Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: kIu0oITXiLyImBAG5euIYM8mQTn/sa8moUbjZsWkcbI=
Subject key identifier: 48:FB:F3:29:D2:C1:64:6F:41:15:73:E0:64:6B:1D:9E:2C:F4:CE:28
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 01974EC57C4A7FC649583821A7D5DBBEF6B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 09:00:54 +0000
Manifest this update: Sun 08 Jun 2025 09:00:54 +0000
Manifest next update: Mon 09 Jun 2025 09:00:54 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: h+DZRi50+QnbyFjnJHYD6gnJiljqN55sSL8clMLTlV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:7c:4a:7f:c6:49:58:38:21:a7:d5:db:be:f6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Jun 8 09:00:54 2025 GMT
Not After : Jun 9 09:00:54 2025 GMT
Subject: CN=48fbf329d2c1646f411573e0646b1d9e2cf4ce28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:88:63:ea:b7:84:a4:0f:4f:64:f7:04:0d:
8d:4f:13:d4:4d:bc:d4:27:f2:8b:0b:55:92:df:85:
90:c4:ab:bc:85:42:b2:ea:82:12:3f:d1:bf:fe:09:
a3:35:fc:e3:be:2f:9d:8f:c5:f5:ea:9c:b8:ad:88:
40:38:cf:3c:2e:e0:8a:ac:fd:4d:13:83:7a:9f:2d:
83:ea:69:b1:45:1d:20:38:3b:57:f6:27:ad:41:31:
ae:f7:e0:72:7f:c9:21:60:c2:07:80:e6:52:58:48:
8f:1a:8c:f0:ac:4f:87:36:df:23:32:42:5e:96:1b:
6d:bb:60:6d:fe:3e:c4:6d:d6:fd:49:7f:a3:bc:34:
14:06:7e:e9:39:16:db:e0:47:00:ae:d5:3b:a7:71:
fe:e4:63:2b:5f:3f:a7:81:af:92:28:0b:61:63:a9:
e9:c6:68:63:83:66:b4:d2:0a:32:ff:8a:ab:c1:05:
90:5f:d1:74:da:f6:9e:7e:64:4e:14:06:42:e1:cd:
4d:0a:26:f9:b7:40:9c:af:93:7b:b8:aa:2a:14:56:
4e:74:34:98:9e:3d:d0:d2:52:8e:7c:10:8b:86:eb:
16:db:9e:99:be:f8:23:0f:b0:e7:44:ca:3f:92:9b:
24:1e:b2:f7:74:ec:89:86:d5:cb:5f:3e:13:6e:c2:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FB:F3:29:D2:C1:64:6F:41:15:73:E0:64:6B:1D:9E:2C:F4:CE:28
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a5:a4:2c:b7:93:5b:ce:bd:62:77:e2:f2:8a:51:e0:47:c3:
b6:10:e9:75:4d:3e:91:71:56:68:e4:0f:5b:8b:61:88:21:fc:
1e:3b:26:ff:e5:9c:f2:05:33:5b:93:f5:f4:50:35:61:04:c6:
9d:ea:62:1b:32:57:e4:bc:ea:91:28:35:66:15:73:86:75:f8:
9e:10:92:0f:b5:55:c4:9e:64:e1:c5:53:f7:a9:5b:ab:5e:55:
34:0e:67:0f:25:db:59:6a:d6:a3:e8:64:86:e1:4f:4d:cb:91:
ba:7b:9f:1e:35:05:50:7f:f5:80:77:37:1b:df:20:df:1c:cc:
64:1b:41:1c:7c:ac:32:fa:94:01:ab:51:a6:14:37:7f:92:78:
ae:bc:60:3e:3f:48:97:28:92:8e:88:e2:00:f7:13:54:2f:88:
12:2e:f5:e0:ed:7d:77:df:b1:11:7b:c3:99:f9:93:ae:71:bf:
a5:33:98:2c:18:68:81:cb:1b:4f:6b:6f:1e:3e:c1:21:22:5e:
27:39:04:f3:91:26:5e:f2:d3:af:cf:8f:b0:8d:47:f3:f7:98:
d8:c4:1e:1a:7e:d4:4b:91:88:cd:e1:1d:6b:f1:24:55:4b:e4:
27:81:72:12:d5:e7:c9:76:dc:3f:a8:0c:58:6d:f8:0c:9c:fb:
cb:3b:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:41:28 2025 by rpki-client