Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: 3sq8UjCJiX6v2Qzso6iqWBv9rOOOBKYIM+j0RXF28rA=
Subject key identifier: 7E:8F:89:47:9B:EF:0F:79:C4:C3:B7:07:4A:D3:42:72:80:AC:6B:55
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 0196BF37BA17116E62AD7535F4B8566E5F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 12:00:22 +0000
Manifest this update: Sun 11 May 2025 12:00:22 +0000
Manifest next update: Mon 12 May 2025 12:00:22 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: 9TFpRx1et/tjgN+Dihd435UmtGh3kwNsO8yBzjA+Dko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:ba:17:11:6e:62:ad:75:35:f4:b8:56:6e:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: May 11 12:00:22 2025 GMT
Not After : May 12 12:00:22 2025 GMT
Subject: CN=7e8f89479bef0f79c4c3b7074ad3427280ac6b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:7f:d2:d6:16:04:05:6d:fd:1e:45:31:53:
61:8a:a9:d5:3d:45:46:ed:ca:e1:4a:29:d3:c8:3b:
2e:d4:f3:64:5c:35:d4:3b:48:ed:4f:3c:52:38:43:
dd:2d:ab:db:78:ea:2a:09:4b:e7:c1:a0:46:0e:92:
fe:6d:36:57:25:53:11:f4:73:84:e9:a3:f6:ed:a9:
78:2b:14:33:45:ba:fc:e0:3f:b6:8e:c3:5d:37:e4:
6a:c8:11:32:ce:4a:0b:cb:c1:74:ff:3f:44:ff:be:
fc:bc:56:87:3e:f3:0f:ad:f1:d5:c2:b7:af:52:da:
47:8d:84:6f:cb:1f:4b:27:d7:d4:b9:82:da:df:8d:
e3:03:6a:10:e9:90:a3:74:f1:ca:71:69:55:13:e8:
35:b2:e6:ad:1c:bf:c5:97:81:e5:0f:8c:7b:d7:91:
0d:c1:86:76:47:db:f1:bf:b6:a6:67:2e:3c:08:e2:
be:07:59:55:e6:e8:e2:47:d0:5c:a1:5a:c0:95:ed:
f5:f7:f6:b5:17:9a:dd:f3:37:36:37:e1:f5:f5:35:
39:30:6e:a2:c2:c2:f2:21:01:88:33:6b:d4:99:86:
73:3f:f2:39:eb:a7:7b:0e:5b:fa:b1:8f:a4:76:c3:
4e:6f:6b:03:17:d8:22:d5:f5:3a:a0:02:8f:11:56:
b1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:89:47:9B:EF:0F:79:C4:C3:B7:07:4A:D3:42:72:80:AC:6B:55
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:e5:83:af:9e:55:8b:68:b9:dc:e0:63:5a:b5:c3:57:5e:
06:63:23:8d:ba:10:05:ee:7a:8b:07:f4:b0:8d:6a:b2:71:aa:
93:ed:eb:a0:e8:0f:d2:10:b5:1f:bd:6c:ff:df:92:81:f8:b1:
de:7a:a7:b6:5b:75:35:df:ed:4c:65:f8:d7:33:0a:39:1b:26:
52:b5:2c:0c:77:3c:03:07:13:34:7b:26:1d:8e:c8:d6:ce:3c:
82:ec:ff:2c:26:29:56:fd:f6:4c:7e:37:70:a8:75:6e:10:8a:
e8:5b:b4:e0:15:b3:6e:c4:99:01:d2:b2:11:22:f6:b7:7a:e1:
a8:15:8c:df:1c:ad:dd:5c:88:14:97:b8:00:4d:9d:e0:6d:41:
9f:02:e9:96:58:e2:39:ec:00:e8:f6:88:cb:3f:bb:8f:34:b4:
ce:1d:6c:b1:35:0b:c6:bd:9b:f9:61:5f:c5:ee:92:6d:54:bb:
c9:17:62:c3:2b:ba:3c:d4:9f:e8:c6:1f:a3:52:ea:5b:28:02:
9c:5f:d9:a6:86:ea:01:8c:aa:fa:36:26:3e:19:3d:9c:f8:56:
4a:a9:e4:11:1a:fc:c0:05:18:21:ce:66:7c:68:87:45:77:64:
2a:45:10:6f:af:02:77:42:e7:99:5a:2c:e1:c4:25:2d:9c:50:
60:69:8f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:11:41 2025 by rpki-client