Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
File: pW_3HkuOwkscYysvoiSHOcxXIgU.mft (raw, json)
Hash identifier: WJ+ZnQA5E/9zvSqObKw1BOkIHhouO4AgvQumkVP4HJ0=
Subject key identifier: E3:3F:62:6D:40:C6:07:4C:08:46:55:03:21:CB:DD:61:56:76:38:17
Authority key identifier: A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
Certificate issuer: /CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Certificate serial: 01974EC5A8B4A5E36F4D97D779472E7C0880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 09:01:06 +0000
Manifest this update: Sun 08 Jun 2025 09:01:06 +0000
Manifest next update: Mon 09 Jun 2025 09:01:06 +0000
Files and hashes: 1: iKx7DVcDIp4-3Ht_VZ0qOWxo2fU.roa (hash: zpfuponymK+r2Tkz+w9BOZiVOOpvDfzySSg7CkzrHaM=)
2: pW_3HkuOwkscYysvoiSHOcxXIgU.crl (hash: BwAO5I/KIkFfYNycm8XWTZtgij5lA6M6zM9aizln8ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:a8:b4:a5:e3:6f:4d:97:d7:79:47:2e:7c:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a56ff71e4b8ec24b1c632b2fa2248739cc572205
Validity
Not Before: Jun 8 09:01:06 2025 GMT
Not After : Jun 9 09:01:06 2025 GMT
Subject: CN=e33f626d40c6074c0846550321cbdd6156763817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:60:f0:49:47:8e:2f:00:e7:8e:5e:86:ad:
4b:9a:71:d1:72:96:94:16:be:99:da:bd:d8:a4:42:
29:20:7b:9b:a6:af:f8:51:1f:15:97:f4:09:1c:c0:
99:3e:94:7f:43:3e:0c:e2:b4:14:d6:24:df:b2:53:
84:1a:ba:69:16:35:04:75:a6:17:91:37:ee:67:98:
ca:b4:71:5a:11:63:22:02:4b:b0:6d:fa:98:d6:c6:
51:f6:af:70:fd:06:c8:5c:b5:2c:55:29:fc:ea:ea:
a3:b5:2f:3b:2d:c6:1a:dc:fb:97:fa:c9:17:18:f8:
53:a6:33:a1:cc:bf:1c:75:fc:b8:49:18:62:07:2a:
cc:bb:ca:90:2f:27:4f:53:6c:57:9b:35:ea:6c:2f:
c1:9c:38:be:c7:cc:ad:d3:70:81:ff:33:72:0c:84:
73:16:9c:16:4f:60:a6:b7:f0:ac:04:08:16:0a:9f:
ba:bd:bb:ec:43:48:86:0a:17:d2:69:b3:df:1b:5c:
8b:5a:69:24:bb:7f:f4:65:76:a4:4c:fe:49:dd:51:
ad:50:ce:79:1b:b7:b3:21:14:2f:3d:ce:e2:6d:20:
cb:70:fa:a5:4e:9a:b7:d4:eb:84:5b:f9:85:5d:3f:
b0:c6:b3:f6:06:5a:81:40:0b:73:15:43:9e:cc:83:
30:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3F:62:6D:40:C6:07:4C:08:46:55:03:21:CB:DD:61:56:76:38:17
X509v3 Authority Key Identifier:
keyid:A5:6F:F7:1E:4B:8E:C2:4B:1C:63:2B:2F:A2:24:87:39:CC:57:22:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pW_3HkuOwkscYysvoiSHOcxXIgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/4a3139-8e1b-4a1e-87da-e6aabb06bbb0/1/pW_3HkuOwkscYysvoiSHOcxXIgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:35:8c:55:1f:02:73:ef:1e:f8:f9:f8:49:96:3e:7b:d9:d6:
af:9e:ea:ae:5d:c2:2c:7e:0a:46:11:f6:73:33:cf:e0:9c:02:
d7:45:0a:6a:c3:fc:31:13:69:88:51:0f:ed:ef:c2:80:79:b7:
c1:08:07:64:b8:05:13:26:0e:4b:50:64:00:f7:e3:ea:9d:07:
e5:63:bb:f9:78:c1:15:e1:72:34:70:5d:45:f2:7c:b6:b2:9e:
d9:1d:16:07:45:0b:e0:fe:e1:a2:01:db:46:32:a9:e7:74:2c:
93:cb:f4:ea:5c:15:27:c8:fe:fb:36:9b:78:1c:b6:e3:1b:c8:
ab:b6:39:7f:ca:7b:7c:2d:54:9f:0a:5e:90:9f:dd:0f:7d:81:
cb:54:87:1a:48:fd:29:e9:d3:a9:97:bd:1d:4d:ff:6f:ae:00:
ea:f5:29:d2:08:09:08:5e:50:01:ce:9b:bd:db:9e:a6:6d:55:
78:08:20:61:00:d2:e5:e1:9c:1d:10:4f:88:09:3e:93:4c:9b:
a5:c4:82:1c:df:42:4f:60:8a:46:f9:3d:d1:68:a2:1a:a8:b7:
0e:e5:2e:90:c7:eb:54:5b:2f:ca:b2:8b:62:20:20:03:16:37:
8d:e0:36:15:14:b8:2b:e0:65:6b:e2:c7:35:e7:bf:86:fc:7f:
cf:b0:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:03:15 2025 by rpki-client