Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: 6jIdsxRYKHDRmo5mj5odmepp+NiMckzKPeKN5UpyphM=
Subject key identifier: 16:35:70:B6:3A:27:16:37:4F:4E:5A:C8:79:15:23:D6:B4:47:F8:10
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 01967DC598FBF810DA8FC11737D944566257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1481
Signing time: Mon 28 Apr 2025 19:00:23 +0000
Manifest this update: Mon 28 Apr 2025 19:00:23 +0000
Manifest next update: Tue 29 Apr 2025 19:00:23 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: 7siO0p30w/LGnJQvtdh5NU2omzvfXNlVADCVw+rW8Ro=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c5:98:fb:f8:10:da:8f:c1:17:37:d9:44:56:62:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Apr 28 19:00:23 2025 GMT
Not After : Apr 29 19:00:23 2025 GMT
Subject: CN=163570b63a2716374f4e5ac8791523d6b447f810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:06:a3:69:ff:95:40:9c:34:14:fb:aa:5d:
8c:40:74:9f:f2:7a:68:83:67:60:a0:5d:14:2a:6c:
02:29:ed:13:ae:c3:7f:11:d9:85:bd:5f:19:f3:18:
f0:2b:2d:16:6a:80:58:cf:9b:21:c6:e5:59:35:b1:
d2:bb:8b:e1:49:cf:0a:fa:6e:d7:a3:30:32:ad:26:
b5:fb:5f:09:2e:2c:7e:39:3e:04:36:5b:28:20:85:
c3:d7:01:5d:df:e4:61:c5:b3:9d:d6:c5:af:e4:7a:
69:f7:00:a6:d3:82:28:ce:88:93:e9:75:54:f4:fb:
cd:d9:7d:f4:5b:a6:3f:18:b4:86:23:84:2d:4a:23:
43:72:65:1c:bd:6e:ae:23:a7:cf:87:e1:95:3e:24:
d2:66:fe:94:72:5a:48:85:54:01:02:74:1b:09:ea:
42:1f:27:f0:92:05:fe:83:94:c6:94:26:10:b2:d9:
43:fe:f8:1c:6e:8b:89:ea:1e:0f:42:d7:e6:84:ee:
87:91:7d:85:ca:ae:7e:69:af:e4:48:b7:8b:75:15:
ae:a6:9d:34:59:d9:91:66:5a:3b:a7:a4:1f:10:b4:
a7:0b:ac:f1:bc:36:02:a6:bf:60:bb:4f:29:96:37:
10:8e:cd:b3:e3:21:37:d1:03:aa:c0:4f:e8:31:53:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:35:70:B6:3A:27:16:37:4F:4E:5A:C8:79:15:23:D6:B4:47:F8:10
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:37:ea:25:b1:dc:89:44:a0:02:93:77:ef:5a:c1:fd:31:2b:
ae:9f:23:53:d8:cf:fe:d8:e3:be:e8:8a:20:81:8c:fe:a8:ae:
fe:82:fe:5d:40:02:06:58:0a:07:af:fd:63:6b:24:ae:cb:1b:
6a:97:24:0c:0e:45:95:f7:4b:45:53:2f:7c:72:03:a2:d9:0a:
5d:ed:7f:02:5b:83:c5:1a:08:16:9a:3f:d3:2e:29:70:4d:18:
5e:19:fa:04:64:24:06:6c:a2:f1:09:a1:ec:c2:76:76:35:c3:
70:cf:08:b0:22:b6:40:27:dd:fb:85:60:67:cd:df:95:03:e1:
f3:30:b4:6c:19:7e:3b:c1:ca:86:3e:4f:1e:42:81:5e:66:7d:
c2:f9:17:83:6d:be:c1:9a:26:d8:a9:c1:53:84:2a:6e:6e:e1:
ee:30:ca:c0:63:cf:54:77:d7:ce:12:0d:9b:ac:86:ef:ff:9b:
9c:a5:24:98:75:5c:d3:b7:59:fe:7d:3e:a4:dd:84:97:3a:e4:
79:13:8d:7e:13:11:c4:64:d6:78:7c:43:e4:10:17:c5:e6:c2:
b7:1a:d9:08:e5:62:14:5f:48:ef:e2:22:20:40:f8:9b:89:25:
72:b1:06:bc:1c:3c:25:e9:9f:68:e6:16:ed:ae:32:45:fe:20:
e0:28:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:18:40 2025 by rpki-client