Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File: pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier: jgz9+mClG+aDmtsw6EoHCtSbIU/OcT6MVnj11dClecU=
Subject key identifier: 30:86:20:86:A2:CA:40:68:C4:45:F9:94:D9:F7:87:B7:FF:D7:BA:88
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer: /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial: 019763965522B6EEC9ABEBF13F68499C1AD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 10:01:25 +0000
Manifest this update: Thu 12 Jun 2025 10:01:25 +0000
Manifest next update: Fri 13 Jun 2025 10:01:25 +0000
Files and hashes: 1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: vhVPDPYRt9Cqd9lT6/QhBRUPItGV4L1GnqgWxS7v54A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:55:22:b6:ee:c9:ab:eb:f1:3f:68:49:9c:1a:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
Validity
Not Before: Jun 12 10:01:25 2025 GMT
Not After : Jun 13 10:01:25 2025 GMT
Subject: CN=30862086a2ca4068c445f994d9f787b7ffd7ba88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:d7:da:6b:c7:0b:14:74:51:61:a6:70:32:
50:c6:4d:38:2d:50:73:16:10:0f:a2:5f:fa:cc:9b:
4e:0a:34:eb:03:d8:12:98:f8:5b:e7:26:eb:34:eb:
2b:bc:a0:1d:60:10:a8:49:01:1b:55:65:23:ea:fc:
6f:7d:0b:7e:58:3a:03:73:6e:7f:d1:1e:8c:ee:15:
9a:1c:3f:0b:42:76:9b:ab:ff:3b:eb:02:bc:99:17:
0e:0c:f5:4b:03:8d:6c:0b:b7:d1:50:9d:6c:c3:20:
57:6e:a9:44:ed:73:c3:51:6c:03:8e:a2:5e:0c:f4:
f7:cf:8f:bc:a1:30:a5:f5:01:ee:49:66:66:e1:11:
f3:b8:3a:2e:73:28:81:19:9b:4f:c9:1a:93:2d:78:
65:c4:90:ff:39:ef:06:5f:00:bf:a1:85:fd:0c:28:
dd:bc:57:de:2d:69:00:dc:da:14:2f:4e:e0:4e:60:
97:03:47:51:5d:12:0e:70:7e:69:74:7f:ca:f3:f4:
02:8d:2a:27:93:a2:ee:93:27:1a:06:c4:52:c4:30:
42:dc:2e:df:b5:68:cf:94:2d:ab:01:70:b6:83:4a:
c0:b0:db:5f:38:f0:e8:96:ae:8b:95:fd:71:9a:75:
39:a3:98:08:4e:63:b6:e7:98:76:67:a1:77:11:96:
22:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:86:20:86:A2:CA:40:68:C4:45:F9:94:D9:F7:87:B7:FF:D7:BA:88
X509v3 Authority Key Identifier:
keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e4:b1:3c:89:00:a6:3b:cb:1a:7d:38:fa:a8:14:da:2e:5e:
52:d4:16:84:e0:b1:03:e2:38:25:60:35:6c:5b:75:29:97:0c:
fe:4e:e6:f5:bb:72:c1:40:01:e3:47:43:cd:36:56:11:05:5f:
60:06:2c:fe:14:84:39:1a:21:55:41:67:34:a3:0a:fd:e2:56:
e7:f5:ef:db:ba:9c:46:e5:c5:f1:a9:63:eb:3c:08:de:4f:65:
42:94:08:f5:fe:86:27:8c:75:04:91:ac:71:8b:ca:66:34:dd:
b1:97:7b:9b:4c:7b:eb:1f:8d:fe:5d:29:4e:69:dc:ce:3b:50:
5b:4f:15:23:22:35:29:21:a3:e5:6f:e8:d7:12:24:b9:fa:61:
8c:dc:09:63:00:ee:b7:28:cd:8e:e9:62:da:d7:9b:78:9b:84:
f6:77:42:4b:72:74:56:37:18:7b:8f:39:29:07:ab:18:96:59:
2b:5f:51:00:eb:c5:b5:f7:1e:d2:3c:fb:9c:e1:4c:70:e1:65:
42:1d:d4:c0:89:fa:0e:59:91:cb:67:16:f6:64:a7:52:0d:ab:
70:58:c0:94:e4:f8:94:5b:dc:c5:49:bd:51:53:72:1a:91:d4:
ed:77:c5:41:87:89:28:e2:fc:7b:c5:1b:3a:01:a9:d9:96:36:
38:d4:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:50:21 2025 by rpki-client