Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
File: r3WOiP6vjWcFnch4ei5fMaBqwek.mft (raw, json)
Hash identifier: bGswKFr7YcHXfSkDswcenojz/G3GuQWL0aLlDIzuxF4=
Subject key identifier: 0A:1F:89:60:71:2B:9E:48:46:2F:B1:4C:BF:04:C3:8B:16:61:12:C4
Authority key identifier: AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
Certificate issuer: /CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Certificate serial: 0196BB5B1E0F07FFE6302ECF31B7587812ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
Manifest number: 0BB4
Signing time: Sat 10 May 2025 18:00:32 +0000
Manifest this update: Sat 10 May 2025 18:00:32 +0000
Manifest next update: Sun 11 May 2025 18:00:32 +0000
Files and hashes: 1: jtxnMC6eCVYwIh8IyueFT2QEZ64.roa (hash: 9ndfbLnfP9lol8NT3K6+lPqG6lGo+1E6jKyJb1FexVw=)
2: r3WOiP6vjWcFnch4ei5fMaBqwek.crl (hash: pAqrfHbbVhvvK35cCLoal7Qs23ipK30ARIba9GvrL6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:1e:0f:07:ff:e6:30:2e:cf:31:b7:58:78:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af758e88feaf8d67059dc8787a2e5f31a06ac1e9
Validity
Not Before: May 10 18:00:32 2025 GMT
Not After : May 11 18:00:32 2025 GMT
Subject: CN=0a1f8960712b9e48462fb14cbf04c38b166112c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:e3:be:9c:93:53:8e:07:70:82:d8:30:1c:
cb:19:f7:6d:13:35:1e:37:cd:a5:cc:9d:71:fc:fd:
36:0a:37:f5:e2:b2:8a:1f:e4:9f:2a:e5:d2:63:f0:
e7:a0:4a:b4:90:ed:6a:04:6a:50:ba:0e:af:9b:fd:
89:62:2f:34:50:d5:39:a0:4d:62:50:af:32:1c:b2:
6a:83:d2:b8:08:6a:8b:e7:a0:d0:bc:79:d3:b1:9d:
ee:cf:a4:a0:73:2e:0b:71:ce:c8:8f:da:9b:ee:03:
9e:40:90:10:c1:a9:93:b7:0e:0f:85:52:f6:01:f0:
09:52:02:1c:a6:8b:d7:ad:81:16:e9:8b:45:18:55:
83:af:16:1c:e9:8b:26:5e:88:be:0e:6e:57:a1:1a:
b5:0b:d9:21:03:ba:2f:94:88:66:1c:1b:0e:03:44:
6c:7c:24:0a:14:23:8e:6f:94:e5:47:5c:c7:23:9b:
c2:53:b0:79:02:7f:65:c4:28:3e:b8:16:76:5c:3c:
f9:be:64:48:1d:9f:1e:ec:df:69:dc:13:fa:43:22:
4c:c4:15:66:bd:ae:99:17:10:17:0a:bd:ff:1e:10:
42:75:04:d8:8c:78:cb:e8:38:15:56:9a:45:32:f2:
21:c3:57:31:6d:20:10:ec:f9:5d:09:bb:af:26:30:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:89:60:71:2B:9E:48:46:2F:B1:4C:BF:04:C3:8B:16:61:12:C4
X509v3 Authority Key Identifier:
keyid:AF:75:8E:88:FE:AF:8D:67:05:9D:C8:78:7A:2E:5F:31:A0:6A:C1:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3WOiP6vjWcFnch4ei5fMaBqwek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/558c39-7510-4b63-aa57-1e2230df0746/1/r3WOiP6vjWcFnch4ei5fMaBqwek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:93:91:04:7a:81:50:00:51:aa:09:73:e1:10:3d:38:1a:6f:
a3:1d:92:d4:ac:4d:35:50:11:54:5b:55:06:f0:7e:e6:f8:ba:
9f:78:ce:f9:fd:28:06:55:1b:df:a7:72:fa:d7:f7:43:3b:e1:
5f:39:b2:de:80:05:6d:6b:42:1a:3b:13:19:82:d6:b7:73:9a:
b7:f3:a8:a3:f1:0e:75:6a:d0:3e:8f:cf:f6:75:43:10:d1:cf:
17:33:9c:ba:09:a2:03:fa:6d:f6:eb:73:fd:ea:3c:74:59:21:
b4:61:a0:ee:79:2a:a2:a2:a6:c7:8d:cd:e9:b1:24:ab:04:c6:
07:6d:50:9b:28:a6:2e:cb:ec:ed:13:04:4e:7a:05:d4:d7:9c:
56:72:1c:ee:1d:8e:15:83:c4:cf:12:e1:b4:cc:bd:19:11:77:
70:35:5f:10:60:67:22:01:fe:17:c6:66:c4:25:88:a2:77:b2:
ec:1c:71:26:64:07:8c:56:39:d6:ef:f6:11:26:bb:3b:3c:b8:
49:0f:8d:aa:b1:e3:f9:b0:3d:a8:cb:47:43:da:60:fe:28:36:
a0:bf:1c:b2:3a:6e:df:35:1b:d3:bd:8d:88:6f:a8:94:a8:3d:
d0:7a:6b:7e:71:8f:ef:9b:c5:a4:9e:aa:d7:35:c5:be:8f:cd:
4f:f6:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:31:32 2025 by rpki-client