Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File: rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier: B5W01d1x4SZct3odkE+vgFfnaBTEKjvlmDs3fBefLCc=
Subject key identifier: 54:03:A8:5A:37:19:FA:19:12:E2:EA:FB:26:44:3F:9A:29:C4:45:89
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer: /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial: 0196B5903D90FC299D63A507CB67A6AEFFD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number: 029B
Signing time: Fri 09 May 2025 15:00:51 +0000
Manifest this update: Fri 09 May 2025 15:00:51 +0000
Manifest next update: Sat 10 May 2025 15:00:51 +0000
Files and hashes: 1: nQ9AG6h0t4BBBHaY1oIQ2Z7HXiE.roa (hash: bmhEBNk6LesEwcu8xwGODwFl5oPTmJlYZFKxsnvzgRU=)
2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: KhErv66nGsMf6v7SVwUXlZujZuOJsdk0zWPlyYM/e/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:90:3d:90:fc:29:9d:63:a5:07:cb:67:a6:ae:ff:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Validity
Not Before: May 9 15:00:51 2025 GMT
Not After : May 10 15:00:51 2025 GMT
Subject: CN=5403a85a3719fa1912e2eafb26443f9a29c44589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:f2:0b:e8:ce:d2:ea:9e:03:7a:28:f3:24:
88:4e:9c:9d:a7:d8:dc:ba:21:74:e2:ed:d2:cd:84:
b7:90:2e:4c:f4:66:fb:c9:58:e4:c0:bc:2e:97:6a:
c1:6a:88:95:e7:1f:af:47:a6:9f:87:ab:15:4e:1c:
9c:ae:a4:28:fb:f4:32:5f:aa:70:30:d4:a6:4f:9c:
20:49:c5:00:69:f0:dc:fa:be:bb:82:a4:9c:8f:7f:
14:24:46:32:b8:1f:d8:51:22:d8:96:ce:8e:32:5d:
a4:86:cb:49:d7:69:60:c0:c8:72:4f:56:65:8e:b3:
69:e7:a8:92:82:bd:ee:86:da:f5:e0:13:76:5b:88:
be:52:cb:56:b2:e8:7a:bd:99:ca:55:74:d3:d5:cd:
c9:6d:ff:0d:bc:b9:2a:cc:0c:1b:de:25:fc:6b:38:
65:b8:49:b4:fc:65:73:16:18:55:9e:cd:7e:27:cf:
a8:59:fc:2c:6f:55:7f:56:2a:d4:66:34:cc:26:f5:
61:9c:f1:bd:76:5f:25:82:86:57:cc:6d:79:79:71:
95:f4:04:d5:43:58:f4:e6:bf:e3:51:e8:d7:24:78:
4a:17:90:45:91:d7:e3:8a:5e:6f:94:bd:3e:c5:58:
86:a5:1d:a4:31:e4:57:94:6a:ce:bf:69:5e:e5:8d:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:03:A8:5A:37:19:FA:19:12:E2:EA:FB:26:44:3F:9A:29:C4:45:89
X509v3 Authority Key Identifier:
keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:4f:a0:80:57:e8:13:cf:ef:ea:f4:3d:12:f9:b5:74:63:85:
5b:2a:44:0a:40:1b:08:d5:fb:62:36:eb:24:26:7f:a8:99:80:
a1:96:13:f6:a3:4f:f8:fa:07:81:43:45:1e:46:d7:fe:a1:b4:
be:6d:b0:c6:69:b1:0e:8b:85:e9:f6:d2:f5:90:5a:2d:84:3c:
ef:e3:be:4a:7b:13:b3:68:d6:0f:c6:58:1e:e5:75:ce:a9:1f:
b0:14:46:cc:15:8c:08:0d:60:2e:6d:8d:66:98:ee:cd:63:36:
63:94:39:e1:ba:0e:31:b0:0b:43:c2:e7:ca:49:3d:76:ef:52:
87:01:28:cf:d9:aa:ff:07:6b:fb:1e:20:d9:78:30:6e:6b:c5:
a6:2d:50:23:e7:41:3b:64:aa:8d:38:f4:ab:52:0a:45:63:5e:
8d:60:49:62:87:06:ec:ce:b0:1c:cd:4c:82:01:7a:46:7e:57:
65:7b:46:ab:dd:98:f1:f8:7f:56:6c:35:87:1e:6c:58:72:7b:
13:45:6a:82:d1:7c:b1:ae:0d:de:2f:e3:f6:ac:42:01:d4:96:
14:98:fc:c8:1e:48:cc:b3:4d:51:5f:15:e4:6b:72:19:56:b9:
cc:7a:f7:6d:cc:44:49:df:a0:47:96:28:f1:0b:9c:f8:0c:36:
22:fa:77:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:35:43 2025 by rpki-client