Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File: RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier: T+fxaNbnlZ/5w2x4S8zi21/GmHCO1DLp6wLRqbia6RA=
Subject key identifier: 36:DD:79:E2:CA:25:23:A8:DA:48:B0:25:5D:3C:77:BB:14:9D:9A:53
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 0196CBAA113BD580562DD7ABC439C67CEF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 22:00:42 +0000
Manifest this update: Tue 13 May 2025 22:00:42 +0000
Manifest next update: Wed 14 May 2025 22:00:42 +0000
Files and hashes: 1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: bEnrPJnyCLPcTYxMU8iJbWQVz0Mp4YhBAIQd1WJFfqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:aa:11:3b:d5:80:56:2d:d7:ab:c4:39:c6:7c:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: May 13 22:00:42 2025 GMT
Not After : May 14 22:00:42 2025 GMT
Subject: CN=36dd79e2ca2523a8da48b0255d3c77bb149d9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:48:97:5c:11:80:07:2e:82:d6:2d:46:22:5d:
91:50:6f:a1:a5:26:61:08:fb:45:79:67:7c:20:32:
63:de:7d:a7:37:9d:7a:9a:4a:2a:55:90:9c:93:36:
01:d8:5f:3b:74:73:31:ec:2f:60:0a:66:9a:cb:4d:
ff:c0:13:0c:0f:b2:bd:45:a3:94:ba:ed:04:df:5a:
db:46:f7:27:27:ce:c4:52:33:26:52:ac:0d:85:00:
55:5d:a3:89:6d:9c:18:22:b9:ba:8b:d7:46:b3:ac:
50:95:d7:0f:c2:7d:2a:a8:1c:bd:23:23:db:2d:3a:
fa:d9:a8:d5:ea:dc:f9:aa:f8:d5:c2:e0:e5:17:ec:
46:f4:8e:07:39:b0:49:e2:be:3a:1d:51:98:30:34:
d7:02:fc:59:a6:78:9d:5f:61:22:7b:eb:fd:47:f0:
9e:19:d1:b4:5c:58:32:92:59:7f:e1:0a:55:67:53:
cb:79:0d:d8:8a:e6:28:88:4a:b5:cf:b4:a9:71:c1:
07:ba:cb:c6:7f:45:97:be:9b:54:10:01:57:ee:34:
69:79:1d:6f:02:6d:be:36:33:c0:2e:40:ee:d1:bf:
f4:92:9a:f5:fb:f5:3e:33:9c:a6:82:2d:cc:e3:fb:
eb:81:ae:84:ec:ca:57:60:09:06:2d:fb:32:f3:a8:
e1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DD:79:E2:CA:25:23:A8:DA:48:B0:25:5D:3C:77:BB:14:9D:9A:53
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6c:68:a8:c7:d3:41:4d:e9:dd:18:b3:74:94:ca:a6:bc:6e:
6b:71:0e:ee:ac:4a:ce:bd:8c:f2:ff:63:f9:63:6b:c6:58:14:
09:71:54:9f:c3:25:cd:b2:dc:19:41:40:4d:32:80:c9:17:39:
ef:e3:c1:72:e0:05:cb:20:99:8a:f2:d0:55:a4:af:ad:03:ac:
d2:c4:a9:f7:64:f8:64:f7:56:2a:ef:df:12:50:fb:14:97:a0:
77:92:24:e7:4e:28:a8:fc:f3:32:84:b5:2b:99:eb:e8:fd:9d:
a6:cb:d0:53:7b:02:25:48:26:fb:fa:0d:df:9d:b8:fa:d5:92:
e7:1d:12:c1:49:f9:20:12:0c:bd:b8:3e:76:44:fe:08:c8:81:
58:5d:b0:31:1b:89:77:b4:ae:4e:a0:c1:05:0a:1c:d2:cd:8f:
20:41:6f:cc:bc:09:65:90:60:1c:8c:6b:fe:58:1e:7b:80:45:
06:ba:61:82:a8:74:20:97:e8:58:c6:af:b5:8b:46:67:0a:56:
65:d0:8e:cd:e0:05:29:a0:9f:32:fc:4d:5d:91:62:60:5c:66:
7a:ba:7c:cb:36:b5:cb:d5:35:61:0c:2c:f8:cf:a3:23:11:ed:
c4:59:b4:04:cc:23:03:e3:e7:d0:22:9b:78:ba:22:12:88:de:
b4:92:54:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:59:33 2025 by rpki-client