Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: yGiCKAR8b3KamDmNk969huv1unjHUdbCU0xduPqMwsg=
Subject key identifier: 7D:DE:00:06:17:F8:B7:70:80:29:18:59:27:DA:58:B4:9C:3A:4A:59
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 0196B069834E2611EDB7CD5A159D03B6277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0363
Signing time: Thu 08 May 2025 15:00:26 +0000
Manifest this update: Thu 08 May 2025 15:00:26 +0000
Manifest next update: Fri 09 May 2025 15:00:26 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: 48aF6Z6cv+w5GzaYZPLnfRjcDHSeXkkTKpiOV1zmNgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:83:4e:26:11:ed:b7:cd:5a:15:9d:03:b6:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: May 8 15:00:26 2025 GMT
Not After : May 9 15:00:26 2025 GMT
Subject: CN=7dde000617f8b7708029185927da58b49c3a4a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:ec:fe:5e:33:c9:86:56:9b:1e:25:07:8b:
19:87:91:b8:d3:f1:6f:79:17:22:bb:5e:43:d3:b5:
7b:d5:a2:31:c1:3a:ef:c8:d1:28:70:ff:12:57:b4:
97:a1:07:ca:69:93:9a:e1:48:38:99:96:6b:69:c2:
a1:be:fe:11:e3:ae:a0:f6:c0:d3:db:9d:94:cd:7f:
99:cc:bb:ec:71:2c:75:8e:94:aa:34:f7:2f:51:5e:
df:0f:f4:da:98:68:b1:36:22:1f:66:c2:a5:ed:dc:
84:b8:ac:46:5a:bc:9e:b4:c6:37:3f:3c:9f:c8:28:
69:1a:65:35:2e:c9:10:b3:e8:dc:16:29:a6:93:37:
72:79:d4:99:b1:01:61:73:65:16:c1:a7:df:44:19:
99:15:2b:f5:d1:82:85:7c:95:7a:7f:62:d2:54:93:
e1:5d:37:85:f3:f9:5b:4b:81:cc:40:74:e8:b6:8f:
46:7c:86:b4:13:29:8a:36:1a:e2:e3:b3:5a:5b:1d:
16:9e:c2:4e:47:5f:74:ba:3b:d9:cb:b2:c0:18:36:
ed:a2:ad:29:cb:3b:35:b3:d0:5a:91:c5:c2:35:3f:
59:80:dc:7b:24:0e:db:6a:f3:8b:45:d7:14:90:21:
c3:b3:29:c7:31:f9:a2:01:88:84:0b:6b:27:7a:ed:
a7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DE:00:06:17:F8:B7:70:80:29:18:59:27:DA:58:B4:9C:3A:4A:59
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:8e:fc:40:e4:1a:ea:c6:7b:cf:ea:cf:9a:96:59:82:2c:df:
fc:a9:a1:82:2b:d9:27:e1:41:1f:85:40:3e:9c:82:80:a7:c5:
7b:4a:ba:51:b6:73:40:82:a0:fe:80:44:69:41:70:9b:5f:d8:
b1:b0:ca:a5:0c:13:4a:32:5f:31:54:9c:d6:a7:dc:68:44:f8:
cc:7f:53:ef:4b:bd:7a:29:b7:ac:01:52:80:47:b8:3c:dd:3d:
0d:13:1e:50:16:0d:96:87:61:a5:d5:af:be:48:cf:87:70:2b:
d6:4c:71:01:f4:bd:1a:fa:3c:89:78:99:1d:5a:0e:25:e6:97:
5a:e2:52:ad:7f:2e:ca:25:9a:0b:e4:34:be:ba:64:26:8d:52:
20:f2:93:ab:9e:0c:63:c9:e8:7d:b2:df:05:a9:fd:8d:f0:6d:
e6:a3:5f:9a:18:9f:10:fa:2e:09:19:37:ad:47:e1:75:50:ff:
ff:6b:2e:29:bf:7a:42:bd:0e:a3:b5:bc:97:b7:85:14:63:89:
44:46:56:a6:bc:6f:5a:96:99:00:1e:c4:2a:e0:f3:9f:ab:4c:
bd:25:18:ec:02:97:17:ed:2b:ca:da:25:f8:74:12:1c:22:c5:
b3:e1:8e:b9:0a:cb:4f:b7:f0:1b:c7:30:21:a1:da:4e:8e:18:
f4:b3:1b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 18:56:31 2025 by rpki-client