Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
File: rwAta7hamGvIjbzZMyCUVOW14II.mft (raw, json)
Hash identifier: egBDIIsnkLsMivvmdeYdC/qf5hIXZyqwDGNW5fkSbR0=
Subject key identifier: 14:24:DB:A8:C5:0D:49:5D:2F:36:88:05:21:49:AC:19:3D:9F:F3:79
Authority key identifier: AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
Certificate issuer: /CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Certificate serial: 0196CDCF7D95FFABC53125BBF152E7580E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
Manifest number: 103C
Signing time: Wed 14 May 2025 08:00:49 +0000
Manifest this update: Wed 14 May 2025 08:00:49 +0000
Manifest next update: Thu 15 May 2025 08:00:49 +0000
Files and hashes: 1: FSst80BStcOZoxcVEEn7HUNlaMg.roa (hash: MkzJ0Sac3ZN5iWdcIOjWwvYuR5zj6qypIoySO/md3YQ=)
2: rwAta7hamGvIjbzZMyCUVOW14II.crl (hash: dvv/Hc41vAavtGBFRn7EGN1HxnQ8Osg8OF77JipGmUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:7d:95:ff:ab:c5:31:25:bb:f1:52:e7:58:0e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af002d6bb85a986bc88dbcd933209454e5b5e082
Validity
Not Before: May 14 08:00:49 2025 GMT
Not After : May 15 08:00:49 2025 GMT
Subject: CN=1424dba8c50d495d2f3688052149ac193d9ff379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:b8:1f:b6:c8:c2:b8:1e:5f:83:f4:a3:29:
0e:bd:15:ac:a8:7e:b9:0c:10:c5:93:c3:3d:4f:7b:
0d:ab:39:e6:da:e1:d8:8d:06:ce:6e:99:3e:53:09:
cf:96:2f:34:8d:30:95:44:ef:cb:be:9a:d5:75:dd:
6c:b3:cb:9f:42:33:f3:d3:cb:f8:51:13:b8:4a:89:
8c:8d:a2:4a:5e:06:96:4f:e1:cf:25:4e:a2:26:fb:
31:3a:5d:f3:0f:bd:fb:00:b9:33:ad:c0:b4:99:80:
90:7d:fb:ef:e8:07:e1:34:59:a8:39:ba:9b:2d:a7:
84:cf:d8:ed:aa:7c:94:3a:58:e7:71:c8:a8:da:7f:
9e:2f:7e:77:6c:f6:dd:be:8a:87:8f:88:d4:6c:d6:
8c:23:ec:30:78:6a:d3:7c:af:98:90:09:2d:fb:ae:
d6:38:c1:fc:04:57:dd:7c:6a:bd:75:4f:d9:26:86:
50:23:13:f1:48:41:b0:bd:66:79:d2:5c:3b:9c:4c:
6d:32:af:ee:cc:23:c5:08:d0:af:2f:1f:c6:0c:30:
33:72:f6:ec:37:d7:4e:14:8a:0d:1a:8f:cb:e5:0f:
a2:25:f5:d7:ed:a3:b1:d8:c7:48:62:fc:01:1a:de:
9a:52:3a:b3:55:dd:c6:34:55:a5:4c:c2:11:9f:59:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:24:DB:A8:C5:0D:49:5D:2F:36:88:05:21:49:AC:19:3D:9F:F3:79
X509v3 Authority Key Identifier:
keyid:AF:00:2D:6B:B8:5A:98:6B:C8:8D:BC:D9:33:20:94:54:E5:B5:E0:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwAta7hamGvIjbzZMyCUVOW14II.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2eda2-e885-4640-9c84-d6ef8e914307/1/rwAta7hamGvIjbzZMyCUVOW14II.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:65:68:2f:39:e7:f1:37:d1:54:1d:51:b1:f1:cd:d2:04:89:
99:6f:61:08:ac:ab:a1:e3:7e:dc:28:32:25:67:75:c4:44:1c:
a9:7a:78:b1:21:5d:8e:4f:29:65:37:63:e8:dd:8b:bf:d0:8c:
ad:db:d6:e9:50:07:6a:01:08:72:96:82:b6:37:eb:a9:b7:62:
c2:29:2a:bf:9f:9c:bc:c7:ae:45:8b:33:89:81:db:33:4f:57:
91:fe:25:49:ec:eb:8a:b3:2f:0c:df:55:e4:51:06:0c:b0:86:
7d:4a:8e:ed:de:50:bb:bc:36:74:67:e8:90:14:82:47:69:f6:
ec:cd:44:fa:fb:f2:cc:cd:0f:42:5a:21:09:47:73:97:ba:58:
eb:75:0f:5d:06:89:bd:9f:d6:53:31:ab:53:40:d4:6f:cc:3c:
71:34:8d:db:29:86:bb:0f:3a:3c:d3:04:1a:0c:c1:10:dd:71:
d0:f6:97:9c:ee:61:af:ff:2f:04:1d:54:6a:5f:2a:60:1b:f0:
cc:6a:90:89:2d:7b:6c:1b:50:74:6a:90:da:83:00:4c:c7:1c:
42:fa:6c:79:6a:ee:13:3e:9f:89:18:72:f7:63:ac:19:d1:b6:
15:2c:f6:1f:7c:72:40:20:05:1c:95:90:3d:23:40:db:cb:f5:
6e:69:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:13:23 2025 by rpki-client