Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: IPlmpeBHmxDWnmyOW8cjJyCM1Fh9dSCdOD5HhbveqK4=
Subject key identifier: 63:8C:75:4F:5F:93:32:40:C3:DD:72:FF:C6:CE:35:EC:A6:23:BE:8D
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 01958F98305CB5D151B3E33C336707B39BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 14A2
Signing time: Thu 13 Mar 2025 13:01:10 +0000
Manifest this update: Thu 13 Mar 2025 13:01:10 +0000
Manifest next update: Fri 14 Mar 2025 13:01:10 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: G6jDRmQLRU3ulV5YxYenOLY17s6+fF2eUwjsQVTm35I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:30:5c:b5:d1:51:b3:e3:3c:33:67:07:b3:9b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: Mar 13 13:01:10 2025 GMT
Not After : Mar 14 13:01:10 2025 GMT
Subject: CN=638c754f5f933240c3dd72ffc6ce35eca623be8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:13:97:51:0b:42:30:a1:33:c0:25:b3:c4:
c6:c7:2e:ef:1b:98:9b:ae:06:77:d6:1b:db:c3:61:
31:13:aa:bb:5b:17:8a:a8:0d:ff:0e:b8:15:a0:50:
5c:da:f2:77:49:6f:6c:1d:2d:ba:c5:06:a2:4d:2e:
be:11:ac:8f:b7:29:d4:dd:2b:74:01:d6:cb:58:1f:
d7:88:73:cf:d8:02:c6:22:96:8c:b7:92:ab:68:a9:
a9:75:22:29:68:e1:b3:a1:9c:3f:47:9b:6b:c1:8c:
a4:2d:48:4c:fa:4d:56:5a:fa:37:11:28:9d:ed:40:
c5:f5:7e:38:57:d7:5c:39:62:2d:63:eb:e4:01:0e:
68:b6:ac:f0:91:50:5e:01:75:d1:22:27:d1:b4:14:
3a:57:2c:d5:f2:a7:9c:da:d1:6f:59:47:e4:c1:80:
34:ef:dd:1f:4c:94:60:c2:f4:91:f3:4e:5d:61:d9:
58:bf:9c:50:6d:07:72:5f:5c:5f:17:d5:23:f0:47:
b8:f0:24:8f:7c:2e:2a:f9:a9:fc:48:4c:e7:d7:8e:
15:82:32:74:f8:1b:9e:3c:ef:1d:bc:ba:08:b1:ff:
80:95:a1:5b:50:a5:a6:c3:46:6a:ef:a6:56:50:61:
28:c9:5b:42:8d:26:fc:ed:a0:75:20:48:f7:9a:ba:
a7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:75:4F:5F:93:32:40:C3:DD:72:FF:C6:CE:35:EC:A6:23:BE:8D
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9a:b8:de:4b:be:a8:26:9f:df:24:87:a4:b4:30:03:f6:82:
06:5a:4b:77:e3:67:5d:89:f3:6c:2d:75:5b:cd:36:07:4d:0c:
b0:cd:c8:95:94:26:93:15:e6:41:aa:30:58:3f:95:31:0f:89:
74:7f:8a:7a:cb:6a:15:0d:34:e9:d4:43:87:d0:8b:ae:b1:f3:
58:99:2e:4f:01:55:a8:77:38:b7:90:ba:b2:74:12:2f:1b:b3:
e5:8b:01:44:d2:02:c5:df:8e:46:95:8d:be:c5:71:91:5b:e5:
a2:b6:20:34:8a:da:e3:13:6e:0e:f1:b4:fc:71:07:a7:f7:57:
78:60:fe:62:90:8a:5f:cb:24:27:00:43:02:8c:0d:51:52:d7:
43:02:68:21:ef:4e:48:55:4e:47:a0:55:ec:e7:f0:dc:8f:5d:
42:54:b5:ea:6b:df:e4:63:b4:d0:f5:0b:f5:31:18:5d:82:6f:
cb:be:2a:fb:9f:85:a4:06:bc:c6:2d:fd:c9:64:12:8a:aa:85:
c5:63:19:14:35:0b:2b:be:9b:83:5f:ea:0e:5c:39:ae:ef:38:
f1:77:28:5b:55:e8:af:05:a8:9b:5f:3d:0d:c2:35:71:29:59:
54:3e:bf:21:6a:c9:12:eb:64:cb:43:fb:f4:f7:e4:c4:0e:38:
ef:b6:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:39:31 2025 by rpki-client