Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier: sWbyRBHOMmYi96y04w/PdMQT3ZEy2kFRIMvJUkNljts=
Subject key identifier: 61:2B:40:7B:3C:2B:38:3B:5D:21:B0:D4:99:B6:19:C2:06:B0:D3:AE
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial: 01965838B4F3A3127A6130BAC9C833F214E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number: 11AA
Signing time: Mon 21 Apr 2025 12:00:33 +0000
Manifest this update: Mon 21 Apr 2025 12:00:33 +0000
Manifest next update: Tue 22 Apr 2025 12:00:33 +0000
Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: S1mT86jMf9g9HsECC8nYYNTrL8YXyNWnuXxBscqtr2U=)
2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:b4:f3:a3:12:7a:61:30:ba:c9:c8:33:f2:14:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
Validity
Not Before: Apr 21 12:00:33 2025 GMT
Not After : Apr 22 12:00:33 2025 GMT
Subject: CN=612b407b3c2b383b5d21b0d499b619c206b0d3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:dd:de:e0:0c:aa:7c:a8:41:78:d3:a9:39:84:
cc:82:8b:93:7e:75:0f:0d:82:83:53:b9:07:14:c8:
5f:e8:46:53:7f:c9:1a:56:79:f8:3a:6b:91:44:62:
a7:96:98:a4:95:8d:a6:3a:12:59:89:96:1d:27:a9:
31:c3:2f:bf:a3:8b:8e:13:9a:96:13:90:d0:8c:1a:
8e:79:98:9a:2c:0e:56:c4:16:6d:ce:24:bb:60:2f:
a9:43:83:be:a2:5f:57:28:86:7a:65:db:4a:54:87:
7d:9a:30:01:fc:d4:04:5f:72:b4:30:0a:41:76:60:
20:ad:b7:d7:2f:1d:dc:3f:a3:94:fc:8e:9e:4b:cb:
73:c3:39:fe:9a:27:ba:5a:5a:06:f7:25:c7:23:3e:
d6:ea:77:31:b7:45:27:d8:63:27:ee:2c:f9:32:f4:
6b:76:bb:43:69:bb:fc:57:63:91:df:c1:25:f7:a2:
3c:e0:22:28:be:02:b3:df:37:00:21:84:fa:6a:83:
ac:29:1a:43:9b:1e:0c:94:76:6d:e0:7a:e5:f7:d3:
de:8d:52:ac:73:0d:7c:cf:fd:86:b8:53:67:5c:e2:
af:3a:9e:d7:33:0d:6b:8f:2d:b6:08:15:2e:47:76:
46:22:73:9e:9b:ff:17:31:6f:99:8c:f4:ab:45:12:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:40:7B:3C:2B:38:3B:5D:21:B0:D4:99:B6:19:C2:06:B0:D3:AE
X509v3 Authority Key Identifier:
keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1a:b8:ad:2f:93:8b:98:37:09:98:8f:f2:cd:c7:10:1b:a2:
11:86:5f:36:6c:59:fd:75:18:22:db:eb:97:fa:ca:d8:1e:23:
84:79:e2:88:97:07:88:40:60:4e:8e:9d:15:6b:83:5f:87:fd:
f0:9e:c3:93:57:c2:55:9c:56:8b:6d:dc:e6:7f:61:f7:35:08:
b9:fb:95:2e:87:ce:9d:62:6b:b2:71:13:9e:cf:8d:9c:af:17:
53:05:b1:61:6d:4a:b3:7a:4d:e3:14:73:23:ac:22:48:df:7b:
1a:6e:82:f6:2a:1c:8c:da:d2:d4:e3:1f:f7:6f:79:73:a4:d6:
8d:1e:8c:ea:f5:04:91:21:3a:5d:b4:51:5e:3c:3a:22:6f:af:
12:71:6f:b3:74:e8:e1:88:82:73:5a:ec:a9:9c:12:26:91:0c:
07:9f:8c:11:b0:66:c6:c6:fc:e0:8f:89:53:d0:f7:72:05:27:
3b:8d:0a:14:a5:69:bf:6a:d1:67:70:59:94:83:32:01:03:3c:
cd:af:66:d1:36:d6:52:1a:ba:ba:e3:42:5e:e6:ef:72:b9:fa:
f0:59:da:7b:6a:cb:dd:d6:ff:37:88:70:78:a0:40:12:90:ac:
6a:70:34:73:f2:85:16:36:83:2e:eb:fe:98:fc:04:58:c5:d9:
56:bb:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:03 2025 by rpki-client