Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: GHoJOq9tNkqROtuUiJuJ5lk6PNLIpJ7afx5XoUjeMWI=
Subject key identifier: B2:B7:12:CF:CD:0E:D6:96:F4:71:C4:02:A8:AA:D6:30:27:54:85:E5
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 0196B5C6A8E2E1C40E6961826A8CADFEF83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 03F8
Signing time: Fri 09 May 2025 16:00:17 +0000
Manifest this update: Fri 09 May 2025 16:00:17 +0000
Manifest next update: Sat 10 May 2025 16:00:17 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: HqT1n0PbB9ZY207m1a6lVrdZLx61p1H1UHPPytiSMtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c6:a8:e2:e1:c4:0e:69:61:82:6a:8c:ad:fe:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: May 9 16:00:17 2025 GMT
Not After : May 10 16:00:17 2025 GMT
Subject: CN=b2b712cfcd0ed696f471c402a8aad630275485e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1e:78:fb:15:59:f2:6a:04:1c:aa:f5:1a:a6:
85:10:b7:2a:e7:3e:6c:56:b1:b6:c3:8f:ca:38:64:
b5:3b:69:3d:f6:81:ca:10:5f:fd:29:8a:94:30:98:
71:bf:e8:c1:68:07:00:23:40:01:ae:d1:3c:fc:69:
f6:1e:e7:d4:66:8d:b6:b8:53:4f:7f:96:89:89:d1:
c9:ad:cf:c5:64:d2:21:9a:e9:a2:1b:67:6a:e1:a7:
2c:c9:42:12:79:b7:c7:dd:36:a2:48:cb:d9:de:0c:
2a:c8:a2:82:c3:db:ee:cf:94:1e:80:47:1f:29:15:
16:77:00:d4:e7:ee:26:63:2d:51:f4:d4:52:ea:ae:
6e:1b:9a:ff:a4:59:ca:6f:8f:4b:24:f9:87:c8:21:
cd:a2:43:55:26:03:c2:26:ae:9e:c2:d6:9b:89:2b:
d8:7f:56:88:56:94:33:33:a8:cb:fc:6e:32:e3:05:
9b:7b:3f:7b:21:21:4c:d0:2c:a7:a4:4b:50:67:c3:
fb:16:cb:b2:99:0a:51:72:cb:22:7f:47:3a:a8:73:
aa:09:26:92:7f:5c:48:de:ad:d9:b3:f0:57:0d:28:
13:f3:24:dd:11:12:2b:e9:a3:28:c1:75:bb:1d:37:
1b:7a:74:47:0a:10:f2:e2:84:04:bb:22:94:88:b6:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B7:12:CF:CD:0E:D6:96:F4:71:C4:02:A8:AA:D6:30:27:54:85:E5
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4e:cd:a9:2f:76:cb:23:4c:e3:89:d7:42:b3:87:5a:0a:ce:
b3:b2:88:c0:df:82:20:b4:04:63:d4:74:ca:22:fc:12:61:b6:
19:d2:a1:e4:d5:84:56:5f:18:5c:5a:6a:58:d0:6a:25:b4:cc:
fa:a3:de:0b:95:78:38:90:13:4f:1f:51:19:1f:44:57:f8:8f:
00:58:16:ec:00:1c:ee:ed:b2:af:95:f7:09:a6:26:e4:15:6f:
ab:27:07:2c:aa:db:65:81:93:e2:ac:8d:1c:74:96:6d:e3:c3:
8c:11:ef:30:6b:9e:da:ab:97:65:22:6b:f9:4d:3d:ff:da:2d:
9b:ef:dc:ad:f1:4d:b3:68:70:03:82:50:65:f8:af:61:ec:62:
ec:13:fe:6d:a2:58:7a:ee:4c:93:a3:77:b1:fe:2b:40:8b:c5:
f2:b8:72:71:97:60:b6:0d:90:fd:0c:40:45:cf:2a:db:82:17:
04:75:88:d3:dd:4b:13:8e:43:4e:f0:44:af:3c:92:1d:d0:c8:
4b:f5:63:77:33:b7:99:99:6d:a3:18:a7:02:9d:44:1d:7c:64:
40:4b:29:de:32:71:ac:98:5d:6d:e0:dc:69:8e:61:45:65:11:
04:bf:37:07:f4:95:b2:62:0e:c8:48:0c:46:4f:2b:eb:a1:b9:
cb:48:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:07:11 2025 by rpki-client