Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: o5gU0+7TrbiEQhnWiFmvsdvo647AMAtGe8VuKHSRcEo=
Subject key identifier: E4:C8:89:4B:F8:FA:38:23:5D:3F:C4:FA:8E:DA:E3:73:87:89:15:FB
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 0196C3BA0A76BDDCC6EE569A0BFA7775D2A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 12E2
Signing time: Mon 12 May 2025 09:01:11 +0000
Manifest this update: Mon 12 May 2025 09:01:11 +0000
Manifest next update: Tue 13 May 2025 09:01:11 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: ExZy9KDWNdXtgwJ9vNWqyhmrUAlRcXy1HGtBBq5TZWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:ba:0a:76:bd:dc:c6:ee:56:9a:0b:fa:77:75:d2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: May 12 09:01:11 2025 GMT
Not After : May 13 09:01:11 2025 GMT
Subject: CN=e4c8894bf8fa38235d3fc4fa8edae373878915fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:e5:92:48:38:f2:11:ea:e3:e9:b4:04:b1:
d4:a1:4c:6b:e1:84:e4:9e:43:b2:6a:8b:5a:f5:52:
b5:1b:54:42:ff:f8:e8:ba:02:f7:a0:59:e6:92:36:
5e:8d:18:70:98:a5:b1:55:90:82:39:d7:a1:aa:85:
70:66:10:31:c9:2d:b7:ca:8a:cb:37:b0:1b:16:4b:
20:92:69:d7:4c:94:42:5e:b3:4c:00:d8:1c:ef:e9:
c1:7e:af:73:d4:86:91:ac:96:22:48:02:c8:94:fc:
aa:73:b6:27:2c:df:80:14:ab:8a:4a:c9:d3:32:01:
bc:2c:d9:4d:4f:e8:1f:e0:8f:99:b5:18:a9:14:93:
a0:d7:9f:fc:ab:14:7b:00:bd:50:69:af:a1:18:57:
f7:41:f8:2c:34:c6:2e:ce:85:8e:ce:a6:33:58:58:
e0:5c:28:dc:08:95:61:c9:5a:12:34:a4:b4:46:ec:
37:00:00:33:2f:37:ad:a7:d9:9e:e3:a3:45:78:0b:
d8:1d:90:b2:2b:8c:37:82:7e:03:83:37:d5:47:ae:
51:68:1c:59:1f:ec:53:ca:f7:e6:c6:fa:02:b6:67:
d2:fb:ad:ed:20:7e:e2:6a:d1:0c:17:e9:bd:e6:24:
80:9e:7a:12:b5:7c:85:30:5c:c4:7e:d6:cd:fe:08:
f9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:89:4B:F8:FA:38:23:5D:3F:C4:FA:8E:DA:E3:73:87:89:15:FB
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:eb:d4:50:5c:7e:33:30:a2:d5:a9:4e:46:6c:8b:de:35:64:
88:c7:b9:a1:f9:1c:05:c3:a4:8f:c8:55:ae:83:3b:5d:7e:0a:
29:9a:00:47:8c:fd:c8:bc:0f:29:52:96:7a:95:03:a0:4b:a2:
26:fb:01:dc:98:22:b6:90:f2:e3:52:b8:38:0b:11:b8:56:63:
2f:ba:0f:8c:d4:b4:63:8b:ed:cc:17:ba:9d:af:9f:c2:99:90:
bb:0b:5a:dd:73:fe:2c:47:24:a6:02:82:f9:96:12:a6:d5:70:
59:47:b3:20:e1:36:57:43:23:15:9d:eb:db:02:66:79:70:74:
0f:61:97:f2:e6:1c:42:f3:43:46:c8:41:8e:45:88:97:c5:6f:
06:82:85:5a:39:55:e7:61:19:df:bf:6c:0a:60:6a:fa:5e:c8:
a3:4d:97:16:a9:48:77:87:d9:10:5e:72:c2:e7:b5:f5:18:88:
e0:27:56:78:c0:eb:40:c1:4f:21:6a:cd:69:1f:ea:b2:da:7d:
d0:f1:04:fc:f6:67:79:af:1b:3c:9c:c2:37:65:e9:1e:b8:2b:
24:3c:7e:07:31:22:d2:7b:e1:99:48:c3:85:4f:3d:67:e7:08:
e9:95:e4:73:33:e1:b2:0c:4d:f5:7a:f7:8f:31:28:41:62:93:
58:d3:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:51:45 2025 by rpki-client