Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
File: PwbJ3z-o-T2e8O0EscoENduLxlA.mft (raw, json)
Hash identifier: rdv0y/Gfr8YGaRY7DJ9ZFIiP655L45QkEp+rlVlcSxU=
Subject key identifier: 10:29:95:29:7F:7D:7E:46:FC:FC:15:4B:67:E8:08:78:62:4D:EC:13
Authority key identifier: 3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
Certificate issuer: /CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Certificate serial: 019676E81D1B4161585AD3E55C80DA2F98B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 11:00:45 +0000
Manifest this update: Sun 27 Apr 2025 11:00:45 +0000
Manifest next update: Mon 28 Apr 2025 11:00:45 +0000
Files and hashes: 1: PwbJ3z-o-T2e8O0EscoENduLxlA.crl (hash: ohPFcNeLaIb7z3uU5WdrvhGxob8j7ARPtGXKVji6o4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:1d:1b:41:61:58:5a:d3:e5:5c:80:da:2f:98:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f06c9df3fa8f93d9ef0ed04b1ca0435db8bc650
Validity
Not Before: Apr 27 11:00:45 2025 GMT
Not After : Apr 28 11:00:45 2025 GMT
Subject: CN=102995297f7d7e46fcfc154b67e80878624dec13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:7c:38:37:5c:77:63:ab:e9:62:a4:25:b1:
35:65:66:60:8f:6b:6d:a9:8b:e2:93:cc:15:bf:4b:
b9:d4:69:06:44:09:28:7c:aa:be:04:77:dd:0e:c9:
a0:b8:51:b0:5f:04:90:33:a7:13:31:06:3e:6b:5b:
07:6e:2e:bf:09:bc:25:6a:b5:23:62:c6:ec:f3:c2:
5f:b4:00:73:db:62:b5:7e:fa:67:9e:8f:72:a8:a5:
cc:26:14:1d:cc:38:0d:28:56:da:84:16:77:1d:dd:
60:03:5e:ed:16:14:cd:14:5f:be:93:c1:97:72:7a:
3a:1e:e6:29:64:e2:f1:6a:66:6a:7c:e7:b8:c4:b6:
0d:87:12:02:5e:ad:de:9c:77:0a:a8:2e:cc:4f:02:
dc:f2:d3:dc:80:bc:a0:b8:cd:7a:6c:9b:00:49:df:
4e:62:7b:a7:13:d2:de:e2:b3:60:e0:21:06:73:dd:
60:b0:db:5b:6c:de:4d:f8:d9:82:7c:3e:c7:de:01:
f7:32:5a:0b:71:b3:c3:0b:3f:82:d4:80:4d:89:f0:
a6:1d:5f:8f:aa:c3:e1:06:1e:54:6e:55:a7:0e:d3:
e5:28:cd:a5:6a:36:00:dd:4d:b5:bf:64:b9:90:62:
44:78:83:3f:25:3f:74:a6:7a:95:33:fe:0b:01:52:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:95:29:7F:7D:7E:46:FC:FC:15:4B:67:E8:08:78:62:4D:EC:13
X509v3 Authority Key Identifier:
keyid:3F:06:C9:DF:3F:A8:F9:3D:9E:F0:ED:04:B1:CA:04:35:DB:8B:C6:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwbJ3z-o-T2e8O0EscoENduLxlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d00e3d-54c7-436f-a8ce-338aa0cf98e2/1/PwbJ3z-o-T2e8O0EscoENduLxlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:59:90:69:57:0f:9b:f6:f1:3a:b7:0b:51:58:69:49:f5:54:
1d:f5:92:b1:51:c2:81:b3:38:5a:56:e7:75:8a:5c:38:9a:db:
4e:08:85:c1:8e:dc:f1:dc:15:dc:40:e2:6c:b2:b6:d2:1c:97:
3c:c9:4e:cf:25:8b:68:82:72:6d:0f:2d:5d:7f:a7:6f:07:f6:
b5:19:4e:5b:d1:ff:69:37:38:f5:6f:e1:67:83:33:72:65:34:
d7:a2:37:c0:18:b3:b2:68:a0:3d:3f:77:bb:ac:db:41:9c:1d:
01:99:dc:72:3d:cc:20:50:e5:0f:62:4f:fd:bd:b6:bb:7e:01:
cd:e0:4b:ec:34:45:8c:22:0e:84:f6:f5:0b:11:66:22:c2:32:
14:96:52:19:b8:87:71:55:85:d4:f4:88:72:23:49:6f:ab:52:
8f:32:19:12:25:b3:61:0f:04:2d:d2:6a:46:9d:4b:ff:b3:ff:
b8:19:17:7b:b5:c4:1c:0f:ca:02:12:40:39:08:3a:05:c6:33:
18:bc:1a:e1:be:ca:83:a7:9c:eb:76:43:21:28:b9:cd:01:cb:
6e:4b:06:62:60:84:2e:c4:54:65:47:06:99:e0:0c:89:83:1a:
a2:ee:7e:5c:9a:8f:24:a6:1f:d1:57:f1:1f:e7:8e:6d:96:f4:
dc:99:1e:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ26B0bQWFYWtPlXIDaL5iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDZjOWRmM2ZhOGY5M2Q5ZWYwZWQwNGIxY2EwNDM1ZGI4
YmM2NTAwHhcNMjUwNDI3MTEwMDQ1WhcNMjUwNDI4MTEwMDQ1WjAzMTEwLwYDVQQD
EygxMDI5OTUyOTdmN2Q3ZTQ2ZmNmYzE1NGI2N2U4MDg3ODYyNGRlYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSZ8ODdcd2Or6WKkJbE1ZWZgj2tt
qYvik8wVv0u51GkGRAkofKq+BHfdDsmguFGwXwSQM6cTMQY+a1sHbi6/CbwlarUj
Ysbs88JftABz22K1fvpnno9yqKXMJhQdzDgNKFbahBZ3Hd1gA17tFhTNFF++k8GX
cno6HuYpZOLxamZqfOe4xLYNhxICXq3enHcKqC7MTwLc8tPcgLyguM16bJsASd9O
YnunE9Le4rNg4CEGc91gsNtbbN5N+NmCfD7H3gH3MloLcbPDCz+C1IBNifCmHV+P
qsPhBh5UblWnDtPlKM2lajYA3U21v2S5kGJEeIM/JT90pnqVM/4LAVKe4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAplSl/fX5G/PwVS2foCHhiTewTMB8GA1UdIwQY
MBaAFD8Gyd8/qPk9nvDtBLHKBDXbi8ZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kMDBlM2QtNTRjNy00MzZmLWE4Y2Ut
MzM4YWEwY2Y5OGUyLzEvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kMDBlM2QtNTRjNy00MzZmLWE4Y2UtMzM4YWEwY2Y5OGUy
LzEvUHdiSjN6LW8tVDJlOE8wRXNjb0VOZHVMeGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1mQaVcP
m/bxOrcLUVhpSfVUHfWSsVHCgbM4WlbndYpcOJrbTgiFwY7c8dwV3EDibLK20hyX
PMlOzyWLaIJybQ8tXX+nbwf2tRlOW9H/aTc49W/hZ4MzcmU016I3wBizsmigPT93
u6zbQZwdAZnccj3MIFDlD2JP/b22u34BzeBL7DRFjCIOhPb1CxFmIsIyFJZSGbiH
cVWF1PSIciNJb6tSjzIZEiWzYQ8ELdJqRp1L/7P/uBkXe7XEHA/KAhJAOQg6BcYz
GLwa4b7Kg6ec63ZDISi5zQHLbksGYmCELsRUZUcGmeAMiYMaou5+XJqPJKYf0Vfx
H+eObZb03JkeJw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:49:18 2025 by rpki-client