Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
File: rwMNO0xYnpSj72Hd1UAajz_3m20.mft (raw, json)
Hash identifier: laAF0uJ3c/4xa4sA9LKxHePL9+F3LzDCWnj7MlRhIpM=
Subject key identifier: 45:36:8A:3A:E9:D4:3F:75:B0:C3:21:C3:DA:0D:BC:29:DB:75:D4:3F
Authority key identifier: AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
Certificate issuer: /CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Certificate serial: 019748FA695A717CF3031F0ED6A56442529F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
Manifest number: 03B2
Signing time: Sat 07 Jun 2025 06:00:59 +0000
Manifest this update: Sat 07 Jun 2025 06:00:59 +0000
Manifest next update: Sun 08 Jun 2025 06:00:59 +0000
Files and hashes: 1: lhPT8Z32dm5HBnSDBqDW1qERmiA.roa (hash: 0NqD/8/FwQf4n6Nk71zoiew6bzyeCyV72ogP7Shiesg=)
2: rwMNO0xYnpSj72Hd1UAajz_3m20.crl (hash: KmcnG8s1v+DULCo89O7Pt2UGhpt1XMGXspt2XfWMqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:69:5a:71:7c:f3:03:1f:0e:d6:a5:64:42:52:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af030d3b4c589e94a3ef61ddd5401a8f3ff79b6d
Validity
Not Before: Jun 7 06:00:59 2025 GMT
Not After : Jun 8 06:00:59 2025 GMT
Subject: CN=45368a3ae9d43f75b0c321c3da0dbc29db75d43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:38:1e:35:61:db:c9:e1:52:c0:63:ae:a3:
a5:de:7c:6b:2f:4a:a3:c1:11:65:44:ce:c1:eb:44:
c3:bf:40:b2:4d:f8:e1:5a:61:c8:0f:55:31:79:0c:
74:51:11:e9:14:58:8e:1c:96:de:e5:4d:34:ee:ba:
2b:2f:bc:6b:b7:b4:ae:85:b5:e3:b0:bb:11:4c:c8:
6d:71:04:f9:b0:5b:3c:7b:db:33:cc:d5:cb:53:a7:
fe:8e:5e:fb:bf:2f:2f:f2:dd:a4:0e:14:33:fc:cc:
97:a4:72:1a:2f:bd:01:e4:89:60:d0:4d:6c:d9:ae:
0a:c6:f2:2c:99:09:f9:8f:24:41:22:df:fe:f7:5a:
79:b6:7f:d0:cc:8a:c2:4a:f2:22:c2:14:b1:85:89:
e9:c7:ff:1f:28:42:a0:9e:6a:f4:04:ae:4e:bb:ee:
dd:fb:80:de:13:44:5a:74:cf:66:9c:de:53:6f:37:
95:c5:21:94:e3:8e:53:56:91:dd:c5:2c:b7:14:26:
df:5c:35:3d:8c:65:1e:ea:d4:54:c4:1f:00:36:f2:
9e:97:1c:0a:40:1f:55:74:2b:c6:af:dc:3e:5a:3e:
63:85:bd:eb:1a:0d:15:a7:f9:6c:52:d5:1d:e9:2f:
4f:f4:69:03:9f:17:50:00:d2:c1:df:b0:d3:fc:52:
f0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:36:8A:3A:E9:D4:3F:75:B0:C3:21:C3:DA:0D:BC:29:DB:75:D4:3F
X509v3 Authority Key Identifier:
keyid:AF:03:0D:3B:4C:58:9E:94:A3:EF:61:DD:D5:40:1A:8F:3F:F7:9B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwMNO0xYnpSj72Hd1UAajz_3m20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0da847-1ae9-496c-89fa-9245a9ab978b/1/rwMNO0xYnpSj72Hd1UAajz_3m20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4e:17:8a:81:a5:73:c6:9d:3f:9f:5c:76:dc:d8:94:b0:43:
18:07:fd:e9:e6:47:65:7d:2a:f6:3c:7e:08:94:18:6c:71:45:
ff:a0:bd:be:44:20:76:ea:d2:f1:93:7b:af:72:58:1f:17:81:
e3:5b:1d:69:96:68:0a:f4:8a:75:80:17:73:99:12:24:02:c4:
02:75:dc:3e:04:4b:ef:d3:ef:ed:03:de:67:71:71:9f:22:a5:
1d:48:96:a9:0b:7b:40:57:19:d0:74:78:67:a2:da:d1:4f:76:
1a:dc:81:db:05:30:a0:95:42:14:75:2a:49:13:b1:ba:c6:28:
fc:2e:4c:c8:a9:4b:23:ff:21:db:4b:58:2f:4f:90:2a:8f:53:
fe:c4:6d:84:39:c9:b9:71:1b:d1:02:1c:e6:94:07:9e:d4:9a:
fc:cd:3e:53:64:b4:e0:12:2d:04:5a:55:3a:c8:a2:bc:aa:79:
eb:1c:6e:ff:b5:ab:ab:9e:08:90:16:98:bd:de:18:ab:38:44:
56:7a:c8:7a:d9:d2:b8:7a:dc:d0:95:45:14:ea:dc:e6:e0:a5:
f9:1a:a4:33:86:f1:5e:53:01:97:9e:07:0d:43:84:79:2f:d0:
0d:24:6a:ca:fd:bb:63:bf:6c:9e:4e:71:76:73:c8:b0:d9:8e:
fb:5d:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:36:52 2025 by rpki-client