Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: kTWUuZV+3y6jakq8lTGWPeVzQzR+1kaY50fupM65A2g=
Subject key identifier: 88:25:30:54:72:BA:A5:73:30:DD:80:CA:47:B0:AE:4C:79:00:F9:09
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 0196C15E001C06C6600D4A85614F68DF6CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 22:01:25 +0000
Manifest this update: Sun 11 May 2025 22:01:25 +0000
Manifest next update: Mon 12 May 2025 22:01:25 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: gjoyqRUvyFj3xaavRpCw0+gmuWFLxeRuVJEdC9dY+4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5e:00:1c:06:c6:60:0d:4a:85:61:4f:68:df:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: May 11 22:01:25 2025 GMT
Not After : May 12 22:01:25 2025 GMT
Subject: CN=8825305472baa57330dd80ca47b0ae4c7900f909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:41:a4:ed:f9:13:bc:3f:96:ce:4e:ee:1a:7d:
05:ea:20:e7:08:91:fe:86:cd:81:b8:c3:8a:1c:08:
c1:0d:58:a3:06:58:5b:b0:33:fc:2a:db:18:f0:69:
fe:3a:c7:76:22:b0:e4:47:3d:02:ba:31:38:14:2b:
80:8e:7e:0c:d3:15:0d:08:45:8d:96:62:17:42:fd:
ba:c2:1e:00:c5:b8:ef:6b:8a:c3:60:95:14:8e:06:
01:75:c8:5c:ad:a4:02:2d:5e:92:c2:9b:0a:b7:bb:
4b:50:9a:bd:63:e4:cf:c4:21:f2:19:96:c5:5e:df:
0d:97:2e:6b:d0:2a:c1:ae:96:7d:e0:4f:14:78:4c:
28:39:56:05:60:bf:2d:48:7f:17:2f:f7:1a:36:a5:
55:9d:48:61:a1:e9:a9:89:7f:00:b0:93:d8:60:13:
a8:0d:aa:d7:5c:66:c9:83:2e:83:c0:19:1d:0a:75:
7d:66:27:e5:60:48:1f:e0:04:66:d9:94:ad:42:68:
57:79:3d:1f:37:b2:db:1e:f5:e4:73:c0:16:5b:66:
88:d9:a2:9f:05:a2:7d:53:f8:01:bc:22:c1:e0:eb:
b2:aa:6b:83:de:47:c7:cf:a8:b3:be:ac:6b:83:9a:
55:47:ef:37:9a:2c:ac:85:83:3b:77:1a:6d:51:ec:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:25:30:54:72:BA:A5:73:30:DD:80:CA:47:B0:AE:4C:79:00:F9:09
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:26:0e:c6:88:50:1f:29:23:f2:4d:cd:34:60:ee:61:ec:66:
c8:bf:ab:80:86:d8:48:86:35:64:85:29:3a:58:c9:66:aa:ad:
f5:e0:a2:4e:04:6f:f7:f1:9e:d2:42:0f:c6:bf:94:bd:35:ca:
98:29:4f:e8:ee:2a:1b:aa:00:17:a1:b7:cd:f9:6d:03:42:18:
e6:d7:6f:8e:a8:7f:fe:74:17:12:be:05:e7:68:e5:17:4c:d8:
1e:fa:ef:f5:31:ed:63:b0:7e:d5:25:8f:6f:5d:ad:1e:d3:64:
21:e6:28:99:73:64:89:39:7a:81:54:73:c5:e8:f0:a0:6a:2d:
cd:16:58:2d:ed:c8:be:24:d9:8e:ec:a3:5a:15:b9:98:55:56:
e4:30:f2:7e:79:ba:d0:d7:64:1b:88:86:44:dd:ad:89:91:fa:
4a:94:f3:7e:a9:36:40:06:eb:89:f7:d4:68:d5:91:7d:d9:ec:
b9:6c:42:47:b5:e6:cb:bc:24:65:1c:a0:e5:bf:a1:dc:45:f7:
bf:35:69:da:34:73:0a:58:b3:cc:d9:f9:77:73:2b:3a:09:77:
5d:ae:6f:df:12:c3:7b:8c:78:ab:f1:ab:02:05:6a:75:e7:a3:
63:f6:c4:9e:33:ce:02:0c:f0:ce:5d:6c:cf:1b:79:ed:47:7b:
6d:b8:0a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:20:52 2025 by rpki-client