Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
File: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft (raw, json)
Hash identifier: xARNWNNFOVkvESOmLDm49xjhrx+i7YPosXKcJnibdQQ=
Subject key identifier: D9:CA:99:80:91:18:A7:86:CA:63:FC:64:CA:43:ED:E1:33:58:4C:2D
Authority key identifier: 47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
Certificate issuer: /CN=470bc021b657a594ee58d9d36d8d91831d085174
Certificate serial: 0196A352A14DC2B6F726BA3FA073442A717E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
Manifest number: 0933
Signing time: Tue 06 May 2025 02:00:23 +0000
Manifest this update: Tue 06 May 2025 02:00:23 +0000
Manifest next update: Wed 07 May 2025 02:00:23 +0000
Files and hashes: 1: RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl (hash: WY6I5URvP+Mbu6aIzzwqFbMsPA4awbqVPQXtKTamK68=)
2: k6bkvh9iuXhGi6Ifo-aZZ61eWcY.roa (hash: yZJ6vuAHa/37ymvkns64WkhZR926EDrpu1i04hE/yKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:52:a1:4d:c2:b6:f7:26:ba:3f:a0:73:44:2a:71:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470bc021b657a594ee58d9d36d8d91831d085174
Validity
Not Before: May 6 02:00:23 2025 GMT
Not After : May 7 02:00:23 2025 GMT
Subject: CN=d9ca99809118a786ca63fc64ca43ede133584c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:f1:50:f5:2f:d8:d8:df:31:ca:c1:af:05:
bf:bb:3a:8c:11:9d:be:e2:72:c5:2b:b1:79:d6:86:
1c:88:02:bc:bf:bd:87:24:fb:9c:c8:78:1a:34:3b:
13:06:60:bd:5b:05:7a:54:05:73:c3:87:b7:e0:d6:
3b:a3:9c:fb:f5:fd:e7:48:df:6c:9c:50:4e:32:8f:
4a:74:a8:5a:84:8c:5a:88:53:11:35:1e:2d:e2:1e:
b8:46:9a:99:b6:17:62:69:66:26:37:7e:4c:be:cd:
bb:8a:0d:0c:bc:89:9f:c3:6a:f1:60:47:d2:34:1b:
d3:31:0b:ed:4d:8f:70:7c:02:5b:ff:53:3d:6b:38:
17:07:e8:aa:db:2a:89:20:7e:f4:f9:1b:7e:ef:34:
29:5b:03:72:4e:d0:1c:0a:d1:1b:ab:3b:0f:92:a8:
47:9c:e3:94:e5:fd:6b:cf:cb:7b:c8:b7:ce:aa:85:
0a:70:74:93:f6:b3:4e:06:2e:0b:09:53:a5:df:74:
98:ae:2a:6e:ac:a8:df:26:4a:49:06:bf:63:02:82:
c0:48:9c:4b:74:d9:79:6b:ff:ad:cd:40:4b:fa:02:
69:92:79:3a:94:57:38:6c:47:55:89:41:8b:e4:fe:
1e:bc:28:86:db:b0:e4:3b:ab:70:99:a5:c5:15:f3:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:99:80:91:18:A7:86:CA:63:FC:64:CA:43:ED:E1:33:58:4C:2D
X509v3 Authority Key Identifier:
keyid:47:0B:C0:21:B6:57:A5:94:EE:58:D9:D3:6D:8D:91:83:1D:08:51:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d4f92b-2d13-4f2c-ad54-3becddfccae6/1/RwvAIbZXpZTuWNnTbY2Rgx0IUXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:2d:14:17:82:d7:36:57:f0:f5:75:dd:a1:03:55:08:26:2d:
28:b8:4c:97:95:e6:e0:9d:95:2f:e4:93:d9:22:af:18:1a:c0:
1a:e5:e3:b0:9e:8b:30:d3:13:60:74:21:41:fd:1c:b1:23:55:
6a:55:98:76:00:72:d3:08:98:a3:b0:94:72:ef:33:4f:f7:b5:
09:15:56:fe:4c:56:77:7e:47:36:03:91:23:68:40:05:9c:9e:
f2:80:12:7f:fb:fd:1b:03:d5:92:c8:a9:e4:e5:d5:42:95:50:
ae:c5:31:87:91:df:b3:2b:ca:da:d5:5a:88:b2:80:70:8e:26:
4c:7f:de:00:0f:ab:50:d1:de:5a:8a:19:98:5e:8d:a0:34:a4:
ea:77:1b:08:f3:c4:83:ca:56:0a:97:68:63:04:3b:d6:91:de:
84:85:ec:51:aa:8d:9d:49:94:4e:af:38:9f:e2:f4:9e:52:d7:
59:ad:49:6c:89:ba:b9:6b:71:75:bb:f6:54:e4:2c:50:6d:73:
89:1c:c0:e1:3e:86:f9:72:b8:25:c0:1d:7d:6b:e9:dd:fe:ae:
20:e2:28:8f:d3:fc:83:4d:0d:47:b4:a1:f8:2a:5a:e9:60:7d:
aa:42:9c:1b:b1:e1:fb:ad:1c:8e:f1:a2:20:c0:d4:4d:89:0f:
b3:7b:ac:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:25:28 2025 by rpki-client