Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: 95TxaQpKPPVs6APAiXE2qEjlG9lB7DjgEhvsBj06KcY=
Subject key identifier: A8:94:C6:44:64:C3:0D:5E:54:46:8B:25:0F:C2:53:4F:B1:8C:97:EF
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019638AE0D07FA540CB8ADAC0B7551BEE814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 0325
Signing time: Tue 15 Apr 2025 09:00:52 +0000
Manifest this update: Tue 15 Apr 2025 09:00:52 +0000
Manifest next update: Wed 16 Apr 2025 09:00:52 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: gRwjoNMbzLSJ0MlNzzXtiiSjGljNa+kFRGyM5kg2u90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:ae:0d:07:fa:54:0c:b8:ad:ac:0b:75:51:be:e8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Apr 15 09:00:52 2025 GMT
Not After : Apr 16 09:00:52 2025 GMT
Subject: CN=a894c64464c30d5e54468b250fc2534fb18c97ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4f:0c:f4:f8:cf:e4:ab:21:d2:ef:d5:b9:00:
e7:ea:09:2b:7c:46:b2:2e:43:a7:80:b8:aa:76:6b:
e6:cd:fb:7c:71:86:e3:cd:57:22:33:ab:05:e5:dc:
42:5d:8e:3c:a3:d5:96:65:db:cb:f9:58:44:6a:c6:
1b:2b:24:9f:33:74:c4:39:44:39:b1:a4:40:ee:87:
6a:10:6f:83:b1:52:b5:36:12:b7:49:e8:54:c5:85:
65:8a:f1:2a:a6:2e:f8:2d:8e:26:9b:b7:c4:7f:39:
c2:07:63:af:4d:01:58:f0:c8:9b:05:ec:dd:01:37:
d6:20:c9:bf:29:9e:4f:de:e9:2a:1a:cf:3d:c0:ae:
d4:64:51:19:ec:eb:21:9a:13:80:3a:a8:25:f2:7b:
11:e0:50:5b:4e:c2:fa:d2:5e:12:0d:d9:53:0c:30:
10:93:18:23:97:ba:e0:bc:19:ba:ea:9b:71:b3:9a:
71:ba:7d:ac:7c:65:15:69:66:10:36:6b:53:59:45:
b6:b4:58:df:c3:4f:62:9e:b5:cd:af:ac:10:89:52:
e9:e0:99:d4:6b:67:dc:eb:2a:44:4e:81:f2:bc:c5:
b1:8d:74:b7:a9:94:29:89:d3:63:91:b0:93:bd:4e:
f5:ba:04:49:45:21:79:3d:c5:3d:ce:c4:d1:22:02:
08:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:94:C6:44:64:C3:0D:5E:54:46:8B:25:0F:C2:53:4F:B1:8C:97:EF
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:bc:30:78:b0:a9:19:50:a9:1c:77:c9:a3:14:dd:ff:88:
87:b7:ea:69:f3:b9:7c:d6:5f:cd:01:46:d3:45:a4:de:e3:b1:
d3:27:57:02:21:93:0b:7a:76:89:57:0b:88:38:81:41:54:99:
6f:0b:92:71:ee:ac:75:3e:72:c6:89:61:a8:06:e0:d7:34:54:
52:85:ce:4d:4f:f0:92:ba:89:21:00:b5:b0:54:85:3f:13:d5:
6a:fa:67:6b:cf:d1:3e:77:58:eb:19:0d:1a:c8:2b:87:40:53:
5d:90:b9:67:f4:80:f5:53:c4:6b:f8:8c:32:35:29:dd:1e:af:
fb:72:b7:de:60:2c:d2:3a:04:22:be:a2:f1:01:ce:1f:f4:69:
e2:6c:91:73:35:cf:d8:f5:6a:2d:e9:9d:fd:3a:76:f4:b6:ab:
97:23:07:45:f8:7e:61:3f:50:30:03:db:88:35:2a:a1:0e:48:
a5:db:2b:81:4d:39:d0:66:88:58:0f:9d:ba:e8:4e:d5:3a:09:
95:b7:0f:b6:8f:f1:98:85:a6:73:d1:8f:ff:e8:69:20:0c:67:
14:c6:0f:3d:fb:a9:d4:53:13:64:1a:fb:93:21:a4:0a:6d:39:
54:18:a4:6a:83:b0:42:a3:e6:6c:d6:c0:f9:b1:87:5a:b1:7e:
be:23:fa:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:28:30 2025 by rpki-client