Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: SR4sEA2bLRwKTcRrxr0SrfUpWVIqTVGTD42EZSMAZNM=
Subject key identifier: 49:41:D1:95:B7:02:DB:5E:3B:77:15:C4:F1:1F:A3:C0:7C:B3:A2:8C
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0196771ED1EF7D4CFF100839B22076A82BA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 028E
Signing time: Sun 27 Apr 2025 12:00:30 +0000
Manifest this update: Sun 27 Apr 2025 12:00:30 +0000
Manifest next update: Mon 28 Apr 2025 12:00:30 +0000
Files and hashes: 1: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: m4UmGvQ4S7vPKjb6LxMRNHr+jdnziBasjibw2ppAPO8=)
2: hjDsKa7PgCyxLZd-n7fPu4YJNMY.roa (hash: QbjTyyOso0F6DQuk2NtMyiPym++x2bG0DkG5mbISZEk=)
3: oXW8GWaKetGdBKsu2Z2IY-9T_9A.roa (hash: HV9TKH6QRnK6qfQ0eObEVR7yRAca23tprem52+Wydrk=)
4: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:d1:ef:7d:4c:ff:10:08:39:b2:20:76:a8:2b:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Apr 27 12:00:30 2025 GMT
Not After : Apr 28 12:00:30 2025 GMT
Subject: CN=4941d195b702db5e3b7715c4f11fa3c07cb3a28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:27:65:f2:e6:c9:af:e6:8b:7c:b1:42:99:
7f:fc:89:12:4e:ff:40:b7:38:14:43:f9:42:e4:b1:
18:8f:b1:57:b0:74:ec:bb:b9:a4:be:92:59:35:f8:
5e:93:d8:b0:ad:3f:36:c0:45:ef:0c:19:7e:9e:e8:
d8:b7:af:c0:4c:ca:07:e4:ef:35:3d:e9:14:92:ec:
72:93:7f:25:6c:2d:9a:d2:6b:00:16:1d:8d:5d:28:
ab:e1:a1:7e:7c:0c:63:8a:c8:49:56:96:c5:6e:44:
93:75:14:b3:c5:02:2b:3d:25:2b:39:30:72:1d:55:
51:b7:69:7c:94:b6:9f:29:8d:93:bc:bb:f5:9e:44:
1a:9a:02:f2:c8:28:06:5d:98:ce:1f:9f:fd:f7:2f:
a3:ce:a2:49:05:c5:8f:42:bc:7f:bb:3d:90:84:44:
40:71:56:09:3d:c9:54:d0:0b:6d:e2:d9:cf:18:f2:
41:14:78:f5:dd:47:69:11:9b:52:de:c4:8a:dd:35:
f4:3e:4f:e2:66:b3:19:c3:2a:35:8f:42:f2:cb:65:
86:94:43:79:df:b2:c6:51:67:2d:00:34:49:23:4b:
b9:28:85:02:02:e2:1f:fd:04:99:84:a0:f4:fb:47:
cb:72:b0:fd:ce:fc:58:8c:7d:90:06:64:3d:59:df:
e0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:41:D1:95:B7:02:DB:5E:3B:77:15:C4:F1:1F:A3:C0:7C:B3:A2:8C
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ee:92:f3:a0:89:18:52:dd:aa:c4:0f:38:50:e0:4e:ed:eb:
89:6b:43:cc:7a:5e:5f:20:58:5c:bd:5a:08:f4:f3:be:ca:a8:
62:42:7e:ea:20:d2:94:28:8d:d7:e9:37:ff:26:17:a6:7a:d1:
8e:e4:08:2e:50:8b:6a:84:f7:e4:02:df:93:82:ae:6b:63:0c:
f7:e8:48:c2:55:2c:1c:e4:86:d8:d5:87:c1:26:d2:07:c4:bf:
48:01:3f:c7:03:aa:77:b2:88:28:0e:32:37:d5:88:5f:ef:00:
d9:1e:89:8e:01:ad:ef:47:1b:3d:0a:41:6c:66:0b:cd:42:ed:
9e:26:28:91:39:08:8a:c9:26:d9:e3:14:35:78:57:cf:9c:96:
de:51:17:e8:52:e2:a6:8a:25:48:ee:1a:a0:bb:3d:ae:c9:5c:
36:e1:2f:6a:44:3b:75:67:2d:a5:dc:46:af:45:e7:08:c2:4b:
dc:61:4a:a3:28:bf:74:23:26:e3:43:b9:00:b2:c2:e4:9b:f9:
c5:0f:36:15:2b:9a:b7:60:46:52:cf:db:b4:4f:aa:ff:f2:3d:
89:cd:a1:48:ec:a6:67:7f:d9:54:0e:d6:13:92:f5:d5:48:01:
57:4b:7f:e5:69:30:3c:82:f0:f8:e4:96:ea:70:a0:2e:48:12:
0a:8e:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:21:49 2025 by rpki-client