3b:bc:58:fb:1b:1e:65:f4:
f0:eb:32:44:2d:0c:11:43:78:0b:83:cb:4b:43:53:6f:dc:56:
ff:36:a2:e6:f3:e9:9f:0c:f3:c7:d9:0c:e9:c3:e3:de:83:f3:
8b:16:ea:0c:a6:1e:2b:29:7e:96:89:0f:7e:7e:c2:3c:d7:85:
68:cc:b7:40:ab:0a:c2:d2:15:e4:bb:0b:f5:c2:79:32:7e:3c:
82:4f:11:8e:e4:39:be:3d:0e:52:d7:98:cc:94:e6:c4:4c:44:
25:f4:c5:7e:23:51:78:86:e4:f7:08:19:5d:a9:bd:a6:6a:b8:
41:3b:60:29:15:87:20:c9:6d:09:85:ff:c8:eb:80:b1:ef:aa:
4a:eb:1b:d5:d1:fa:7e:6b:11:7c:3c:c5:01:a3:06:77:32:a6:
f9:fe:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:12:06 2025 by rpki-client