Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: OkOdqEXsN4laIR7y6b+XsE/o+BDv6oEcETLmmJb43lI=
Subject key identifier: 26:89:1B:5E:F9:E6:97:62:56:96:21:21:B6:FD:CA:A3:4A:F6:C0:80
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 0196B77E11E7A294C3EEDA46678E9B11639A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 1248
Signing time: Sat 10 May 2025 00:00:14 +0000
Manifest this update: Sat 10 May 2025 00:00:14 +0000
Manifest next update: Sun 11 May 2025 00:00:14 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: lzIPjvFjvp9nwX1rsITjSPNGE9CLLX2up0R+2EbPgaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:7e:11:e7:a2:94:c3:ee:da:46:67:8e:9b:11:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: May 10 00:00:14 2025 GMT
Not After : May 11 00:00:14 2025 GMT
Subject: CN=26891b5ef9e6976256962121b6fdcaa34af6c080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:da:7c:0c:58:b1:19:45:4c:2c:80:ad:2e:
85:a0:b7:89:28:76:c1:f7:8b:31:19:9d:33:3b:5c:
69:05:83:e8:be:ef:19:7d:3a:99:7e:35:be:df:08:
76:92:bf:e9:b9:33:24:2c:e6:80:00:c2:2c:43:af:
82:24:65:14:ab:67:8e:07:71:9c:3e:ae:e3:3a:fa:
22:e5:af:3b:9e:91:67:cb:4f:07:88:ea:4b:29:7a:
b9:28:39:a9:6c:2d:6b:c7:41:ac:49:9b:79:47:6b:
31:f1:39:b7:c9:7b:37:b5:bd:4b:f5:60:4a:ae:3b:
b6:8b:16:c5:e1:be:c2:04:d0:31:d7:87:f2:f5:50:
24:31:6f:3a:41:fb:a9:a6:f0:3f:cc:21:8e:02:e8:
7b:bd:38:7e:73:b4:2e:6c:d9:67:0d:1b:7a:21:36:
63:49:95:ab:b4:b1:8c:44:02:dc:c2:3d:c8:1a:62:
6b:c0:3e:3e:68:74:37:fd:87:f1:ce:49:63:be:55:
f7:9d:69:88:75:af:ba:0a:af:e3:22:31:fe:cf:61:
b0:31:12:6b:c7:5e:6f:22:c5:1b:94:7f:87:9e:41:
b2:39:f5:d3:37:3d:1e:d7:36:02:ff:f0:2e:92:a7:
80:c5:6e:6d:49:6b:90:bd:e5:bd:a2:d7:1c:55:69:
78:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:89:1B:5E:F9:E6:97:62:56:96:21:21:B6:FD:CA:A3:4A:F6:C0:80
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:70:02:ec:63:2f:ad:c9:44:90:6f:16:8c:d0:24:18:82:15:
55:e9:ab:7e:e4:cd:5d:c5:cc:37:43:77:92:7e:b9:0c:67:e5:
41:51:33:28:2b:0b:4a:e4:a3:e5:87:16:3b:29:92:88:7a:5e:
53:46:b2:0f:35:a9:80:ad:e9:82:a8:c4:b8:b4:1e:5c:b5:b0:
02:f8:d8:f0:5c:02:65:e5:b2:ee:1d:9d:d6:24:e1:11:8f:50:
48:3e:42:1f:36:7b:ef:dc:93:f5:45:63:64:b3:62:a1:be:5c:
6c:cf:f0:c6:a3:5f:71:4e:db:a6:a5:6d:e7:c8:5a:f1:c6:8b:
7b:09:02:17:b3:19:f1:79:aa:1d:d5:aa:64:9c:4b:42:74:b9:
a5:04:f0:75:cb:24:47:04:88:41:23:54:50:f3:b6:3e:a2:06:
47:27:3f:9f:82:2f:1c:0f:f8:11:78:41:e0:59:bb:b3:07:67:
9e:84:90:93:eb:90:3e:1e:4a:55:33:a0:d6:f6:7b:4a:4a:1c:
41:f6:eb:7e:8e:d0:d8:ab:43:69:58:52:a1:ad:60:87:88:9e:
a0:b1:52:47:f9:d7:29:f4:e7:89:c3:4c:ee:60:17:32:b6:a5:
c3:1d:a2:a0:aa:f9:30:fd:6c:74:ae:df:7f:72:e1:2a:df:9a:
78:67:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:10:07 2025 by rpki-client