Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json)
Hash identifier: pfLwkj0mRki3j1lmbCL+IsCZ9uGGqMeka2EXayigbkc=
Subject key identifier: 48:10:FB:1D:F0:1B:B5:E1:4C:04:66:F1:51:1C:ED:C2:5D:E8:C1:57
Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6
Certificate serial: 0196BA486D247A2BC537B7171163204359BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
Manifest number: 9A
Signing time: Sat 10 May 2025 13:00:30 +0000
Manifest this update: Sat 10 May 2025 13:00:30 +0000
Manifest next update: Sun 11 May 2025 13:00:30 +0000
Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=)
2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: J/MHK+MWhuPoQMCbNmCvVPQFt/YEzyZa4tYtCqOLhcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:48:6d:24:7a:2b:c5:37:b7:17:11:63:20:43:59:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6
Validity
Not Before: May 10 13:00:30 2025 GMT
Not After : May 11 13:00:30 2025 GMT
Subject: CN=4810fb1df01bb5e14c0466f1511cedc25de8c157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:ad:84:4b:75:c9:60:fb:04:cd:2b:7b:71:
e3:b7:80:9c:ef:26:b5:7c:82:7d:d8:58:5a:fb:6e:
57:c7:b2:50:34:64:78:00:87:37:27:52:cb:02:cc:
99:0c:e5:f9:a7:df:71:e2:32:b6:23:4e:1d:52:19:
7c:df:a2:04:bf:d8:2c:bc:7e:6d:60:1b:cf:b8:78:
9e:db:fe:df:6c:f1:69:87:9c:14:cb:57:f6:80:17:
2b:ef:33:17:0e:1c:99:b6:e9:1e:88:55:0f:03:0b:
34:54:3f:01:ae:c6:50:f5:17:d2:21:9c:54:5f:21:
88:57:ee:0c:0e:0a:b6:63:06:2c:ef:c8:38:67:57:
72:93:20:0b:5a:01:ca:5c:93:6b:16:2e:08:49:41:
ec:fd:fb:e8:93:83:00:b2:66:1d:05:64:11:dd:e9:
92:14:ab:5e:63:6a:84:0d:66:9f:ec:f5:91:d8:92:
cf:a3:b6:0f:91:9c:da:94:81:b5:25:62:25:e4:50:
ce:a6:70:1a:aa:73:97:de:10:d7:4b:b3:3d:53:d7:
52:b6:5b:2e:22:86:38:3a:6d:45:2d:74:3a:a3:68:
ab:53:c1:c8:b1:cc:27:c8:db:19:27:2c:52:18:c4:
39:b9:de:c6:80:a8:62:6d:68:97:44:f3:aa:c9:19:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:10:FB:1D:F0:1B:B5:E1:4C:04:66:F1:51:1C:ED:C2:5D:E8:C1:57
X509v3 Authority Key Identifier:
keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:28:f7:07:14:62:54:e2:bb:5d:8a:9b:a1:c2:fe:c9:aa:7f:
33:9d:32:fc:34:ca:cd:21:af:00:1a:fe:79:9f:32:e9:49:73:
2e:e8:18:e2:8c:c8:3b:13:7e:15:16:0f:3e:8e:66:cd:07:ae:
37:06:68:c6:c2:79:9f:2c:6e:62:9f:82:a4:c0:3c:f9:3a:0e:
9e:47:fa:a3:35:af:cc:57:c1:28:a3:ea:01:39:5a:ab:38:b0:
13:b4:f5:51:32:21:9b:e4:d6:5d:9a:c8:47:5d:f5:9b:d0:c2:
ef:90:f2:1f:ea:1c:37:fd:3e:e3:4b:f8:ba:ec:e1:c3:99:28:
e0:6c:66:23:40:c4:05:4f:36:fe:91:c1:de:b3:4d:c2:72:18:
27:fa:71:a9:b6:bc:a7:16:ee:a5:4a:6d:66:0e:9b:28:8d:3f:
3d:a1:1e:52:3c:65:ce:0a:a3:b1:6a:16:08:3f:e2:1c:68:a6:
d3:2d:8d:9a:4c:42:fa:56:3d:3f:0e:0f:14:96:97:78:20:97:
88:43:c9:31:fe:06:c7:be:15:2f:4e:32:41:bb:cb:38:5e:1c:
fc:30:af:e6:07:73:da:a1:0f:18:6d:20:b2:b5:ee:f2:39:dd:
99:1b:25:11:86:5e:cd:67:a5:23:b6:c1:f2:01:e2:08:37:6a:
9a:a4:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:45:25 2025 by rpki-client