Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: 2luAKbCdbqAnfkOzT5JKTAhYevK3H/Uq0cLTEeZ3evc=
Subject key identifier: 48:AA:29:60:73:1A:95:A2:5B:6E:A3:5B:F9:4E:BA:F0:F2:2A:D1:0F
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 01975DCAE2C68F5C9BC7F6F8DB6DC688CCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 07:01:06 +0000
Manifest this update: Wed 11 Jun 2025 07:01:06 +0000
Manifest next update: Thu 12 Jun 2025 07:01:06 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: w7nowlvyeg2lwORhM3LbWFhkChH5qQbmtVEQMktnnHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:e2:c6:8f:5c:9b:c7:f6:f8:db:6d:c6:88:cc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Jun 11 07:01:06 2025 GMT
Not After : Jun 12 07:01:06 2025 GMT
Subject: CN=48aa2960731a95a25b6ea35bf94ebaf0f22ad10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:44:93:0c:09:46:16:34:c9:66:be:00:6a:
fa:86:2d:de:68:e2:c7:ac:41:89:e7:fe:b0:5a:13:
bd:6a:16:96:d7:ad:f3:53:07:68:88:29:3c:e5:49:
1a:7f:e5:f6:be:e1:f2:93:76:23:b5:21:ec:87:e4:
c3:fa:7b:47:b2:a0:92:5b:49:6c:1c:5e:2c:db:82:
09:29:48:25:c6:6d:d5:21:39:5f:79:47:be:60:ec:
d4:ae:43:39:94:41:62:1b:08:83:d4:cf:1d:13:e3:
cd:25:e7:c2:70:9a:e1:bd:45:84:ee:e4:79:71:1d:
4c:6f:9a:b7:58:6b:b7:86:30:d9:07:7c:a8:62:6c:
29:24:ed:74:8d:bd:d1:24:ad:3e:f1:94:25:bd:d5:
64:c2:46:1d:f1:d4:82:3d:72:20:20:8e:38:d1:83:
6d:aa:10:86:9c:93:3b:dd:13:90:8a:82:df:bc:aa:
d1:18:00:8e:3a:82:48:2c:2b:c9:3e:07:11:7a:ee:
98:a5:89:cc:aa:52:5c:50:6f:c2:60:40:ad:e3:1d:
7f:75:c1:9b:b0:95:2f:f2:a1:b0:b5:d8:c7:8d:2d:
48:d7:55:fc:5e:cb:bc:e8:5d:2d:f9:77:80:a9:b3:
39:9b:d9:0f:b0:83:b1:44:7f:2b:bc:57:4e:41:31:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AA:29:60:73:1A:95:A2:5B:6E:A3:5B:F9:4E:BA:F0:F2:2A:D1:0F
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:91:b1:01:48:88:e1:ae:e3:94:fa:25:49:16:d2:45:e8:1b:
2e:5d:c2:7d:2f:02:ec:1e:89:5b:02:e5:d3:71:be:46:03:01:
45:fa:17:ba:29:72:31:3a:89:53:d1:52:51:5e:74:3d:2d:80:
02:1a:7e:89:89:24:db:12:d1:a1:e0:a1:18:af:3a:7a:2a:4e:
da:33:81:7a:d4:ac:14:75:5b:7f:f9:56:b0:c3:f9:ef:fc:22:
f1:46:e7:20:04:d3:f7:ee:2b:72:6c:75:60:9f:dc:78:9b:a0:
9c:ab:7a:1b:45:36:ce:9f:90:57:a1:04:b3:b9:3e:c3:8e:0b:
19:69:b5:3b:55:a7:48:4b:f1:6e:1f:72:fd:8d:de:7b:67:42:
c2:ee:62:5a:84:87:1d:ea:cf:1e:41:1d:1c:ff:7a:bf:da:60:
6b:47:e4:9d:e1:d4:b7:f5:1f:dd:50:5b:13:36:20:a8:03:86:
8b:96:b0:e8:50:db:2f:b7:ff:7e:c1:33:ae:05:8b:6e:8f:bc:
37:d3:f0:8b:b0:bc:41:a2:90:46:33:a9:1c:f4:13:4d:6c:10:
60:a4:82:63:b1:c6:ac:d9:66:59:3b:29:04:4b:a1:9d:71:36:
95:42:8d:dc:12:03:26:9f:2e:7e:a3:52:29:d6:79:15:8c:ae:
bd:36:6c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyuLGj1ybx/b4223GiMzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz
NTJkNTQwHhcNMjUwNjExMDcwMTA2WhcNMjUwNjEyMDcwMTA2WjAzMTEwLwYDVQQD
Eyg0OGFhMjk2MDczMWE5NWEyNWI2ZWEzNWJmOTRlYmFmMGYyMmFkMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXxEkwwJRhY0yWa+AGr6hi3eaOLH
rEGJ5/6wWhO9ahaW163zUwdoiCk85Ukaf+X2vuHyk3YjtSHsh+TD+ntHsqCSW0ls
HF4s24IJKUglxm3VITlfeUe+YOzUrkM5lEFiGwiD1M8dE+PNJefCcJrhvUWE7uR5
cR1Mb5q3WGu3hjDZB3yoYmwpJO10jb3RJK0+8ZQlvdVkwkYd8dSCPXIgII440YNt
qhCGnJM73ROQioLfvKrRGACOOoJILCvJPgcReu6YpYnMqlJcUG/CYECt4x1/dcGb
sJUv8qGwtdjHjS1I11X8Xsu86F0t+XeAqbM5m9kPsIOxRH8rvFdOQTF9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiqKWBzGpWiW26jW/lOuvDyKtEPMB8GA1UdIwQY
MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt
N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk
LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5GxAUiI
4a7jlPolSRbSRegbLl3CfS8C7B6JWwLl03G+RgMBRfoXuilyMTqJU9FSUV50PS2A
Ahp+iYkk2xLRoeChGK86eipO2jOBetSsFHVbf/lWsMP57/wi8UbnIATT9+4rcmx1
YJ/ceJugnKt6G0U2zp+QV6EEs7k+w44LGWm1O1WnSEvxbh9y/Y3ee2dCwu5iWoSH
HerPHkEdHP96v9pga0fkneHUt/Uf3VBbEzYgqAOGi5aw6FDbL7f/fsEzrgWLbo+8
N9Pwi7C8QaKQRjOpHPQTTWwQYKSCY7HGrNlmWTspBEuhnXE2lUKN3BIDJp8ufqNS
KdZ5FYyuvTZsyw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:56 2025 by rpki-client