Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
File: PiWraYX3nKneBumOi52iRdhVmrY.mft (raw, json)
Hash identifier: joMWseRb95ZeUIq3i52cLnyLZ5wTNWKL83d+9n/Htbc=
Subject key identifier: 6C:C0:E5:C0:47:67:71:6E:D4:82:DD:93:E1:75:96:BF:76:C2:D4:2F
Authority key identifier: 3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
Certificate issuer: /CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Certificate serial: 0196090B976241CD84A9C38E8518D5327761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
Manifest number: 0255
Signing time: Sun 06 Apr 2025 03:01:16 +0000
Manifest this update: Sun 06 Apr 2025 03:01:16 +0000
Manifest next update: Mon 07 Apr 2025 03:01:16 +0000
Files and hashes: 1: PiWraYX3nKneBumOi52iRdhVmrY.crl (hash: o6AhGBkJgTILKQRnKao5SkgdORBCgKJ48JJt8dPaTPU=)
2: hjDsKa7PgCyxLZd-n7fPu4YJNMY.roa (hash: QbjTyyOso0F6DQuk2NtMyiPym++x2bG0DkG5mbISZEk=)
3: oXW8GWaKetGdBKsu2Z2IY-9T_9A.roa (hash: HV9TKH6QRnK6qfQ0eObEVR7yRAca23tprem52+Wydrk=)
4: pwdlb--yOjorbcCQL2QR9oUUpWI.roa (hash: 1klYczNt5J1n/8K98SAjHgNfDm84PABZ1H0MBugMFMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:0b:97:62:41:cd:84:a9:c3:8e:85:18:d5:32:77:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e25ab6985f79ca9de06e98e8b9da245d8559ab6
Validity
Not Before: Apr 6 03:01:16 2025 GMT
Not After : Apr 7 03:01:16 2025 GMT
Subject: CN=6cc0e5c04767716ed482dd93e17596bf76c2d42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:dc:ce:e4:27:a7:4a:d5:a3:72:4d:73:2c:
bc:37:35:46:d4:ed:d6:e8:68:32:11:38:bf:bc:ec:
86:3f:68:c4:30:ab:31:45:c8:c9:c0:b8:e4:51:8e:
96:0f:52:f7:8e:98:ad:58:89:f0:e4:d4:5f:4c:7f:
68:c9:5c:f8:df:60:02:0a:03:46:4a:4c:c1:4d:94:
f0:78:29:5f:b1:fd:99:a0:32:25:22:dc:64:34:dd:
05:0c:aa:c6:65:78:91:f0:29:52:6f:f0:98:f7:7e:
65:1a:ec:30:1e:e5:48:bc:81:1b:95:3b:ec:aa:e6:
5f:15:cd:d0:e2:11:6e:bf:bf:e3:40:39:c6:75:31:
cf:d2:22:95:9f:2b:45:29:a1:e3:2d:5a:b0:1a:7b:
b1:79:5c:4f:c3:1f:10:4d:6e:5a:25:c1:99:f9:ea:
d1:d9:ee:31:81:bf:bc:8b:80:f7:a1:ff:36:5f:39:
3a:af:18:3c:1e:7f:8e:93:37:f7:fe:77:86:c2:99:
54:5a:d2:d8:34:da:7b:1b:ce:fc:ca:6e:07:36:84:
4c:d1:65:22:12:ae:b6:46:3c:34:9f:5a:61:fa:0e:
7b:24:46:1b:9f:fc:d7:5e:89:24:fe:60:ae:64:2e:
69:9a:10:0b:1f:da:5c:a4:1d:45:6d:a6:43:21:c1:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C0:E5:C0:47:67:71:6E:D4:82:DD:93:E1:75:96:BF:76:C2:D4:2F
X509v3 Authority Key Identifier:
keyid:3E:25:AB:69:85:F7:9C:A9:DE:06:E9:8E:8B:9D:A2:45:D8:55:9A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiWraYX3nKneBumOi52iRdhVmrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/22d175-c71d-4637-a090-b19ad5455bfd/1/PiWraYX3nKneBumOi52iRdhVmrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f0:60:14:e6:e9:c1:36:ed:6b:5c:b9:59:9f:0e:2f:35:b9:
bf:74:6b:8c:65:88:05:36:8b:80:38:9b:f1:d2:3e:8f:77:ba:
3c:b2:fb:3a:ee:24:86:80:42:bb:1a:8f:d8:ba:1b:cf:c8:b7:
99:d2:d2:6a:5f:8b:f6:f7:a1:17:c7:5b:8d:e4:67:63:d3:a7:
ed:32:76:3c:d3:87:7f:05:8e:16:4f:d6:ce:d9:5c:1a:75:63:
22:17:33:88:62:ab:4e:ee:26:55:08:16:9d:91:47:95:e2:c3:
99:cb:fc:40:79:8c:01:08:42:f3:99:1a:f1:d8:7c:44:1b:12:
0b:76:b1:89:9c:c9:49:78:ef:a5:8e:70:4b:e4:93:ba:59:68:
2c:17:7a:94:11:a2:e8:cf:0a:10:25:af:8c:fc:28:24:6a:b6:
a3:16:e5:c6:d7:d3:e2:b1:59:b3:1a:e8:4d:91:5c:c9:be:75:
6f:af:1b:da:af:fe:70:18:6c:41:c8:cc:60:d5:71:da:2f:61:
fe:5c:5d:cf:4c:a2:4f:2d:ab:f1:65:2c:74:20:55:3d:f7:e2:
4a:39:aa:17:e5:d6:f2:63:f8:9b:bd:53:6f:ba:b9:b6:be:e0:
9f:04:f3:f9:94:e7:67:82:0e:34:3f:ec:fe:9a:64:b6:31:61:
91:e3:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:59 2025 by rpki-client