Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File: Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier: mDq3vcHZFSz1zavve9Hz2Sj4dDc6WCyhe6dEVJDZZcM=
Subject key identifier: 8A:D7:04:4E:04:DE:5E:BD:98:B7:A6:EE:85:61:71:F4:F3:12:03:D9
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 019653B7085906F28911AE69F4E75FE15D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 15:00:26 +0000
Manifest this update: Sun 20 Apr 2025 15:00:26 +0000
Manifest next update: Mon 21 Apr 2025 15:00:26 +0000
Files and hashes: 1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: uhYL/p7O8FY2HCEhavjESQDgivsKOw0RJUUSVtgDPq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:08:59:06:f2:89:11:ae:69:f4:e7:5f:e1:5d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Apr 20 15:00:26 2025 GMT
Not After : Apr 21 15:00:26 2025 GMT
Subject: CN=8ad7044e04de5ebd98b7a6ee856171f4f31203d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:f7:fa:fb:6c:83:9f:5d:89:c6:4c:8f:cd:
d1:a1:e1:2f:2d:5a:fd:22:d9:59:57:e3:e0:b9:fe:
42:10:86:5b:93:ad:16:aa:be:1b:7a:4d:96:d8:db:
ce:38:02:60:75:e8:47:86:b9:55:c8:e9:3e:71:a0:
57:a1:a1:ee:d8:54:eb:ef:55:ce:00:6d:8e:5a:4e:
cf:fd:e9:4d:37:24:31:32:7e:76:8b:39:40:f5:b0:
13:1c:e4:23:61:e9:63:c7:4d:4f:f8:c6:c0:38:37:
26:bb:a2:06:13:c7:23:b7:29:99:04:86:e0:87:2e:
52:8e:9e:78:cd:11:40:44:fe:56:a3:f9:e1:78:77:
dc:29:3f:3f:43:11:88:24:52:4b:84:13:d5:3e:81:
12:0e:da:15:70:ad:40:e8:49:51:b4:cb:7b:42:93:
d1:db:eb:38:63:57:05:41:06:af:ab:56:b6:b2:f9:
9b:2e:53:3f:d2:42:6e:20:d9:6d:89:90:51:24:b2:
e2:14:23:ea:5b:54:9f:cb:de:ba:7b:9b:b0:a6:8f:
d4:91:fc:59:43:a0:e6:99:64:16:74:8d:cd:c2:c6:
1c:71:56:2c:a7:14:c6:a7:d0:4a:85:c5:1f:6c:4d:
c5:d9:d0:8d:e7:18:2d:4c:aa:7d:02:f9:f3:f6:4e:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D7:04:4E:04:DE:5E:BD:98:B7:A6:EE:85:61:71:F4:F3:12:03:D9
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9f:4f:44:7e:f1:09:0f:6d:6e:48:b6:10:52:5d:ab:77:55:
d3:69:62:b1:3c:91:4f:9a:73:26:6e:41:36:88:fb:cc:2c:9d:
2b:58:d8:85:1b:12:f2:b7:97:c4:ac:d9:47:59:1f:44:d0:6b:
ed:78:ea:1a:aa:07:f7:1e:ca:9c:15:01:b7:b0:52:64:ce:b1:
d7:54:77:4c:8a:30:98:fc:c7:59:81:82:56:ba:9f:05:53:9b:
17:dc:ac:d3:d0:d1:7a:ce:02:13:3e:95:6c:9e:bd:25:0a:b9:
46:ef:50:df:1b:7a:59:0c:91:da:c7:0b:d6:38:74:a4:31:b9:
c9:1c:a2:a7:49:c0:16:99:bf:61:db:42:fc:b3:e5:19:9c:84:
e9:44:23:d2:e8:48:cf:42:2b:88:d6:b3:ab:3a:19:ae:6a:18:
11:c3:4f:fb:99:33:53:9a:40:3b:75:21:d7:bc:a2:e7:9b:b0:
80:48:ef:10:03:52:74:1c:8f:e0:fe:0a:d4:84:5a:6d:0c:c3:
15:e2:35:75:b5:34:3d:77:4d:01:8a:1f:71:0a:a0:0b:c0:0b:
8d:27:94:6b:ea:be:8b:85:42:af:ab:e8:52:e2:f1:f6:53:ac:
e9:8b:cb:10:e3:a7:0a:65:68:83:57:cc:41:62:8e:fe:a0:13:
46:87:f6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:41:27 2025 by rpki-client