Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: rNWAatfywGTHDIB+/PQZKvJNinBgabUnvKF5a8Rvjqc=
Subject key identifier: B4:64:3F:ED:DD:6C:2F:2C:57:99:61:E4:A2:E9:CB:43:E1:B4:22:26
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 019609E747981BAD44EBA34C71FBF75EE1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 05E1
Signing time: Sun 06 Apr 2025 07:01:14 +0000
Manifest this update: Sun 06 Apr 2025 07:01:14 +0000
Manifest next update: Mon 07 Apr 2025 07:01:14 +0000
Files and hashes: 1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: gfdcU3R2AyG6It0bTQwmRvgMqBRcMYveqyKc/viKyUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e7:47:98:1b:ad:44:eb:a3:4c:71:fb:f7:5e:e1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Apr 6 07:01:14 2025 GMT
Not After : Apr 7 07:01:14 2025 GMT
Subject: CN=b4643feddd6c2f2c579961e4a2e9cb43e1b42226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:3b:bb:ea:2f:25:3f:41:38:c1:9a:76:9d:
bc:dc:e8:7a:75:d0:d9:43:11:72:b2:9a:f4:88:0a:
9d:28:9b:6f:dd:cb:97:43:39:43:41:a8:03:bc:b4:
ef:8c:dc:f0:20:e2:4b:3c:98:7a:84:8a:fc:2c:05:
82:fd:7a:fc:55:bb:02:4c:d4:ac:2b:d4:ab:2f:87:
36:83:8f:41:6d:d9:76:8f:13:a8:5e:d0:52:22:8b:
c4:56:5f:ee:d4:d7:65:55:d2:93:9f:70:db:6e:63:
f9:d1:63:61:c9:09:d5:66:33:19:88:6e:af:a4:18:
49:98:fe:b9:36:35:c8:e9:8f:6c:a5:9a:b4:63:4e:
9c:f6:04:97:3d:f5:f2:1b:67:1b:19:cb:5e:ca:08:
d2:36:ef:cf:ad:48:47:42:30:20:e1:7d:88:0c:05:
fc:b0:89:31:73:f1:f9:d2:fd:98:f2:20:34:39:bb:
49:a5:9f:a2:48:dc:9d:9f:be:9f:26:51:d8:5d:01:
8f:a2:cd:f9:62:42:96:57:07:9b:c4:26:d0:de:2f:
64:a1:53:dd:08:62:6f:c9:70:f7:be:22:ff:bd:17:
05:41:02:e4:58:d7:e2:ab:9b:ad:9a:39:46:a7:44:
d8:00:88:0f:08:64:f2:87:59:f9:50:c1:df:0e:bb:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:3F:ED:DD:6C:2F:2C:57:99:61:E4:A2:E9:CB:43:E1:B4:22:26
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e9:b2:90:93:9a:17:cd:aa:40:d0:37:71:f7:3e:cc:08:13:
4a:00:b1:9e:ed:3b:ed:26:b4:fb:aa:d2:48:1a:6e:aa:46:42:
42:38:08:ba:95:3f:94:01:1f:50:cc:35:f8:2a:c4:e3:44:11:
aa:49:f2:98:df:95:f5:1b:a1:3a:50:b1:49:b4:94:81:58:bf:
c6:a0:9a:03:df:16:26:3f:81:2f:71:9f:83:95:12:88:6d:9b:
31:21:90:ed:0a:3b:d9:96:3a:39:5c:46:aa:3d:07:fd:44:5f:
0f:7f:bd:7c:aa:14:5e:85:21:03:eb:0a:a6:69:6e:3e:a9:65:
ed:53:ab:d6:05:51:d7:0a:3d:60:ab:fd:0c:f2:45:c8:54:cd:
98:f9:56:19:5e:a9:33:d7:2a:75:18:ad:84:a0:05:68:fe:8c:
b3:7d:4f:7d:0e:de:93:a9:e2:8b:df:36:ef:ae:aa:29:05:4d:
c9:fe:0d:33:7c:54:17:ba:b8:43:29:4f:18:68:7f:fb:0e:36:
a9:c2:b5:27:e4:62:ff:a7:72:60:58:80:ac:12:c4:74:77:e8:
53:21:be:3a:de:39:2a:38:46:fd:d8:94:3b:99:97:96:a9:47:
02:70:e4:e6:e0:75:4f:9d:d7:ad:83:0b:7b:84:52:ab:8c:40:
7f:17:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:30 2025 by rpki-client