Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: xXw5OOmB5lGWuMP2iYSqkSuQeeuzeig+qq+ao7YcVjM=
Subject key identifier: D2:03:2C:1A:18:B5:6C:FD:4C:4A:0F:8A:DA:18:82:B3:D4:FD:D1:E0
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 01964E237536FBAAC7A858159575D29531D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 148D
Signing time: Sat 19 Apr 2025 13:01:08 +0000
Manifest this update: Sat 19 Apr 2025 13:01:08 +0000
Manifest next update: Sun 20 Apr 2025 13:01:08 +0000
Files and hashes: 1: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (hash: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: 5iY71G9AARUM2gwO44jGAHYG6YwkzTfMxMuSc9lzhcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:75:36:fb:aa:c7:a8:58:15:95:75:d2:95:31:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Apr 19 13:01:08 2025 GMT
Not After : Apr 20 13:01:08 2025 GMT
Subject: CN=d2032c1a18b56cfd4c4a0f8ada1882b3d4fdd1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:28:b0:3f:a8:f6:ab:f8:5a:69:7c:7f:09:
dd:60:88:82:ce:93:e4:b8:68:9e:8f:34:af:9c:97:
ec:38:52:60:7a:74:0b:1a:0d:9f:13:40:4e:24:ce:
cd:06:21:f8:15:19:dc:d3:bf:16:90:ac:f2:c6:17:
b8:1b:4a:e1:86:5a:21:36:3a:09:ab:f5:80:50:17:
8c:ed:c1:e3:c8:86:27:3b:68:5d:d4:57:e5:da:df:
e1:c2:3b:77:e1:b3:49:8b:9d:27:00:8f:f2:1c:8f:
a3:00:81:01:01:9f:d4:14:d1:d7:b0:b1:3e:9d:af:
80:59:38:00:ac:47:58:90:56:b4:5f:7d:70:b8:c8:
88:f1:3e:52:fa:5d:9d:1b:4f:0f:ff:e1:ca:1a:ae:
46:3b:d3:b0:ca:c9:34:54:87:21:a3:f0:04:e9:e8:
17:0e:fb:8d:bb:f2:3e:1a:c0:be:11:67:79:65:b1:
b8:4a:d5:bc:39:16:85:7c:76:6f:53:32:c1:7a:78:
c0:80:ed:3f:b8:5b:96:9f:41:d7:34:0c:24:14:65:
00:ea:8f:86:b6:78:e4:4c:64:67:0f:b7:2b:47:57:
52:0a:6c:bf:81:6a:4b:43:2a:00:cc:d8:7d:b3:cb:
2c:ed:3d:a9:37:63:0f:92:90:4a:75:8b:c2:da:a4:
e1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:03:2C:1A:18:B5:6C:FD:4C:4A:0F:8A:DA:18:82:B3:D4:FD:D1:E0
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:55:30:f6:18:8f:4f:10:97:34:7d:dd:dc:b7:1a:c4:5f:
41:bf:e8:ad:e3:57:68:9e:4a:33:fe:e8:ca:4c:60:f2:64:63:
35:f6:d5:57:a6:55:f7:d6:c0:9c:36:a8:46:b0:61:c1:71:9d:
44:32:ea:25:27:d5:f3:0f:61:76:97:0f:0d:14:b8:8e:79:6c:
b1:15:3d:af:0a:c5:22:41:61:32:48:bb:66:de:a8:cc:16:4c:
e9:c1:a7:7c:79:b3:15:e6:3c:39:5c:32:f0:d9:a7:af:cc:d8:
9f:b0:d3:78:73:35:4a:6c:99:1d:c6:08:ab:20:29:de:01:1c:
cd:f2:0f:dc:a7:99:e9:e0:e1:03:4f:d3:7b:c7:33:22:e7:84:
90:22:1e:e9:b3:16:47:82:ac:e1:03:25:ac:1e:0b:a6:59:ef:
4b:f4:7c:0d:08:b2:b7:33:0f:ff:ee:a1:bb:ed:40:5e:aa:35:
5c:70:2e:a0:22:80:95:79:aa:c3:c6:86:b9:54:85:94:17:fd:
85:e6:e0:0c:96:33:6f:43:5f:b7:e3:ef:a6:33:d6:4b:7a:4d:
c6:97:3b:99:b1:4a:62:10:a2:25:55:2f:fe:7c:51:57:57:62:
66:3e:aa:75:f0:d8:a5:c3:14:5c:92:89:de:65:7b:1f:d8:32:
36:62:d8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:53 2025 by rpki-client