Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: 0IG5Y1FBSeOlGFQ+EM/V38cESU9xmKzB9sP6/lDjxC0=
Subject key identifier: 49:63:85:00:AC:B5:AE:22:26:6F:6A:9C:13:2D:27:83:61:F2:6F:66
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 01963EE6B092B8449CF0FD9A35822C5ACC86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 14F4
Signing time: Wed 16 Apr 2025 14:00:27 +0000
Manifest this update: Wed 16 Apr 2025 14:00:27 +0000
Manifest next update: Thu 17 Apr 2025 14:00:27 +0000
Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: fnxim4VaC/DoXbqrQehf9iamOW+x/ecntphaa7fJSjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:e6:b0:92:b8:44:9c:f0:fd:9a:35:82:2c:5a:cc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Apr 16 14:00:27 2025 GMT
Not After : Apr 17 14:00:27 2025 GMT
Subject: CN=49638500acb5ae22266f6a9c132d278361f26f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:fe:23:63:76:aa:92:89:21:b6:32:06:7d:
3c:5d:a1:29:44:f0:f6:e1:7b:94:66:23:b3:e3:c0:
68:2f:a8:b4:8e:59:6e:cc:a7:eb:ba:ed:80:96:ce:
69:4f:1a:9b:73:2c:1b:72:6f:09:b1:ba:b6:56:52:
a0:2f:d3:56:c9:53:d4:34:9d:e7:f7:82:17:48:dc:
8e:45:da:13:8c:d6:75:30:1e:bf:dd:55:73:f7:c6:
bc:9e:47:e5:b3:19:ef:e9:5a:92:a5:6d:0a:cf:44:
ab:3a:d0:9c:90:8c:84:62:94:d9:ff:0b:85:1a:30:
d7:e4:46:69:57:d7:74:74:dd:7e:31:da:ba:01:e1:
e4:83:1a:5f:0b:b0:a2:b8:1a:d7:f5:9c:f4:4d:29:
07:cb:16:2b:0c:54:dd:3a:7b:02:5b:62:8d:8f:05:
a3:8d:9e:16:74:a8:42:f3:90:65:a7:0e:0c:b8:ef:
6a:42:b6:19:ed:6d:68:d3:29:af:40:f0:75:1e:bf:
71:45:b4:38:6e:8b:4f:44:7d:67:ae:c2:c1:3f:d4:
1d:c9:8a:9b:94:99:d4:ad:40:fe:f2:16:f3:11:72:
e3:a8:d5:3c:1f:1e:cf:53:32:0d:92:f3:09:fb:99:
2c:10:49:e1:4d:92:5d:30:5e:6e:20:9b:66:6c:bf:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:85:00:AC:B5:AE:22:26:6F:6A:9C:13:2D:27:83:61:F2:6F:66
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:21:26:e8:50:5e:e0:36:ac:f9:2b:7e:de:57:f1:02:4f:d5:
dc:32:18:cb:f3:06:c1:6b:ea:f0:41:45:6e:4c:84:f1:73:69:
04:ed:e8:96:ce:0e:83:65:4d:49:ec:81:df:38:a8:be:76:30:
a4:7c:1d:ff:e8:ce:23:8d:2e:a0:2c:f0:75:91:3f:e4:9c:68:
77:0a:c2:30:ab:c6:18:0c:91:9a:45:93:9b:7d:a0:a6:60:21:
59:00:73:32:8e:ba:39:f1:95:51:87:c6:1a:0a:c1:38:52:ab:
10:4d:74:f9:e7:0b:90:c0:a8:e3:59:18:5f:64:ec:1c:1b:9f:
3e:e5:bf:89:f3:ac:04:c9:e0:96:e9:98:3f:9a:a2:ae:58:dc:
94:7f:08:b8:7d:62:cc:ad:ee:f3:79:6d:85:3b:12:27:21:5f:
0e:9d:c4:9d:51:00:5d:31:71:bb:d3:68:22:51:d8:18:84:02:
70:2d:48:5d:e6:10:01:4c:c0:31:af:de:de:30:e3:13:64:6f:
00:d6:5f:60:57:c2:08:e0:62:18:38:3d:32:9c:52:21:8b:cd:
e3:6b:1c:6b:f4:f8:d1:7e:ea:6d:90:10:89:ad:36:06:55:af:
26:07:ba:9b:a1:3c:0b:f5:51:5a:f7:84:2c:4e:a3:d5:34:cc:
04:6b:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:57:09 2025 by rpki-client