Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File: RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier: w1Fgz671KCPpgiANu2GQKZeyGZ9323revK765CkpmcY=
Subject key identifier: 8A:5F:49:C5:BB:13:97:A7:D8:2B:F0:E8:95:0C:7E:E4:4F:1C:1B:F5
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer: /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial: 0196BDB795E3179837B02162BF355EC97A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number: 14C7
Signing time: Sun 11 May 2025 05:00:47 +0000
Manifest this update: Sun 11 May 2025 05:00:47 +0000
Manifest next update: Mon 12 May 2025 05:00:47 +0000
Files and hashes: 1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: O0VzRzmLuiznmCKQDF4Ed8Qum4lumqPexndJipHZjRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:95:e3:17:98:37:b0:21:62:bf:35:5e:c9:7a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Validity
Not Before: May 11 05:00:47 2025 GMT
Not After : May 12 05:00:47 2025 GMT
Subject: CN=8a5f49c5bb1397a7d82bf0e8950c7ee44f1c1bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:d5:3a:46:0f:24:4f:b1:e0:b9:b7:b4:86:
1a:76:e9:34:8a:57:34:63:a4:21:05:db:22:10:ca:
2c:5b:5c:bd:8b:b7:09:54:34:95:7c:29:b5:f0:cc:
d4:4e:96:38:12:23:9e:1a:b2:40:5e:c7:b0:0f:77:
93:65:b0:41:c0:d1:53:5a:2a:d8:10:40:e5:7f:bd:
ac:c5:05:8a:e4:61:be:6b:55:27:2e:a8:1b:7d:6d:
ad:93:da:34:58:8f:5a:63:f6:00:fc:b1:ab:35:00:
ca:63:eb:cf:83:12:06:6b:49:44:c5:56:7e:8c:37:
16:60:b2:60:bc:65:57:f9:45:56:30:7a:5d:14:6d:
7f:25:95:95:9a:a7:e0:d8:29:38:52:9d:57:58:2f:
b8:b2:45:01:7d:18:a7:6d:8d:bb:10:fe:e7:10:15:
5e:0a:16:a8:4b:73:44:7b:bd:62:51:8e:04:00:70:
34:1e:fb:cf:5c:64:eb:71:f4:37:46:5d:82:d5:3d:
2c:db:e6:01:15:4c:50:6d:0b:82:40:f2:bf:aa:e6:
f6:76:a2:ba:1c:69:19:81:0b:59:e6:f0:1f:1c:b5:
75:91:21:79:51:e6:f4:3c:ff:d6:1c:e4:e8:fa:2d:
8c:9f:17:fe:ce:e6:86:67:26:60:a3:74:b0:62:3f:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5F:49:C5:BB:13:97:A7:D8:2B:F0:E8:95:0C:7E:E4:4F:1C:1B:F5
X509v3 Authority Key Identifier:
keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2a:6b:c0:27:9e:cf:bd:71:60:dc:7b:18:5b:2a:b4:73:76:
a8:3e:d4:f3:27:df:5a:cd:07:95:90:d4:b3:6a:b7:b5:11:3d:
df:85:42:93:cf:49:0f:b4:5b:e0:b4:2a:1f:30:e6:2f:2d:92:
89:08:10:37:33:d7:e6:53:d3:12:80:fb:6e:f2:1e:3b:2a:a4:
53:2a:ac:68:26:b4:67:b8:c5:7e:53:72:43:0e:93:36:06:d2:
b2:3f:2a:89:45:74:f0:b9:ef:df:60:9e:00:8f:41:e0:06:7a:
e9:ae:8b:cd:9d:cc:df:50:d9:b1:04:d0:91:f8:b0:a7:cb:19:
db:aa:b4:11:da:e9:4b:1b:97:4d:2d:9e:ec:8f:1b:90:52:28:
f6:7c:e9:ff:3d:e2:80:63:d8:89:6f:50:f9:2e:74:3b:a5:06:
0d:90:09:05:00:b9:c0:05:3b:6b:eb:34:81:d3:a4:ad:01:7a:
d5:c2:4c:15:43:82:cd:71:29:68:78:21:ea:77:5d:67:29:d2:
01:00:65:b5:55:b6:8b:3b:24:8c:18:c9:67:42:e0:89:7e:be:
f1:f9:2f:84:05:85:1f:5d:14:c4:e8:09:34:a3:60:6c:00:f3:
3d:34:91:1d:62:00:77:46:52:73:63:4d:06:fd:ae:92:1e:e4:
8c:fc:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:57:48 2025 by rpki-client