Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: PV3lKBNaQP+1s8YiG6j4zaCdqk8dQic/B9SEl9r0abM=
Subject key identifier: DF:4F:AA:BB:F5:8F:1E:59:3E:68:EC:20:7C:F2:21:D5:F9:4F:AD:F4
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 01975422EDC2D1D9A953B3A32FC2234F34B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 10:01:04 +0000
Manifest this update: Mon 09 Jun 2025 10:01:04 +0000
Manifest next update: Tue 10 Jun 2025 10:01:04 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: JmHdE2OFd3mXW57j8eZeHkhZ912TSbNp/xoeWZbV5xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:ed:c2:d1:d9:a9:53:b3:a3:2f:c2:23:4f:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Jun 9 10:01:04 2025 GMT
Not After : Jun 10 10:01:04 2025 GMT
Subject: CN=df4faabbf58f1e593e68ec207cf221d5f94fadf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:64:a7:29:88:99:7c:25:f3:6d:c4:dc:9a:
0b:6a:f5:1c:46:98:7a:65:fd:0c:1d:f4:92:7b:77:
80:43:68:bd:08:46:ba:f4:24:76:bc:c7:fc:5a:dc:
27:08:fb:61:28:81:b8:aa:0c:01:7f:00:4b:56:42:
5f:12:14:90:55:56:ec:aa:d3:5b:dd:34:ff:ce:68:
b7:6c:49:c9:aa:16:59:f3:4c:fd:2a:09:95:e0:8c:
46:40:b8:76:e0:77:2a:cc:81:38:d1:c0:dc:26:bd:
f6:f5:1d:91:0d:8f:5b:3c:98:3e:48:a1:4e:c2:81:
c2:c1:64:64:6c:26:f8:89:e3:fa:8a:ac:cb:22:9a:
8e:7e:28:0f:82:d4:b1:0b:42:32:a8:35:74:28:65:
62:93:72:8f:e0:23:5b:b1:8d:6b:63:6f:56:82:05:
98:db:0f:1c:b4:a7:39:c3:62:20:9f:33:96:89:09:
de:b0:96:ce:66:7c:75:a6:31:d2:df:48:9b:1f:12:
cf:63:79:e1:ff:4c:07:5b:8e:37:f3:20:19:d7:6c:
23:e1:7a:00:1c:9a:e7:05:be:b6:e2:21:16:02:a8:
77:80:c8:33:70:c1:3f:92:15:1c:f0:99:c5:1a:bd:
aa:f4:f1:5d:46:c2:e0:1c:ad:11:8b:81:4c:db:ba:
93:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4F:AA:BB:F5:8F:1E:59:3E:68:EC:20:7C:F2:21:D5:F9:4F:AD:F4
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c7:71:98:d5:1f:92:15:f4:d6:99:4b:49:29:d8:a3:dc:89:
c3:90:ba:9c:c0:c6:0b:c4:08:4e:c4:7b:12:a9:00:eb:63:1f:
e2:64:70:60:93:58:4b:20:49:32:aa:06:f7:b4:ee:a6:68:97:
a1:ff:8b:99:3c:8e:14:35:3c:c7:8a:11:6b:6d:35:ce:07:bf:
01:d1:70:0a:e9:21:d9:b5:f1:e0:51:ac:f9:2d:02:3e:f9:22:
a5:28:a8:d8:64:44:c9:4e:53:4d:ea:d8:9c:05:e6:40:08:bb:
10:c6:10:ca:18:1f:02:cc:dd:87:bf:6b:3b:40:16:0a:0f:c0:
53:23:0e:49:61:3f:4e:c3:aa:db:9a:8e:b5:09:00:39:9c:3c:
1d:0a:64:78:e8:ad:f1:8c:04:be:ef:7f:01:e1:44:4a:08:b5:
05:5c:e8:f8:be:d4:19:d0:44:17:a1:91:11:5e:85:af:1e:62:
22:ca:cf:88:a5:2c:b2:7d:54:80:aa:f1:8c:76:c6:85:7c:bf:
ec:52:84:36:88:bc:e2:ff:47:bd:54:f9:f3:2f:bd:7e:45:6e:
9c:43:90:1a:9b:2b:7f:f5:bb:12:12:37:7c:33:ed:62:38:e4:
27:82:bc:79:58:a7:cd:71:34:58:13:67:b7:da:6d:98:18:a8:
df:36:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:03 2025 by rpki-client