
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File: PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier: kPcKEmQRW/0ryP4xE4Lji9o66HFo3Ph6svV5pOphPRc=
Subject key identifier: 65:3A:37:3D:C0:3F:D4:CD:49:41:23:65:F2:C8:92:2B:86:70:5D:4C
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer: /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial: 01959005E783FA25623F298454FCABD13883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number: 1394
Signing time: Thu 13 Mar 2025 15:01:00 +0000
Manifest this update: Thu 13 Mar 2025 15:01:00 +0000
Manifest next update: Fri 14 Mar 2025 15:01:00 +0000
Files and hashes: 1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: JxQLrpOfvlKzgR7vZhsdMFBYZ43RGxxaUiv/oYeRrzY=)
2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:05:e7:83:fa:25:62:3f:29:84:54:fc:ab:d1:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Validity
Not Before: Mar 13 15:01:00 2025 GMT
Not After : Mar 14 15:01:00 2025 GMT
Subject: CN=653a373dc03fd4cd49412365f2c8922b86705d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:05:45:2e:bf:d3:d4:4f:54:a3:34:3b:d6:
c4:23:63:b6:e0:b4:47:27:06:95:8e:e5:2c:d5:2a:
b4:d0:2a:70:c0:31:39:98:32:4a:0f:22:ae:a0:eb:
2e:0c:8f:5f:c0:fd:6f:a7:e7:25:3f:17:89:7f:c2:
ef:2e:c6:e8:20:07:04:95:5b:04:1a:ce:57:a7:04:
87:37:35:7c:8e:4d:97:e6:b9:ae:38:c9:6d:ac:86:
33:54:9d:23:82:5e:d2:a7:a7:32:4d:83:4f:e1:08:
0b:02:56:a1:6a:bf:fa:9b:82:4a:43:e9:a0:2e:53:
02:c4:82:67:3f:d4:ce:1c:a7:21:7f:13:01:b4:91:
04:5c:35:f1:a4:fa:3a:5a:6f:a2:57:9a:1e:c4:9f:
76:14:d8:90:5b:b5:0f:43:88:06:94:3b:03:9f:78:
14:6c:d1:74:59:cc:9d:f9:df:5d:36:bf:33:0b:94:
d0:0d:77:44:6d:f2:f9:ca:ae:11:b5:39:41:79:00:
7f:d1:d3:52:a7:87:02:4e:9f:1f:ca:9e:54:a2:a4:
9e:17:df:df:18:25:93:40:a1:41:46:9a:ab:15:18:
5b:80:40:1e:e3:5b:56:23:07:6e:63:ad:8c:57:cf:
90:cf:2d:02:0c:58:59:a3:90:f3:89:79:1e:ab:d2:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3A:37:3D:C0:3F:D4:CD:49:41:23:65:F2:C8:92:2B:86:70:5D:4C
X509v3 Authority Key Identifier:
keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e8:bd:ec:c1:55:87:cb:5a:c4:e4:09:15:f4:5e:8d:50:d2:
cb:4c:7b:fd:a2:7b:d4:bb:f1:e3:e9:0e:cd:7d:7d:16:ca:d6:
16:be:19:40:59:d6:70:bf:da:64:cd:fd:7f:da:82:60:71:0f:
ca:14:d2:f2:3e:34:b7:98:5f:51:5a:89:33:2b:90:be:08:c2:
0d:2c:fb:1d:53:f6:80:e5:83:34:3f:5f:9c:55:f3:8e:c8:2c:
f3:35:48:67:1d:76:7f:02:a1:56:bf:4c:0c:31:1d:b6:36:46:
d9:b8:d5:8d:f3:c1:56:ee:0f:a9:71:34:ef:d5:6e:b4:d0:ce:
92:59:62:0e:8f:4f:5d:e1:02:df:64:44:f6:e9:d8:f6:de:a5:
dc:5e:a3:54:6d:66:d9:55:eb:92:04:02:05:5a:16:c1:a9:22:
10:19:18:a6:dd:bb:38:83:8e:53:d9:03:1c:aa:81:0a:e2:4a:
84:b6:06:a9:c6:60:51:4d:69:7e:33:24:25:96:3a:95:6b:cc:
49:ac:6f:17:7c:92:d6:09:08:9f:40:15:a4:d1:c7:20:8b:1f:
55:fb:8c:13:a3:d2:3e:3e:94:d9:73:5f:85:ec:f3:73:33:fc:
c2:93:20:3d:3c:98:49:d6:4c:eb:40:5b:00:27:96:a1:7e:1f:
45:bc:cf:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWQBeeD+iViPymEVPyr0TiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNjU1NjRhODk1NGQ2YWU5NTJmOGExZjdhZjZjMWNmYmE3
ODA5NGEwHhcNMjUwMzEzMTUwMTAwWhcNMjUwMzE0MTUwMTAwWjAzMTEwLwYDVQQD
Eyg2NTNhMzczZGMwM2ZkNGNkNDk0MTIzNjVmMmM4OTIyYjg2NzA1ZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAwFRS6/09RPVKM0O9bEI2O24LRH
JwaVjuUs1Sq00CpwwDE5mDJKDyKuoOsuDI9fwP1vp+clPxeJf8LvLsboIAcElVsE
Gs5XpwSHNzV8jk2X5rmuOMltrIYzVJ0jgl7Sp6cyTYNP4QgLAlahar/6m4JKQ+mg
LlMCxIJnP9TOHKchfxMBtJEEXDXxpPo6Wm+iV5oexJ92FNiQW7UPQ4gGlDsDn3gU
bNF0Wcyd+d9dNr8zC5TQDXdEbfL5yq4RtTlBeQB/0dNSp4cCTp8fyp5UoqSeF9/f
GCWTQKFBRpqrFRhbgEAe41tWIwduY62MV8+Qzy0CDFhZo5DziXkeq9JW2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU6Nz3AP9TNSUEjZfLIkiuGcF1MMB8GA1UdIwQY
MBaAFD1lVkqJVNaulS+KH3r2wc+6eAlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFdWV1NvbFUxcTZWTDRvZmV2YkJ6N3A0Q1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80MTE4NzctYjUxYS00NjRhLWFkOWUt
MTA0YjE0ZjViMGY4LzEvUFdWV1NvbFUxcTZWTDRvZmV2YkJ6N3A0Q1VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80MTE4NzctYjUxYS00NjRhLWFkOWUtMTA0YjE0ZjViMGY4
LzEvUFdWV1NvbFUxcTZWTDRvZmV2YkJ6N3A0Q1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+i97MFV
h8taxOQJFfRejVDSy0x7/aJ71Lvx4+kOzX19FsrWFr4ZQFnWcL/aZM39f9qCYHEP
yhTS8j40t5hfUVqJMyuQvgjCDSz7HVP2gOWDND9fnFXzjsgs8zVIZx12fwKhVr9M
DDEdtjZG2bjVjfPBVu4PqXE079VutNDOklliDo9PXeEC32RE9unY9t6l3F6jVG1m
2VXrkgQCBVoWwakiEBkYpt27OIOOU9kDHKqBCuJKhLYGqcZgUU1pfjMkJZY6lWvM
SaxvF3yS1gkIn0AVpNHHIIsfVfuME6PSPj6U2XNfhezzczP8wpMgPTyYSdZM60Bb
ACeWoX4fRbzPWA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:48 2025 by rpki-client