Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
File: rwL7VrRZx6IaebaLThGKuHb8lqU.mft (raw, json)
Hash identifier: +KeH4OG9mOnCDIpyhF25i4shfTNzp+S4+M439SCalLE=
Subject key identifier: 83:5A:F1:7F:E1:40:FC:D0:81:80:EC:BA:DA:F8:64:4A:3D:18:D9:E6
Authority key identifier: AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
Certificate issuer: /CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Certificate serial: 0195903D8FAD1B82F13D7360336C5FEBB6AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
Manifest number: 0C93
Signing time: Thu 13 Mar 2025 16:01:48 +0000
Manifest this update: Thu 13 Mar 2025 16:01:48 +0000
Manifest next update: Fri 14 Mar 2025 16:01:48 +0000
Files and hashes: 1: KVHIamZJVn2A53v0da8_IQ5hmAc.roa (hash: MHiTghXPbp0Yn7XA7tDf2bHlQcgsEoD122bH+wIZHLg=)
2: rwL7VrRZx6IaebaLThGKuHb8lqU.crl (hash: q+PjZhE56lDr0Ihw/AWPOH4sDvhBQMMr2xIIFWSZ0eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:8f:ad:1b:82:f1:3d:73:60:33:6c:5f:eb:b6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af02fb56b459c7a21a79b68b4e118ab876fc96a5
Validity
Not Before: Mar 13 16:01:48 2025 GMT
Not After : Mar 14 16:01:48 2025 GMT
Subject: CN=835af17fe140fcd08180ecbadaf8644a3d18d9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:95:32:ad:f9:24:71:eb:45:8f:d4:71:6d:
fb:80:62:4e:4f:fa:fb:0d:45:cd:54:e6:5b:90:37:
2a:11:28:7a:4e:6a:d1:d0:a2:30:5d:ad:ae:c3:bf:
99:13:a9:b7:80:6b:e3:9d:5c:03:92:96:2c:4c:5b:
58:b4:d5:57:2e:ad:b6:04:61:4e:cc:23:ce:fd:c5:
cd:77:47:14:c3:b9:2b:41:ac:df:fb:81:42:1b:db:
a8:35:c0:d3:70:6b:ce:cf:25:f6:b7:75:8f:95:da:
07:88:8b:66:3d:c5:65:bc:5c:f3:99:2d:44:da:e2:
f6:80:5f:78:a8:ed:cf:d1:b4:ae:dd:04:34:b5:02:
10:3a:68:d1:b0:f0:c4:96:cd:a5:ea:8d:db:b7:6d:
92:cc:df:2e:2f:16:e7:4f:74:0a:09:0e:e8:65:66:
65:1c:dd:12:27:d7:ad:a1:f5:54:4d:a4:fa:e8:80:
80:7e:61:19:49:53:cd:d3:58:b8:07:b9:b0:3b:f0:
2c:67:7f:51:da:7a:09:52:ee:14:6d:5b:03:d4:c5:
01:19:17:8e:26:a0:e1:c5:56:f8:96:25:58:40:a0:
95:79:b6:d3:49:14:9a:a4:25:e0:5e:97:ce:7d:24:
b1:25:f9:7f:3b:8a:df:e5:3c:08:32:ee:94:83:db:
6d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5A:F1:7F:E1:40:FC:D0:81:80:EC:BA:DA:F8:64:4A:3D:18:D9:E6
X509v3 Authority Key Identifier:
keyid:AF:02:FB:56:B4:59:C7:A2:1A:79:B6:8B:4E:11:8A:B8:76:FC:96:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwL7VrRZx6IaebaLThGKuHb8lqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/33fb90-189b-4e31-b92a-0c18d8597328/1/rwL7VrRZx6IaebaLThGKuHb8lqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bd:98:fe:98:7c:90:8f:cb:70:71:f1:55:df:a0:f4:39:2d:
3d:cc:94:61:5a:f7:a0:91:a6:f5:4a:fb:fa:a1:c9:56:b1:cc:
5d:5a:42:0e:97:7e:9e:8a:a9:10:06:6d:4a:4b:13:cc:12:e8:
f4:cd:74:c2:12:60:db:b4:3e:74:77:cf:ab:91:0c:13:55:d2:
72:4a:36:36:33:9a:53:8b:94:fe:b9:e1:4a:11:c1:6c:26:7b:
58:32:54:8d:07:af:80:28:38:4d:ec:12:e5:5f:4a:01:dc:b6:
cc:0a:1e:5e:1a:f9:16:34:bf:05:27:c8:69:45:31:88:e7:d0:
0c:8a:10:b4:86:8f:4e:c2:ba:d1:5e:43:1f:dd:74:62:e2:aa:
ff:e8:cd:00:67:00:91:65:7b:8f:d2:fd:d3:c9:71:a1:4b:37:
2c:e3:2b:bb:72:23:49:1c:ef:59:a6:7b:67:40:01:57:21:69:
95:14:eb:5c:e1:ed:85:6c:8a:f0:d3:12:b2:31:a7:ab:26:a6:
13:a6:a5:78:7d:06:1c:56:2a:b6:49:cc:01:d4:04:37:eb:94:
45:9d:c7:3a:bc:f7:45:8c:bc:67:91:bf:76:21:5b:d5:5a:19:
e1:e6:d2:ce:d9:22:de:8d:59:5e:99:b4:7d:64:bf:0d:45:ea:
8d:f0:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:09 2025 by rpki-client