Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: 3skxMmHhQo7SfIMg9PHvteiGiG56NVAcoDXECK+xmZo=
Subject key identifier: 2C:CC:58:EC:E3:90:8F:FB:E4:F4:BE:FB:08:16:06:21:D9:B6:6E:C3
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 0197474251E0F983A65EF951C20C7B318D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 150E
Signing time: Fri 06 Jun 2025 22:00:17 +0000
Manifest this update: Fri 06 Jun 2025 22:00:17 +0000
Manifest next update: Sat 07 Jun 2025 22:00:17 +0000
Files and hashes: 1: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (hash: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: GpUNvjy+OaVyMxOf/fok7ay0yb/ZIO1uiUTmBjjtnYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:51:e0:f9:83:a6:5e:f9:51:c2:0c:7b:31:8d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Jun 6 22:00:17 2025 GMT
Not After : Jun 7 22:00:17 2025 GMT
Subject: CN=2ccc58ece3908ffbe4f4befb08160621d9b66ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:86:ff:e9:66:20:04:7a:57:27:39:49:ad:
da:61:ff:09:3c:1e:6b:da:89:88:e5:d5:f0:2b:c6:
34:20:8a:51:af:fe:ed:f0:c5:ba:8a:db:36:c8:17:
a7:d3:3f:d4:44:6d:a2:a2:b0:be:7b:44:f6:2d:43:
db:1c:7e:98:c4:46:74:3d:66:e8:d0:71:49:27:7a:
73:f8:fe:08:21:f6:bb:1b:4b:8f:25:d8:58:2d:04:
42:94:31:e8:65:1d:24:bb:0e:20:aa:ab:35:b5:19:
c8:11:67:ab:e1:fe:1a:cc:ac:cd:98:11:fd:e7:4c:
ae:6c:26:3b:ed:fa:27:61:50:b0:e6:32:a2:41:b8:
e8:76:58:42:f8:58:87:6c:e9:e8:f3:a3:57:ee:29:
f2:76:4d:b6:25:d0:f5:30:6e:21:56:14:d2:4b:ab:
4a:f8:30:c0:cb:d2:b3:a3:dd:87:57:a0:c8:d8:80:
ea:36:81:95:f8:26:58:ce:49:06:f5:2a:63:af:42:
c0:22:e4:29:2a:a5:8f:6c:96:5e:78:3b:20:1a:91:
af:b6:36:92:ce:de:97:56:4a:05:a0:55:78:c0:48:
0f:f1:fd:68:a6:6b:fb:42:5a:52:88:f3:97:e5:4d:
c0:05:cb:9a:e0:e9:e5:af:70:d8:40:e7:e3:7e:5f:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CC:58:EC:E3:90:8F:FB:E4:F4:BE:FB:08:16:06:21:D9:B6:6E:C3
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:94:53:43:1c:55:bd:73:12:fb:5d:fe:dd:52:cb:eb:ae:83:
5d:22:fc:70:97:cc:c7:43:25:39:7a:4a:56:d1:57:60:ce:1e:
2e:cc:79:4d:52:d4:83:d1:67:ce:cb:a4:39:c8:a6:a7:e2:79:
a1:d3:58:41:15:8e:31:f4:a7:9f:c5:31:13:1d:45:b3:b8:2e:
26:f6:8c:a5:dc:bc:fc:7f:a6:9d:aa:c5:00:d2:56:61:e7:f5:
a3:e5:ac:d3:e9:32:ea:14:0e:2a:8d:4f:e9:e1:33:04:36:40:
eb:c7:c5:95:98:47:ef:78:6e:83:2d:a3:ca:d1:d4:41:e1:a5:
a3:60:b4:62:42:10:4d:00:9f:e1:49:4f:c3:7d:75:ef:44:7c:
b6:b0:4b:1b:e5:47:cc:78:8b:76:06:ec:82:dd:ad:b9:35:f1:
86:f0:7e:38:b9:f0:af:83:a3:f7:48:07:2e:a2:c6:8a:62:f3:
c5:03:30:e4:81:a0:fe:bc:26:79:fc:d5:e3:d2:69:75:87:52:
29:f3:1c:0e:40:09:31:6a:8e:e6:2b:51:8a:2f:fb:ff:8c:73:
65:74:07:51:9a:f5:e7:a5:df:82:99:73:1c:ad:cf:c7:3f:b0:
94:fe:95:9a:dd:75:3b:58:b9:bf:0e:c5:5e:ea:93:5b:b4:fa:
36:fd:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:14:51 2025 by rpki-client