Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File: rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier: PZfYesMZwwlXYKJU9SJgC9SEPjHc3O8asJsJxAM6ZZw=
Subject key identifier: EB:3B:CD:0A:71:C7:D8:90:B2:19:46:41:1D:AE:D2:5C:24:D9:BE:71
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial: 01963E78D94AA2BC12D2208ADB0B6D6742E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number: 129D
Signing time: Wed 16 Apr 2025 12:00:29 +0000
Manifest this update: Wed 16 Apr 2025 12:00:29 +0000
Manifest next update: Thu 17 Apr 2025 12:00:29 +0000
Files and hashes: 1: IPW3rYP7oE9P_ES0-kMgln06Sio.roa (hash: 9eLRN0ajqZHckDjlFErwwqTneM3/U1IZfbIXWVVHKRk=)
2: S11P7YKPNs_v7YdolA0FgB6j23E.roa (hash: TBKKGcG+I3pRwCi4L7A30ry5+YnjawyAWGjuVum7Pns=)
3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: KL72Z1FVUCOqUIGYPV0T8iVVmmO9EL6hx6G7bsA1VtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:78:d9:4a:a2:bc:12:d2:20:8a:db:0b:6d:67:42:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Validity
Not Before: Apr 16 12:00:29 2025 GMT
Not After : Apr 17 12:00:29 2025 GMT
Subject: CN=eb3bcd0a71c7d890b21946411daed25c24d9be71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ad:99:b9:49:00:0c:e6:d5:79:a1:44:c8:ee:
5a:7d:1d:c4:a4:cb:4f:f8:b8:fd:eb:2a:f1:f0:25:
5b:f3:ef:9a:03:b2:a0:88:68:55:dd:c5:7b:de:09:
8a:ba:51:9c:6d:d2:fb:46:97:5f:2a:2c:34:a0:a4:
56:32:be:ec:b5:83:bc:26:af:60:47:41:1a:4a:02:
f1:d2:e9:b0:f7:a2:fc:61:07:3e:42:b3:f5:63:9f:
f5:9a:bf:e4:4c:9c:2b:6d:4f:fd:09:e2:bc:23:88:
c8:0d:a0:a5:fd:84:21:c2:ce:f3:94:35:3e:33:15:
23:ce:07:2f:bb:62:37:00:75:e6:60:d9:7a:9c:4f:
29:78:01:04:c0:06:ef:54:2d:d7:9f:de:66:be:a2:
af:49:32:08:db:5e:33:30:c3:28:79:e6:d0:a5:f6:
fc:4c:fe:0c:7a:40:3a:75:c3:4e:5a:a9:a2:60:ae:
54:bc:b9:22:3f:b9:7c:48:30:f7:f2:44:6d:bd:69:
fc:32:c3:63:39:e3:f5:7b:53:0b:79:68:ab:43:9f:
68:3f:1d:9b:ce:13:1f:b7:94:70:78:eb:cd:4d:2e:
df:f1:1d:18:97:a0:7b:2b:80:ff:b3:2d:c1:08:f8:
32:c2:08:a0:b3:a0:15:d4:44:dc:83:52:35:3f:38:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3B:CD:0A:71:C7:D8:90:B2:19:46:41:1D:AE:D2:5C:24:D9:BE:71
X509v3 Authority Key Identifier:
keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:be:65:4c:50:59:35:b9:37:77:6e:10:e6:f5:e1:3a:78:c9:
82:01:0b:bc:3e:10:22:73:63:df:4a:9b:dd:32:2f:9a:65:ec:
3a:7e:45:e3:fd:d8:36:11:c5:1c:4d:97:4c:cb:9b:bd:98:44:
ff:67:4b:84:1a:2a:2d:91:e8:88:6a:51:d1:d9:de:07:a4:60:
2f:e1:35:b6:1a:f9:cb:e2:b4:23:5d:d0:82:22:47:72:df:d5:
91:c8:93:a1:24:51:6e:bd:fd:14:16:db:64:d0:74:14:60:10:
63:a4:c4:25:5f:89:79:fb:9c:11:d5:ec:b6:f0:cc:6e:b5:7b:
d9:e2:4c:2f:8a:20:d6:00:d1:21:f3:c0:0e:37:48:df:35:0c:
5f:1b:97:10:a8:65:45:24:96:96:cf:33:dc:1b:9c:88:30:8f:
da:6d:41:d2:e7:b1:64:a8:41:bf:9c:c0:41:ab:9a:4a:a9:91:
af:37:2d:de:63:93:6d:29:47:4d:77:69:6a:b6:e6:22:18:10:
af:02:d3:07:ba:83:97:9c:9b:a2:3a:a5:2f:10:55:d3:9e:47:
9a:9c:a4:ea:74:1e:b8:13:6c:80:99:fc:59:9e:e1:7c:b0:4d:
36:d8:36:9d:ee:1d:b0:85:e0:e6:9e:e3:87:f4:06:8c:8a:30:
73:d0:43:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:11:50 2025 by rpki-client