Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
File: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft (raw, json)
Hash identifier: 8v5lhCSOZeCnrQQXb5S7bcch8+PraVvqnUGRQITg9R0=
Subject key identifier: CB:32:4F:2E:EE:8D:9B:F6:3B:84:E5:34:53:D1:8D:4F:DE:9F:51:55
Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff
Certificate serial: 0196BC6DEE5CD553C87A400D19AA2203C3BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
Manifest number: 0F8F
Signing time: Sat 10 May 2025 23:00:43 +0000
Manifest this update: Sat 10 May 2025 23:00:43 +0000
Manifest next update: Sun 11 May 2025 23:00:43 +0000
Files and hashes: 1: dv2-CubAEzDgm9-A6q6tebm8sb8.roa (hash: TsKOArcBjp/tutNspO+BZ3fNFViji2g9Yje5CxDDQXE=)
2: rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl (hash: /9M5o+07y0kynWTcU4NMgfc9UOcQwg3n5yJnZ3fmR6Y=)
3: uPmBIiMy_mwoAMwRr2tHb8mN_DQ.roa (hash: HueNCAsjAp0HpCdgeRDBaDeI3suLIq9xXvHT44od5wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:ee:5c:d5:53:c8:7a:40:0d:19:aa:22:03:c3:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff
Validity
Not Before: May 10 23:00:43 2025 GMT
Not After : May 11 23:00:43 2025 GMT
Subject: CN=cb324f2eee8d9bf63b84e53453d18d4fde9f5155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:40:73:2b:51:66:38:4c:08:21:fa:6b:ff:30:
b8:85:89:6f:90:bc:d6:ea:05:8c:91:b5:c2:d2:14:
00:1a:eb:34:05:3f:6b:0f:8b:a0:16:12:bf:5e:c7:
db:fe:c0:8e:da:62:1f:5b:ae:d6:e4:7d:af:2d:d3:
81:42:e6:d1:31:ae:e1:fb:bc:69:74:47:69:ee:02:
81:9e:e0:dc:f6:37:af:b3:05:12:01:d1:aa:19:41:
54:6a:17:5e:fd:da:6f:7c:13:4a:dd:d6:43:86:03:
74:bb:5b:e6:70:14:f7:0d:e1:03:3b:a6:60:4e:25:
0f:3e:cb:64:10:87:2d:d9:25:47:ef:5b:5b:71:77:
60:6f:49:04:81:75:1e:ab:36:13:30:a0:69:55:0a:
8e:6c:c9:1f:95:bf:3e:da:9a:8f:48:81:e0:70:c8:
61:5f:9b:26:d6:bc:03:ce:60:a7:e8:d8:dc:ed:01:
ac:6c:16:2a:f4:46:7a:38:97:97:9f:af:1f:68:5b:
50:6f:10:27:18:2e:77:45:cc:5c:8d:ab:49:3e:7e:
65:25:be:0d:67:e4:9e:00:19:3e:7a:79:4a:02:7f:
3c:f5:6f:92:9b:0b:92:89:b7:4d:53:e0:78:3c:2f:
57:aa:fe:78:c0:54:85:90:03:61:e5:36:e8:a8:32:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:32:4F:2E:EE:8D:9B:F6:3B:84:E5:34:53:D1:8D:4F:DE:9F:51:55
X509v3 Authority Key Identifier:
keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b0:be:d0:cf:c9:08:b0:f6:0c:9c:66:41:e2:16:35:21:02:
a3:17:00:b2:8b:a5:01:9d:d2:de:a4:b2:2d:6a:82:1b:d4:f7:
57:bf:07:5d:4e:35:ca:c2:a6:8e:d4:d0:0b:5a:96:fb:0f:a0:
75:96:e8:89:78:da:85:ce:a5:dc:fd:86:ac:83:e2:dd:4c:bb:
d3:b5:a5:62:1c:03:1b:8c:93:d4:15:ce:70:7a:8c:8d:23:e7:
e1:38:6f:ed:90:fc:30:90:ef:cf:dd:ad:28:95:04:eb:03:d5:
2a:f6:25:98:12:4c:ce:7f:b3:1f:03:ee:16:8a:8d:f0:02:f8:
2c:ed:39:23:45:22:c5:92:b7:16:a5:e6:40:f3:10:e3:49:f4:
5a:ab:00:3a:ff:22:7a:52:76:79:52:39:d1:65:b7:78:cc:71:
2f:07:a1:e9:79:45:49:6f:90:0e:79:be:76:e6:98:eb:06:bf:
04:fb:71:82:ba:34:56:57:e4:ed:f8:33:b6:f1:2a:e4:ed:68:
04:c0:b8:48:a4:09:7c:4a:ee:4c:b8:58:b2:b2:eb:1e:41:c5:
84:b9:55:35:8e:da:be:c1:ca:f5:0b:62:85:d9:51:c9:92:20:
9a:95:19:cc:68:b7:18:94:12:06:1c:62:90:a0:71:ce:26:98:
b5:e5:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:23:20 2025 by rpki-client