Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
File: rwXUKRyugYXGw0LiXe6bfpIPdt0.mft (raw, json)
Hash identifier: 0zUNas018dPWJ96+NR1Phmdhm1IQHk3fYlKh7xHsaUM=
Subject key identifier: 0E:60:84:C7:C4:03:B0:EE:5E:41:4D:33:C5:F8:00:D2:1C:29:7C:F6
Authority key identifier: AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
Certificate issuer: /CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Certificate serial: 01963C1C9656A23A33DD57E5360E52E37652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
Manifest number: 03B9
Signing time: Wed 16 Apr 2025 01:00:28 +0000
Manifest this update: Wed 16 Apr 2025 01:00:28 +0000
Manifest next update: Thu 17 Apr 2025 01:00:28 +0000
Files and hashes: 1: 41rmP0fRaJ_Rp04VkDrnen4Ff9k.roa (hash: hIEQZsD1Luj1wzFwd6Ncf1xZemUGDUraVaNuYs6VnsA=)
2: rwXUKRyugYXGw0LiXe6bfpIPdt0.crl (hash: t9bFulWGT2X5LTcQnZIOSL/4kGZPHUXw0VsrWq3Wbg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:1c:96:56:a2:3a:33:dd:57:e5:36:0e:52:e3:76:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af05d4291cae8185c6c342e25dee9b7e920f76dd
Validity
Not Before: Apr 16 01:00:28 2025 GMT
Not After : Apr 17 01:00:28 2025 GMT
Subject: CN=0e6084c7c403b0ee5e414d33c5f800d21c297cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:61:c4:4f:eb:24:02:91:80:a1:61:82:d0:
54:dd:78:40:9c:76:e3:c4:3f:00:05:fe:40:2c:dc:
e4:32:96:36:e4:a2:15:92:db:5f:b4:19:10:3e:f5:
04:4a:97:3f:b7:3a:2e:7f:79:ff:91:4a:67:2f:b2:
0c:80:f7:1f:a7:d0:4f:f5:e5:eb:64:d4:19:59:d6:
50:91:f5:4b:60:0e:c5:0d:6c:ff:7c:59:67:54:eb:
87:b9:78:c2:d3:7e:8a:cb:ef:5d:47:a8:5a:6e:e3:
d8:dc:98:3c:6a:00:2e:72:c1:56:f7:64:cd:a3:d2:
c1:7e:6c:89:35:16:72:fa:36:bc:7e:47:b2:27:c0:
15:b0:ae:83:bf:c0:d0:9b:b6:44:97:f6:00:b6:21:
23:23:25:e3:62:27:ce:e6:fc:ab:08:ad:8e:2f:6f:
ab:c5:c5:a3:c0:62:0c:d6:85:c9:f4:34:b2:37:35:
ec:37:25:2d:5c:fc:51:d8:b8:8f:83:44:8d:5d:8c:
27:21:40:bf:79:ec:3d:33:9d:b7:7d:20:a7:17:b7:
bb:6b:1e:f9:55:ca:75:9f:e1:fd:bf:d7:5f:00:72:
03:2a:e4:e2:c1:cb:25:47:d2:07:53:0c:ac:0d:17:
00:d6:be:c9:96:be:70:95:33:db:6d:e5:d0:75:12:
05:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:84:C7:C4:03:B0:EE:5E:41:4D:33:C5:F8:00:D2:1C:29:7C:F6
X509v3 Authority Key Identifier:
keyid:AF:05:D4:29:1C:AE:81:85:C6:C3:42:E2:5D:EE:9B:7E:92:0F:76:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwXUKRyugYXGw0LiXe6bfpIPdt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/7560e4-fc7d-4a64-b500-e7f05f029a48/1/rwXUKRyugYXGw0LiXe6bfpIPdt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c7:99:e3:dc:6f:f7:fe:6f:ff:55:a0:64:b5:2d:13:09:0f:
92:02:d6:e5:06:cf:6e:1d:38:e8:53:be:a7:b3:b0:bc:4f:ac:
62:06:f4:23:da:05:dd:cd:3a:2c:22:3a:6c:7f:d2:21:97:05:
6b:ec:86:c9:65:90:69:30:38:75:b1:fb:da:e3:ac:41:04:5b:
aa:6d:f3:62:9d:1b:82:32:a4:15:5e:81:1a:a7:8b:b5:2e:59:
2a:31:6b:36:c6:fc:04:37:dc:18:32:1a:6f:68:98:77:35:48:
be:3d:da:7c:e3:48:95:5f:77:a0:6d:60:b0:d3:50:99:6a:a2:
51:87:21:c5:c9:86:89:b1:91:44:42:de:98:3e:43:f1:4f:df:
b1:b3:2f:eb:cf:be:aa:fe:66:74:09:6b:26:b0:7c:87:05:71:
e7:db:70:2c:58:6e:ed:0a:68:47:7e:e6:3a:b0:56:e6:0b:0f:
53:af:c6:09:4a:f3:58:e7:9f:1c:76:34:02:db:49:1f:c9:06:
38:47:a2:95:9b:38:06:bc:22:7a:0a:06:7a:d3:5f:8f:eb:5a:
98:77:ee:bb:02:ed:e9:2a:de:b2:4f:80:9b:6c:42:d9:a2:a1:
7c:f3:ab:34:db:0a:30:97:d4:00:c4:12:9f:5c:c5:49:a9:49:
e1:ea:df:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:23:12 2025 by rpki-client