Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: aEizv4XuzYOARQcxmvkKoAOS4YAgJBXu7jPAOwFbItc=
Subject key identifier: 5F:8C:92:8B:27:45:9C:E7:54:41:02:ED:B2:1A:A5:62:32:EE:92:81
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 0196BB929C5399BFFD5C861F3AB2B1659231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 063D
Signing time: Sat 10 May 2025 19:01:09 +0000
Manifest this update: Sat 10 May 2025 19:01:09 +0000
Manifest next update: Sun 11 May 2025 19:01:09 +0000
Files and hashes: 1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: 67Z1C+t9j5qxgObyzqa/1VJKOH8Dcs33HOFlmWRcrMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:9c:53:99:bf:fd:5c:86:1f:3a:b2:b1:65:92:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: May 10 19:01:09 2025 GMT
Not After : May 11 19:01:09 2025 GMT
Subject: CN=5f8c928b27459ce7544102edb21aa56232ee9281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:6b:bd:38:79:81:6c:39:1d:39:8c:85:60:
ac:07:a7:b0:39:98:6e:46:eb:95:a3:30:a7:c3:6f:
02:57:c0:55:5b:0c:07:da:e7:cf:46:08:d8:e6:a8:
a5:cd:e6:a9:9e:7a:93:d4:26:cf:47:82:1b:a0:93:
e9:11:ac:07:73:8c:1f:e6:a3:35:d9:7e:9e:de:a3:
be:d0:31:88:67:77:0c:bc:3b:fe:df:64:42:6a:19:
6e:1a:3c:74:6c:f5:8a:5c:fe:ed:16:13:7d:12:71:
27:68:a0:1f:6c:e6:33:c1:c9:fb:39:7a:7e:87:f0:
e3:dc:0b:28:a9:bb:ea:c0:45:06:99:38:60:6a:e7:
96:8e:0d:de:98:ef:e6:50:47:6a:76:24:f8:a8:8f:
3e:95:ac:1c:9d:7c:ae:79:eb:55:a8:3d:ea:a2:b7:
80:04:27:cc:13:92:10:a6:b8:77:58:f0:92:40:0c:
04:d5:1c:6e:11:eb:8b:23:c8:92:c1:b3:07:5f:11:
a8:2f:82:e5:f4:d7:02:10:e0:de:6d:9e:1a:fd:bc:
87:bc:2a:8e:d1:b2:27:23:7a:d1:17:2f:60:c6:6e:
e6:dd:fd:9e:ba:4f:c6:81:c9:fc:42:2f:c8:14:e0:
50:d8:8f:03:bc:3d:4f:21:d4:4b:d1:c8:0e:60:eb:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:8C:92:8B:27:45:9C:E7:54:41:02:ED:B2:1A:A5:62:32:EE:92:81
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:8f:07:fb:1c:74:94:84:c3:e8:29:e9:c8:fe:14:55:9c:ea:
b9:61:26:34:5d:2a:53:79:97:cd:4c:33:ff:ee:df:90:e2:d7:
d0:d5:0f:10:b0:4c:f3:43:c1:a3:b8:1c:de:5a:d6:d9:7f:67:
66:27:5f:5e:d2:e8:92:d3:b1:cf:be:3a:f5:d0:29:6c:1a:89:
09:3f:43:a0:14:72:51:e5:33:ae:e5:a4:81:b1:e4:26:70:74:
f4:ee:ce:e3:24:f3:c8:68:7b:b4:ad:24:6d:7a:b4:1a:3d:ee:
de:d7:a9:04:0d:ea:51:b4:bd:62:19:fe:f6:94:a9:23:76:e4:
2f:28:7d:a3:3b:35:c1:df:7b:78:ea:c0:2d:c4:7b:8b:34:f3:
94:f8:47:f0:42:10:ca:62:6a:b3:70:24:95:2a:8c:15:71:5e:
48:9b:46:81:f4:ff:36:6e:23:e1:eb:eb:d1:a4:13:a1:ec:d9:
f3:53:8e:e8:81:5b:82:6a:6c:2d:60:eb:56:d7:d3:10:4d:42:
76:50:e0:9d:12:df:f3:0b:8d:da:72:25:b5:66:12:cc:e8:0d:
52:02:c5:e1:c5:7d:ea:72:cd:77:19:6b:75:d8:75:39:be:61:
54:c4:82:cd:ca:2b:e5:eb:f8:05:a3:8b:b4:02:bd:67:a6:2d:
d3:cf:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:35:05 2025 by rpki-client