Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: VBy0LaOBKDyTMUerOAIizXTCjZjV4vaEfS0B9mrUY5A=
Subject key identifier: DF:7E:44:72:E2:3C:BE:59:08:AB:94:64:D9:A5:5D:81:CC:63:2A:BE
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 01963D66093239E0F7EA916A58E0413B3979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 14FC
Signing time: Wed 16 Apr 2025 07:00:19 +0000
Manifest this update: Wed 16 Apr 2025 07:00:19 +0000
Manifest next update: Thu 17 Apr 2025 07:00:19 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: mcFGjYd6dAGWX/VG4sl7N5UabmP3OUzqIC15E2ttiiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:09:32:39:e0:f7:ea:91:6a:58:e0:41:3b:39:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Apr 16 07:00:19 2025 GMT
Not After : Apr 17 07:00:19 2025 GMT
Subject: CN=df7e4472e23cbe5908ab9464d9a55d81cc632abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:50:a6:fd:b2:f3:75:52:49:94:ab:2f:49:
e0:19:15:13:c4:9f:21:d6:74:68:2c:6e:5f:2d:03:
7e:a7:61:63:69:b6:26:28:16:90:b9:07:8f:22:7d:
9f:57:f5:9f:b3:27:91:1f:6e:6f:c8:46:ee:69:99:
77:c2:f2:32:0d:36:9e:ba:88:3c:90:1c:fb:ad:a5:
cd:77:4a:61:4d:10:47:22:b2:df:db:b9:e5:2b:a5:
11:1f:79:2f:d7:da:19:fa:89:1b:b8:1d:48:85:99:
2d:7b:13:f0:b8:aa:42:8c:e4:f0:ec:77:eb:42:31:
be:91:68:47:6e:a6:cc:64:55:c7:eb:37:b2:e9:36:
08:8f:d2:a6:5d:b0:38:b2:4e:17:d0:b2:d3:b1:c9:
ba:de:34:e4:ec:fa:6d:8d:9c:9d:28:13:7c:81:77:
e3:62:55:9f:36:01:10:49:01:28:1a:82:8e:85:fb:
2e:32:3b:10:32:ce:52:3a:ea:89:48:8a:84:2a:28:
6d:6a:2e:3a:93:2c:24:51:82:5f:92:89:a4:67:a0:
b6:b8:e2:e4:c2:cd:3c:34:26:81:17:5a:3b:b4:5e:
04:57:96:a3:73:d4:06:3f:53:2c:c4:04:c2:5d:37:
9c:3d:b2:ff:c4:e4:b1:0e:b3:4c:83:1b:1f:41:15:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7E:44:72:E2:3C:BE:59:08:AB:94:64:D9:A5:5D:81:CC:63:2A:BE
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:dd:d3:00:3f:2b:3a:2e:97:e3:40:8a:fb:38:62:b7:03:
65:a2:c8:49:e3:ff:6a:64:47:64:25:59:a6:5a:96:93:45:2d:
d4:3f:c2:36:32:3d:db:1c:7e:0a:a6:9f:bf:00:8a:8f:e0:ea:
d5:c0:36:55:50:30:96:de:87:07:5f:3c:1e:44:06:f9:c7:b8:
ec:2c:01:ac:53:e4:bb:14:31:be:74:78:87:24:9f:f0:01:82:
79:e0:2b:72:22:32:f9:4d:db:96:1b:84:f9:6a:87:d7:2d:07:
2f:dd:50:59:eb:77:d5:2a:83:c6:90:6c:91:a7:c7:59:aa:85:
7a:0d:23:3e:cb:d5:88:cc:2e:30:b5:8b:9e:1d:7e:59:fe:9b:
dc:07:55:03:4d:3a:df:93:a6:98:d3:ec:91:25:20:52:72:4e:
fc:d4:91:e6:9c:d6:4a:5f:fc:bb:55:8f:f3:da:af:9f:02:b5:
33:eb:ac:b0:9a:6d:f1:c3:4f:46:11:bd:56:53:33:e9:41:06:
6e:ce:06:6d:6a:bd:3b:84:13:05:d1:e7:6e:30:1f:c5:a4:04:
48:55:ae:f6:57:ba:53:0d:1a:eb:13:00:ed:ba:0d:61:81:bb:
3e:4a:27:17:28:e8:d0:13:1c:52:e4:76:4a:93:6e:4e:2b:2f:
07:89:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:35:54 2025 by rpki-client