Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File: PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier: ZlEJhbPMwHH3amm2+RT9+VHWBkliGuVt91Ez1GZeea4=
Subject key identifier: A3:61:85:47:03:29:47:0A:EB:2D:28:E3:D6:C6:C1:12:91:D7:F2:17
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 01964D7EF19D77800930D745441ADB830D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number: 1468
Signing time: Sat 19 Apr 2025 10:01:27 +0000
Manifest this update: Sat 19 Apr 2025 10:01:27 +0000
Manifest next update: Sun 20 Apr 2025 10:01:27 +0000
Files and hashes: 1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: DOqvZkJJ+W7jckEAigZT6VfNZtU+9hjSdkS6wyE83NM=)
2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:f1:9d:77:80:09:30:d7:45:44:1a:db:83:0d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Apr 19 10:01:27 2025 GMT
Not After : Apr 20 10:01:27 2025 GMT
Subject: CN=a36185470329470aeb2d28e3d6c6c11291d7f217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:29:61:78:07:96:ec:2d:2b:11:ee:06:e7:
a2:f0:7f:09:29:cd:19:c5:03:25:29:21:2e:1b:33:
39:ea:d7:13:32:21:2b:97:0e:dc:2e:44:c0:ba:ca:
0d:f2:d7:ec:e3:a6:f8:ca:54:73:62:55:3b:59:c7:
84:c8:a3:dc:ab:d7:31:ba:ff:05:ee:e5:80:9a:01:
9c:ee:29:fb:4e:b1:d9:16:d0:01:95:1e:12:08:a1:
89:8e:ef:90:37:73:18:24:5e:a7:86:8a:29:95:90:
3e:82:b4:42:ae:f3:8a:2c:4a:ad:03:3c:bb:31:ae:
aa:11:09:84:f5:f9:08:e9:ff:ba:a5:d5:84:e1:9b:
f5:eb:3e:59:55:8a:ee:da:ec:6e:ae:10:e3:98:8e:
37:e8:ae:e2:d7:88:2f:2c:14:c3:03:2c:eb:9a:9c:
11:b9:7c:e5:57:5e:79:3a:9b:0c:ff:9d:9d:88:90:
54:d2:c4:97:2c:e1:6e:e6:00:61:67:0b:4b:0c:ef:
dc:97:91:52:37:f5:07:39:74:e4:31:a0:b0:33:f7:
54:e0:fb:a1:ae:13:fc:88:82:b1:17:ee:55:0f:cf:
ed:a3:ed:06:42:64:34:4a:57:0f:9f:39:29:38:da:
3b:19:3d:44:10:9d:b2:b9:db:ff:07:32:22:86:1a:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:61:85:47:03:29:47:0A:EB:2D:28:E3:D6:C6:C1:12:91:D7:F2:17
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:cf:79:12:a0:09:ba:8f:5b:57:b8:23:a5:e9:d7:3e:0d:15:
69:c3:02:e7:b8:45:38:ea:e4:52:42:4f:bc:60:fd:e9:d8:e9:
a0:d7:aa:c8:91:42:22:01:cf:59:6d:2e:77:6a:77:99:f4:7f:
c6:f5:b2:65:00:f9:69:35:bf:7b:ca:b1:85:58:6b:68:ab:bd:
57:21:58:44:b2:a5:23:10:c0:8b:22:ab:5c:9d:69:fa:59:a7:
eb:b6:13:00:a6:ad:d5:97:c3:7b:d7:61:9b:67:87:63:c1:ea:
e4:52:43:2c:c5:b6:5b:9c:38:09:44:a4:f1:44:d9:3a:0b:bb:
df:db:3b:e3:46:07:b7:f6:5a:01:a5:18:b7:ac:8f:5d:6c:6d:
f0:e3:4a:8a:73:d1:62:98:b0:75:94:af:6d:c7:e9:5f:bd:85:
f4:a1:77:6e:fc:67:34:9f:e5:55:ac:b4:80:df:2e:e0:53:a7:
b0:e2:af:d1:82:fd:42:f4:03:7c:20:b2:16:a8:85:99:fc:c5:
55:62:cb:b1:ce:bb:b9:44:d5:b5:dc:9e:7d:3b:f9:ea:bc:a6:
b1:39:19:7b:44:f8:81:f4:93:2e:4f:65:67:37:65:ad:dc:9d:
ac:4b:44:cf:e0:b8:b7:38:40:20:82:bd:4a:e8:cb:ee:1d:7f:
9d:78:ad:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfvGdd4AJMNdFRBrbgw14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNzBmZTFkNzVmN2RhNzZkMmUzZGMzNDRmYjFmMGIwYjY5
ZGUwMDEwHhcNMjUwNDE5MTAwMTI3WhcNMjUwNDIwMTAwMTI3WjAzMTEwLwYDVQQD
EyhhMzYxODU0NzAzMjk0NzBhZWIyZDI4ZTNkNmM2YzExMjkxZDdmMjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsegpYXgHluwtKxHuBuei8H8JKc0Z
xQMlKSEuGzM56tcTMiErlw7cLkTAusoN8tfs46b4ylRzYlU7WceEyKPcq9cxuv8F
7uWAmgGc7in7TrHZFtABlR4SCKGJju+QN3MYJF6nhooplZA+grRCrvOKLEqtAzy7
Ma6qEQmE9fkI6f+6pdWE4Zv16z5ZVYru2uxurhDjmI436K7i14gvLBTDAyzrmpwR
uXzlV155OpsM/52diJBU0sSXLOFu5gBhZwtLDO/cl5FSN/UHOXTkMaCwM/dU4Puh
rhP8iIKxF+5VD8/to+0GQmQ0SlcPnzkpONo7GT1EEJ2yudv/BzIihhqQ+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNhhUcDKUcK6y0o49bGwRKR1/IXMB8GA1UdIwQY
MBaAFD1w/h1199p20uPcNE+x8LC2neABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYt
Yjg1MmJkODEyM2YwLzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNDU2ZTUtNjFkZC00YWUzLWEyNGYtYjg1MmJkODEyM2Yw
LzEvUFhELUhYWDMybmJTNDl3MFQ3SHdzTGFkNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV895EqAJ
uo9bV7gjpenXPg0VacMC57hFOOrkUkJPvGD96djpoNeqyJFCIgHPWW0ud2p3mfR/
xvWyZQD5aTW/e8qxhVhraKu9VyFYRLKlIxDAiyKrXJ1p+lmn67YTAKat1ZfDe9dh
m2eHY8Hq5FJDLMW2W5w4CUSk8UTZOgu739s740YHt/ZaAaUYt6yPXWxt8ONKinPR
YpiwdZSvbcfpX72F9KF3bvxnNJ/lVay0gN8u4FOnsOKv0YL9QvQDfCCyFqiFmfzF
VWLLsc67uUTVtdyefTv56rymsTkZe0T4gfSTLk9lZzdlrdydrEtEz+C4tzhAIIK9
SujL7h1/nXitpg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:57:19 2025 by rpki-client