Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
File: DwJfo1fCCrvxGEJiNGWOYtfccHY.mft (raw, json)
Hash identifier: 1WiYMjNhunmC1px4ZivARCIAoj5pylAs1bDJn41Jvuc=
Subject key identifier: 13:B9:4F:A3:71:B9:94:56:C0:69:5C:6A:1B:AF:F5:74:F8:60:0C:3E
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0196A23FD4F9758499C621B2182D69A0BE37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
Manifest number: 02A7
Signing time: Mon 05 May 2025 21:00:14 +0000
Manifest this update: Mon 05 May 2025 21:00:14 +0000
Manifest next update: Tue 06 May 2025 21:00:14 +0000
Files and hashes: 1: DwJfo1fCCrvxGEJiNGWOYtfccHY.crl (hash: IZhuU5hvvTd1tS/m/FE5rwHbeL2XYv+V3xG6YOEBYp8=)
2: L_Our4eaHWMOUAQjkIKeZANVIsk.roa (hash: Q9y5AKM/g9XsRWb5fByuIJk//VE8kBVF+PR2hBRUNrQ=)
3: fnisj2MvVqaFaMeYW9lmJ0SCW9o.roa (hash: 6em1xLWv3WGsIAinbV2APlVzvS3mzKB3u+DwFqIP/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:3f:d4:f9:75:84:99:c6:21:b2:18:2d:69:a0:be:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: May 5 21:00:14 2025 GMT
Not After : May 6 21:00:14 2025 GMT
Subject: CN=13b94fa371b99456c0695c6a1baff574f8600c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:b8:8b:96:8c:0c:53:47:35:fa:e8:1d:d2:
b4:d5:83:2e:c3:59:42:b3:97:d9:f9:a9:c8:8f:a2:
a7:f7:f2:6a:74:76:16:96:63:7e:0d:a1:c7:7c:e2:
7c:40:ff:1b:94:9a:9d:32:22:b5:8d:d2:96:c9:c7:
f8:a2:d9:26:41:6c:a3:8e:14:e7:bc:ac:c3:73:be:
9a:f5:67:ea:37:f8:c9:fa:de:b3:a3:e1:22:14:c7:
ce:da:1d:61:29:3d:19:e5:91:a1:88:c0:6a:03:05:
cf:e3:5b:04:57:43:42:c6:04:94:bb:d2:0d:61:aa:
15:37:d3:31:83:d7:6e:f4:7d:6b:48:87:0f:43:cd:
5c:10:46:d3:be:63:d5:65:a5:ee:f2:45:fd:32:c7:
c6:e2:c5:4e:4b:9c:db:7e:41:82:97:99:2b:b3:5e:
59:39:c3:23:6f:5f:5e:af:c9:c5:f5:81:32:bf:0c:
bd:4a:05:90:ec:bd:3d:d3:02:ef:e9:0e:de:e1:ea:
1c:3f:47:e3:d5:06:e1:38:10:c9:5c:56:02:90:90:
39:1a:f1:bb:74:17:32:87:24:ea:48:0f:2f:55:17:
41:b9:37:c1:ec:b4:39:be:61:71:c0:46:89:6f:17:
fb:42:bf:86:d2:7e:db:39:7e:60:ad:99:74:27:a9:
f5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:4F:A3:71:B9:94:56:C0:69:5C:6A:1B:AF:F5:74:F8:60:0C:3E
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:52:00:90:e0:7e:d4:34:8f:4b:47:99:ae:9b:d3:68:a5:02:
2b:ce:98:e0:bb:3e:d9:39:18:b8:77:aa:4a:cc:48:6f:54:ae:
f7:42:90:be:54:51:0d:a8:a1:e3:fb:10:f2:b4:b5:3d:43:0b:
32:5d:b4:a0:26:6a:64:4c:4b:96:19:55:be:ad:5e:b8:0b:fd:
5d:c7:6c:32:62:6d:3e:46:d1:c5:19:fa:35:c8:c3:1c:c9:48:
fe:21:41:c0:e2:2c:18:df:bd:a3:f9:1f:8a:48:44:94:d8:8a:
74:90:4f:02:c7:c9:2c:55:12:ec:d0:e1:80:72:0d:11:98:44:
84:a1:57:16:4d:96:cb:f5:6c:a1:2d:f0:0d:c5:9d:1c:29:9a:
5b:20:2f:4f:a1:70:77:43:ff:86:99:51:45:85:b4:44:2f:84:
10:f8:0e:d0:17:47:88:04:c1:5d:a9:19:74:28:58:5c:72:5e:
52:0e:36:61:8d:bd:80:29:f9:21:4c:a8:20:87:3d:e2:0e:9c:
14:2e:0a:59:86:3a:13:79:de:3f:fb:46:2f:a9:e4:55:a2:db:
85:8b:97:80:ab:e6:96:42:9e:51:89:d8:e7:64:df:9a:f5:a0:
15:2a:7b:7a:69:5a:f8:40:c4:4a:07:9e:2e:17:1d:67:e2:18:
51:cd:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:07:10 2025 by rpki-client