Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier: 4z+1/qw7ltKC8P+MpHfEEEfHBC+Lvshd0xNNZFeixi4=
Subject key identifier: 32:0A:DD:22:25:17:35:19:FE:FD:39:E4:28:B2:FC:DD:49:BC:3D:6F
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer: /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial: 0196501153821376FA285EA9B68396F53FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 22:00:34 +0000
Manifest this update: Sat 19 Apr 2025 22:00:34 +0000
Manifest next update: Sun 20 Apr 2025 22:00:34 +0000
Files and hashes: 1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
2: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: Avy6qvgWWUuEpxXUU2nHIaleuZT47wXTcSl+92pLPnM=)
3: xLPeUXX4RJLZxnIKieLVdJS8YbU.roa (hash: mvKw4bOKAr0IQga6Tr8TKhcYkp3wZjkszS2x0xRvaBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:53:82:13:76:fa:28:5e:a9:b6:83:96:f5:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08759158de234b754b7150f21933096c1094aac4
Validity
Not Before: Apr 19 22:00:34 2025 GMT
Not After : Apr 20 22:00:34 2025 GMT
Subject: CN=320add2225173519fefd39e428b2fcdd49bc3d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:11:cd:5c:08:43:c5:77:79:de:4f:8b:57:
d6:a0:d8:93:23:7d:6c:90:b6:a2:83:68:62:8a:ad:
c2:f1:56:08:39:12:05:01:b0:1e:32:80:0f:85:2a:
a2:e0:fe:b8:3b:e7:b3:89:55:38:e2:25:08:82:cc:
f6:d0:57:4a:78:e1:93:45:6d:22:dd:b4:b2:ca:94:
a1:b4:46:53:c5:f4:d8:eb:a8:57:7f:fb:4f:a0:53:
b2:b0:90:61:17:45:f1:5b:0a:73:aa:ff:8f:d0:c6:
f3:50:cd:66:c1:8c:5e:8a:cf:da:86:05:52:f4:5f:
65:9d:6c:fb:6d:91:65:fb:fa:f9:e2:f1:fa:c6:d9:
d7:2b:2f:b5:67:6f:1d:65:b7:a5:20:57:c0:c5:cf:
13:73:bb:f2:5d:5b:82:51:a7:bd:8c:f4:4f:74:8c:
f6:ec:7e:bc:61:af:7f:e3:ac:26:fa:d5:b5:a9:87:
1a:92:ec:ea:54:8d:68:d1:0f:82:f2:45:0b:0b:e1:
de:20:c3:d5:01:33:ad:01:3f:6d:49:17:38:f3:5e:
54:44:42:7c:07:db:82:81:4c:62:2b:d6:f3:b4:a1:
d9:6c:c0:89:9d:6b:cd:fd:a6:13:28:2a:9d:e8:22:
0c:0b:a3:df:69:c2:ac:29:44:08:25:d5:d9:20:60:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0A:DD:22:25:17:35:19:FE:FD:39:E4:28:B2:FC:DD:49:BC:3D:6F
X509v3 Authority Key Identifier:
keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:aa:1b:e5:d4:a5:b0:3f:70:5f:ae:0d:7b:83:3f:de:7c:a3:
ea:f7:89:dd:76:62:26:d3:32:fe:9f:6a:2d:7e:4c:ea:c5:2c:
65:65:ca:82:08:ba:08:c5:f3:00:a3:ab:a7:5f:98:b8:ed:18:
d7:c2:90:ec:16:ca:d9:2b:b5:79:93:a9:59:63:0b:c5:a6:75:
e5:e5:bd:a0:92:17:f4:c9:23:32:0e:f2:05:59:9d:fd:9b:36:
15:68:42:00:86:f7:7a:04:7c:fc:9b:1f:05:68:33:9b:60:46:
d6:80:fb:00:d0:16:44:42:06:6b:44:dd:05:7a:dd:84:0c:34:
f5:1f:a0:33:af:9f:cb:d1:1e:f7:c5:3f:9d:d7:e6:b8:a1:5f:
e9:be:26:55:b9:62:9b:79:df:0f:80:16:26:d5:79:46:eb:a1:
c6:03:53:4d:5f:cf:62:85:5f:7f:a6:59:65:77:ee:27:e9:60:
bb:99:20:fc:e9:fa:d0:80:4d:00:bf:a7:cb:61:42:f7:a4:63:
9e:22:01:f9:b4:9d:44:55:03:a5:5d:d7:10:e7:4c:1b:48:5e:
2d:c1:d4:30:2c:f1:c7:8f:cc:f9:16:33:6a:f1:7e:03:e1:dc:
20:cf:17:a5:ba:64:f3:76:bb:0f:84:4f:d5:4f:51:b5:3a:67:
2e:cf:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:14:24 2025 by rpki-client