Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File: pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier: Ws8CxSXW2qVi6zVcZR22zoauYytFHCN7+0+2CoIXmrM=
Subject key identifier: 8D:4E:00:7D:35:9F:A4:FE:89:08:96:C8:17:38:2C:EA:69:E6:FB:91
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer: /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial: 01967E3353B2EEB365DE5A274C99A04614BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 21:00:14 +0000
Manifest this update: Mon 28 Apr 2025 21:00:14 +0000
Manifest next update: Tue 29 Apr 2025 21:00:14 +0000
Files and hashes: 1: iKx7DVcDIp4-3Ht_VZ0qOWxo2fU.roa (hash: zpfuponymK+r2Tkz+w9BOZiVOOpvDfzySSg7CkzrHaM=)
2: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: ye/W0MSD7hFGQZ+BeBa7nJl8btPJvmNovhIrjDGabhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:53:b2:ee:b3:65:de:5a:27:4c:99:a0:46:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Validity
Not Before: Apr 28 21:00:14 2025 GMT
Not After : Apr 29 21:00:14 2025 GMT
Subject: CN=8d4e007d359fa4fe890896c817382cea69e6fb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a7:c1:1e:24:f2:50:91:36:60:4b:88:68:21:
61:bc:f7:d8:51:c6:82:f6:23:1e:d2:e3:ef:06:a6:
14:9a:3d:d0:64:b2:8a:13:b1:85:3a:95:c1:e1:dd:
36:53:ae:ae:5f:8c:a6:ad:72:1e:05:4d:e9:6d:47:
7f:5a:07:ad:3e:bc:38:98:10:c2:dd:d5:e9:1a:d0:
6a:93:1b:91:6c:81:2e:dd:f6:e8:04:fb:60:92:cd:
b6:a7:82:4b:50:20:fc:12:58:8b:c0:e9:23:ae:43:
4a:b9:14:f7:40:54:a2:e4:54:72:ee:09:2e:db:90:
db:39:d6:3e:65:1f:d0:ac:86:9b:47:42:15:a7:ab:
24:40:bb:de:3a:3d:47:d1:c5:eb:1e:47:43:07:bd:
81:66:d4:8e:3b:32:85:3e:06:5f:3e:25:77:af:2f:
53:c5:f1:b0:11:e8:31:1f:0c:35:05:95:7d:e6:b9:
be:b9:dc:b8:c1:a4:13:e6:ac:da:5f:18:ae:fb:53:
46:e4:59:9d:c8:ba:72:7f:b0:e5:19:a2:87:96:f3:
bc:81:27:ab:39:a6:d2:c1:6c:7d:3b:04:71:23:5c:
97:ed:86:ea:1a:67:8d:c2:2d:26:34:41:47:1a:8e:
04:fa:b6:1a:29:7c:94:f4:2d:09:97:ce:a4:b9:ef:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4E:00:7D:35:9F:A4:FE:89:08:96:C8:17:38:2C:EA:69:E6:FB:91
X509v3 Authority Key Identifier:
keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:05:21:1b:20:af:90:34:a8:88:fc:ee:7c:9e:bc:5f:9e:58:
37:03:58:96:28:5a:fc:a3:47:cd:1e:09:4f:f5:cc:2b:2c:a6:
99:ad:62:8e:11:f5:7f:15:5a:6c:f5:6d:ea:ee:bb:f4:c9:d0:
bb:b8:6a:0f:57:c7:f0:c8:79:30:cf:a8:8b:4c:ff:6e:13:f1:
21:10:f9:99:84:49:42:ed:80:38:d4:e9:66:58:a3:02:08:e7:
71:8a:d9:38:5f:3f:74:45:5c:72:ff:f0:97:4c:d9:67:29:57:
7a:5e:91:6e:24:36:ef:6c:d7:75:56:4f:93:ac:ef:85:a8:d4:
5b:ef:42:19:41:84:11:c8:21:3c:b1:10:96:57:7c:74:6b:c3:
e4:cb:97:d6:de:5b:b6:74:eb:f9:7d:e5:62:ac:f1:94:84:ae:
85:5a:ed:cb:44:60:5b:a1:05:5b:0c:40:06:86:92:5f:45:37:
e0:3c:71:2e:ce:e8:54:49:de:09:09:ad:51:ae:cd:86:4b:9c:
1f:ed:4b:27:f6:22:ad:91:38:4c:3b:cb:9a:c2:da:ef:9f:69:
95:7b:fd:16:48:77:4e:ab:be:1a:88:c1:d8:86:c5:04:8d:2c:
52:34:c1:3e:70:f0:d4:1f:30:42:9f:3f:71:07:7a:a0:61:df:
4c:7f:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:03 2025 by rpki-client