Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: 7u5aIospkQj3s3IKiassJZt7eA1itRYuMfr2bE8lKZs=
Subject key identifier: 09:39:D7:8A:D6:BF:A7:91:7B:85:C9:90:E3:BE:0A:3F:7F:79:87:6E
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 01965ACBA8F3E35178539C2AE7E964216E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 00:00:18 +0000
Manifest this update: Tue 22 Apr 2025 00:00:18 +0000
Manifest next update: Wed 23 Apr 2025 00:00:18 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: R1s8281ll3BNX94R5LY9dDeezBIGo0aJFGovdFONcCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:a8:f3:e3:51:78:53:9c:2a:e7:e9:64:21:6e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: Apr 22 00:00:18 2025 GMT
Not After : Apr 23 00:00:18 2025 GMT
Subject: CN=0939d78ad6bfa7917b85c990e3be0a3f7f79876e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:ce:c7:f4:4b:41:aa:54:71:10:85:77:bc:
22:cd:ee:a8:77:29:88:ba:74:e5:fc:2d:1d:ab:1f:
44:47:a4:b9:5e:f0:4e:89:aa:6f:20:df:31:1d:cf:
c4:72:34:79:52:49:87:18:d6:1d:df:39:67:84:e5:
d5:cd:cd:9d:5b:b5:de:77:61:53:45:eb:70:69:93:
eb:25:93:3f:7a:ef:58:98:be:9c:08:4a:d4:60:82:
4d:05:be:02:2e:ae:bc:56:78:a6:0a:ff:70:36:27:
3c:94:e6:c5:e6:48:f0:09:b0:67:fe:ca:67:55:e9:
3f:cc:6a:f3:8e:e6:a8:43:f6:66:91:e8:5f:32:ff:
77:17:28:ad:30:b6:1c:ed:ae:79:31:08:17:7d:00:
38:5c:96:6d:2d:b4:54:4a:a0:9d:41:56:ad:f7:82:
32:df:aa:8e:cb:2d:26:e2:b6:5a:40:c0:4e:7a:66:
14:91:d5:83:1b:d4:43:f4:a0:75:d5:52:d0:64:ab:
68:d2:6e:30:b5:b5:e0:58:42:a3:8a:05:ae:88:ef:
6c:8b:33:04:db:71:ac:26:73:fe:df:59:39:06:0b:
1f:e1:1c:aa:b9:72:04:e8:35:e1:7d:c9:c4:95:56:
b4:40:9c:22:c2:4c:ce:23:9a:3f:bf:1c:a1:99:28:
b8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:39:D7:8A:D6:BF:A7:91:7B:85:C9:90:E3:BE:0A:3F:7F:79:87:6E
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:0b:b3:f1:14:83:48:a6:46:34:22:5f:b1:3c:47:af:ae:65:
6b:dd:16:de:1b:74:7e:28:9c:74:13:2b:67:c0:91:8c:06:34:
b3:a9:57:4c:f7:88:cc:3c:9a:49:a4:c0:35:01:01:3a:6b:27:
96:d9:17:68:1e:be:ce:bb:84:ac:50:12:34:45:94:ef:c6:56:
0a:db:3c:01:ec:33:fa:eb:c1:03:71:da:81:74:1b:9f:57:4a:
4f:d1:5a:13:e1:5b:46:1b:53:37:e1:a0:78:a7:66:bd:99:83:
49:bc:a2:a0:f1:30:9e:38:83:65:18:c5:d6:8f:f9:af:57:f0:
f5:75:6a:17:8a:81:31:1d:4e:fd:f4:b5:e4:9e:71:fd:5e:7b:
4a:95:e5:07:fc:56:10:fc:25:d5:83:fc:c1:24:3b:ad:57:d3:
df:8d:c9:a5:4f:6e:41:f4:c8:67:c2:0d:60:a4:a1:68:90:6a:
70:d4:db:4b:64:7a:8c:ed:55:f0:ea:73:e7:26:18:68:d9:85:
83:fb:2b:04:57:aa:5a:b5:b6:04:27:f8:74:a9:d2:b5:12:53:
d8:99:9f:0e:a6:0a:c4:60:84:af:b0:7a:f8:08:72:7a:3d:84:
9a:b3:7d:77:72:62:61:db:2c:ab:bb:c7:ce:5e:66:1e:ac:5b:
cc:02:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:38:31 2025 by rpki-client