Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: FuBfsgEyMWuslzk4t7WoJ3pB8UOZMhIcf4F9WhaUkmw=
Subject key identifier: D8:D3:B6:D8:F0:21:45:52:3E:AB:EE:3D:FB:0A:38:07:71:96:17:DC
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01964D4733D410F407709907D936E443405F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 13F6
Signing time: Sat 19 Apr 2025 09:00:34 +0000
Manifest this update: Sat 19 Apr 2025 09:00:34 +0000
Manifest next update: Sun 20 Apr 2025 09:00:34 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: Orm1yVF6CtngeW50bG9rGHBA6YQnnv5ChrRYDpuxoRQ=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:47:33:d4:10:f4:07:70:99:07:d9:36:e4:43:40:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Apr 19 09:00:34 2025 GMT
Not After : Apr 20 09:00:34 2025 GMT
Subject: CN=d8d3b6d8f02145523eabee3dfb0a3807719617dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:b7:dc:a7:08:a9:36:89:03:a0:38:64:e8:
13:0a:f6:a4:f7:87:ca:ec:62:40:9b:92:df:d2:09:
9f:36:f6:f6:61:85:96:86:a5:1a:cb:8f:d4:88:46:
c9:7e:de:24:d5:85:41:51:13:ab:31:ba:af:b6:53:
23:6d:09:aa:5e:e2:4e:12:a8:66:82:2b:fa:77:c4:
99:bc:95:1a:77:87:74:66:96:97:6d:63:72:7b:44:
c1:8d:df:43:e1:bd:84:e3:f5:5c:3b:54:17:db:ec:
4b:76:6f:30:d6:75:2d:51:23:e4:0c:a1:35:16:df:
4e:1f:60:b5:b3:0f:2c:3a:c2:a1:e2:7a:86:8f:48:
44:ef:c9:07:d6:a1:26:0f:8a:ac:59:1b:f1:3f:65:
98:eb:3f:7f:ad:6b:a2:71:da:9d:ed:05:9f:a0:1b:
9b:aa:3a:5f:03:d9:63:9a:8d:b0:8a:06:4d:29:17:
bf:b3:42:58:c1:06:7b:45:ed:50:b5:52:be:cc:51:
c4:ed:a0:1f:3a:eb:fe:6e:ca:79:83:e7:bb:85:3f:
1d:60:26:c2:6a:b9:1e:34:c1:8b:da:76:e4:84:07:
33:cc:04:e1:e4:b8:7d:3c:62:3c:90:09:17:26:40:
01:db:6d:5f:ea:de:44:f9:b7:c2:ff:a9:c5:d5:7a:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:B6:D8:F0:21:45:52:3E:AB:EE:3D:FB:0A:38:07:71:96:17:DC
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:de:b0:20:6e:18:b7:ea:dd:58:bc:a2:4e:5e:44:fc:eb:
84:a3:36:89:28:36:09:da:2c:6d:d8:a4:7a:d8:73:98:d9:2b:
f1:40:48:d1:db:b1:a5:2b:c5:f3:ac:60:02:72:6e:8a:21:0a:
44:73:3a:75:79:62:93:e2:d1:ae:5a:60:84:c9:45:ae:b3:ac:
be:9f:f3:c5:d4:3d:aa:4d:9a:b5:eb:b3:09:ed:d9:f3:f3:a9:
8f:48:72:aa:19:3e:43:fb:a6:38:1a:68:2f:26:0f:63:6b:12:
41:99:f3:6e:de:14:60:97:cc:22:be:af:4f:74:f9:57:0a:67:
4d:78:e2:a3:73:1b:f6:f7:b8:be:58:ab:42:d5:58:95:38:a0:
0d:ec:a3:85:27:f6:2b:e4:f0:ab:a6:9c:f4:3d:f9:15:33:f0:
b7:22:61:1d:ff:57:e1:b2:c6:72:07:2e:68:36:d5:c6:03:e0:
b7:d9:38:73:86:20:c7:7d:a0:6e:dc:fb:20:46:1b:57:9e:f5:
30:7f:92:b8:66:68:06:8c:b5:2b:eb:fa:06:b5:59:df:61:5e:
50:b6:87:10:60:9b:e3:dc:1f:da:c0:9a:7c:62:e7:0c:47:89:
d3:54:e0:8c:26:6e:89:bf:98:ed:96:f4:f9:c5:45:49:83:d5:
9b:27:c9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:04:29 2025 by rpki-client