Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
File: PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft (raw, json)
Hash identifier: jNMWP6gjkUuQvmKorVxwOMAtUeXfTfKU+rkw85OSBZ8=
Subject key identifier: EA:4B:E3:A2:DF:F5:1D:CB:5B:FA:B9:A2:8B:25:35:DE:26:C5:BE:F6
Authority key identifier: 3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
Certificate issuer: /CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Certificate serial: 01964443E03BEA8DA1F1DE284E717BB6AEB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 15:00:21 +0000
Manifest this update: Thu 17 Apr 2025 15:00:21 +0000
Manifest next update: Fri 18 Apr 2025 15:00:21 +0000
Files and hashes: 1: LHapQb8ix5yDr9XdIdq3SLfgGJQ.roa (hash: OTBcvGKIAwNH7dYThkaA46DYb8Du7nUhG7Wp8v0hqOA=)
2: PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl (hash: 3sAKl0jmjqt78iVh9DuTiShkq78v+0k4jq+0KqiyUzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:e0:3b:ea:8d:a1:f1:de:28:4e:71:7b:b6:ae:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f058e432bbf72369750a9951d5259430b5ca4bf
Validity
Not Before: Apr 17 15:00:21 2025 GMT
Not After : Apr 18 15:00:21 2025 GMT
Subject: CN=ea4be3a2dff51dcb5bfab9a28b2535de26c5bef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:25:6c:19:3d:f0:17:91:b5:76:3d:91:42:33:
0e:f8:f8:ce:46:d6:67:2a:90:22:12:09:38:f4:6c:
82:2a:bb:11:14:db:ad:c1:52:02:07:2f:4e:a5:fe:
46:19:72:b0:0b:42:c0:aa:d8:f5:48:62:8e:00:a1:
70:bf:63:52:ae:f4:f6:2a:e8:d3:71:4e:b2:4a:d2:
6f:ae:72:f5:86:ae:81:81:61:de:36:ae:7f:cc:09:
09:00:cb:c9:57:76:43:08:15:e9:88:9f:6b:f2:d6:
09:b2:1d:ae:25:50:d1:45:f3:d9:c1:1d:c6:d2:e6:
35:60:21:07:ea:84:48:e0:db:73:25:91:43:b3:07:
4c:15:5c:4b:2f:fc:73:e2:f8:4f:07:aa:a4:db:e2:
8c:29:0e:07:b4:f5:06:d1:81:48:ac:a2:c8:9b:ff:
6c:ba:63:c1:76:10:e4:12:0b:44:2d:77:55:d7:13:
a9:bf:c0:6f:f6:2a:cf:76:cb:58:4b:32:a5:1e:fb:
5b:48:d9:2f:10:12:36:dd:72:09:a5:9c:a0:5b:fb:
61:23:c9:e0:b9:99:d4:3d:06:d5:76:40:0b:83:2f:
51:75:52:66:65:3a:e5:e0:ac:bc:53:da:53:e5:23:
ee:23:65:d5:f7:6d:6c:af:12:ea:10:b2:25:25:10:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:E3:A2:DF:F5:1D:CB:5B:FA:B9:A2:8B:25:35:DE:26:C5:BE:F6
X509v3 Authority Key Identifier:
keyid:3F:05:8E:43:2B:BF:72:36:97:50:A9:95:1D:52:59:43:0B:5C:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PwWOQyu_cjaXUKmVHVJZQwtcpL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/de68c6-650f-4dfa-bd13-000082c123e7/1/PwWOQyu_cjaXUKmVHVJZQwtcpL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e2:18:6e:25:fd:c2:7b:89:c1:cc:6c:cd:ff:dd:d8:16:a5:
de:50:5f:09:74:e2:74:cc:6f:57:99:5a:1e:81:41:98:5e:74:
6d:42:9f:63:23:a0:c4:37:9b:f1:ce:4d:76:8a:34:f0:5b:68:
a9:34:c3:b7:a0:bd:d4:9e:d6:7e:dd:64:78:51:0b:74:6d:7e:
25:c2:0d:52:cb:fe:4a:5d:59:8d:b0:62:9d:92:34:5e:9e:08:
3c:72:4b:bf:a4:c2:88:65:92:c4:ae:c7:4e:43:47:81:44:bc:
59:45:0d:04:1e:6f:ac:06:bd:ac:69:ac:25:a7:e7:82:37:03:
18:c4:83:a0:16:cf:88:eb:7a:15:c6:20:c5:a8:8f:e2:e8:32:
d8:1a:7e:20:3a:c6:65:dd:32:bc:cf:79:fe:78:79:91:0d:5a:
c7:98:da:f6:76:9d:e5:a7:c1:20:37:bc:6b:29:17:c4:8e:14:
ef:5e:b1:51:da:ea:0f:e1:da:75:8a:1a:18:31:6d:1e:d1:38:
34:ac:36:7a:9f:58:28:68:4c:4f:6e:2f:a6:6b:cf:a5:23:7e:
1e:67:49:83:ee:0c:3b:d1:b1:98:0b:24:8e:6a:56:98:5f:99:
9a:a6:e2:b2:d7:19:b8:27:b7:25:f9:19:f5:ec:3d:b1:99:aa:
1e:37:45:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEQ+A76o2h8d4oTnF7tq63MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMDU4ZTQzMmJiZjcyMzY5NzUwYTk5NTFkNTI1OTQzMGI1
Y2E0YmYwHhcNMjUwNDE3MTUwMDIxWhcNMjUwNDE4MTUwMDIxWjAzMTEwLwYDVQQD
EyhlYTRiZTNhMmRmZjUxZGNiNWJmYWI5YTI4YjI1MzVkZTI2YzViZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iVsGT3wF5G1dj2RQjMO+PjORtZn
KpAiEgk49GyCKrsRFNutwVICBy9Opf5GGXKwC0LAqtj1SGKOAKFwv2NSrvT2KujT
cU6yStJvrnL1hq6BgWHeNq5/zAkJAMvJV3ZDCBXpiJ9r8tYJsh2uJVDRRfPZwR3G
0uY1YCEH6oRI4NtzJZFDswdMFVxLL/xz4vhPB6qk2+KMKQ4HtPUG0YFIrKLIm/9s
umPBdhDkEgtELXdV1xOpv8Bv9irPdstYSzKlHvtbSNkvEBI23XIJpZygW/thI8ng
uZnUPQbVdkALgy9RdVJmZTrl4Ky8U9pT5SPuI2XV921srxLqELIlJRCF9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpL46Lf9R3LW/q5ooslNd4mxb72MB8GA1UdIwQY
MBaAFD8FjkMrv3I2l1CplR1SWUMLXKS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMt
MDAwMDgyYzEyM2U3LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9kZTY4YzYtNjUwZi00ZGZhLWJkMTMtMDAwMDgyYzEyM2U3
LzEvUHdXT1F5dV9jamFYVUttVkhWSlpRd3RjcEw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAheIYbiX9
wnuJwcxszf/d2Bal3lBfCXTidMxvV5laHoFBmF50bUKfYyOgxDeb8c5Ndoo08Fto
qTTDt6C91J7Wft1keFELdG1+JcINUsv+Sl1ZjbBinZI0Xp4IPHJLv6TCiGWSxK7H
TkNHgUS8WUUNBB5vrAa9rGmsJafngjcDGMSDoBbPiOt6FcYgxaiP4ugy2Bp+IDrG
Zd0yvM95/nh5kQ1ax5ja9nad5afBIDe8aykXxI4U716xUdrqD+HadYoaGDFtHtE4
NKw2ep9YKGhMT24vpmvPpSN+HmdJg+4MO9GxmAskjmpWmF+ZmqbistcZuCe3JfkZ
9ew9sZmqHjdF8Q==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:23 2025 by rpki-client