Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: h9usZoKQzo1WE/VynJ1e90TXySeKEtEKBNsPsoEqiqA=
Subject key identifier: A5:7E:C3:2B:67:7B:94:5B:02:08:06:D6:23:81:72:42:A1:D9:44:28
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 019609E77B993A5A19D926116D22BECF733E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0CCF
Signing time: Sun 06 Apr 2025 07:01:27 +0000
Manifest this update: Sun 06 Apr 2025 07:01:27 +0000
Manifest next update: Mon 07 Apr 2025 07:01:27 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: NdB7r37YaT7f/CE7oZ02FW/jFYqu3NYlewgLxzWuP/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 23:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:e7:7b:99:3a:5a:19:d9:26:11:6d:22:be:cf:73:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Apr 6 07:01:27 2025 GMT
Not After : Apr 7 07:01:27 2025 GMT
Subject: CN=a57ec32b677b945b020806d623817242a1d94428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:72:bb:e0:2c:57:c4:60:9f:5e:81:b4:68:
0d:eb:8d:4d:d5:93:e8:0e:c1:77:01:9d:47:b1:ec:
72:3a:ab:62:16:c2:4e:96:42:b7:26:79:b0:bc:79:
e5:97:3c:09:9f:fa:a8:20:bf:4f:30:f4:d3:b8:a0:
d4:22:26:be:b9:ca:58:c6:74:7d:25:f7:e1:e1:0f:
37:16:9e:ce:6d:8d:4b:14:54:58:1b:8a:c4:b6:23:
ba:ab:d6:94:75:90:bb:68:ca:3b:c6:19:6b:07:00:
a4:64:51:ad:ec:bb:34:25:09:d8:96:d5:4b:5f:54:
39:ab:6a:e0:67:80:b0:fc:bf:4a:0f:4a:e1:04:6e:
04:5d:f9:4e:d7:0b:45:65:ae:16:7b:2d:c0:03:90:
a3:37:49:ae:40:cc:9b:13:33:9f:86:ab:81:8f:66:
64:20:14:c8:48:c4:66:a9:a0:3e:a8:10:45:df:c4:
83:96:bf:0e:08:52:85:a1:a6:da:1d:e9:86:cb:99:
62:e0:fe:01:e3:18:6b:18:c8:0a:26:4b:65:ac:81:
39:88:47:d1:31:55:20:e9:9c:d7:4a:60:bb:4b:f4:
83:36:55:f2:d8:02:89:a8:ba:10:a7:96:77:6a:97:
5b:a6:ad:8b:6f:92:7e:1c:bf:b6:b7:f9:be:08:36:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:C3:2B:67:7B:94:5B:02:08:06:D6:23:81:72:42:A1:D9:44:28
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ff:79:db:49:f2:a9:5a:27:f5:34:ef:14:e1:79:7c:65:c5:
55:1a:cb:06:9e:8d:8f:31:ad:e1:7e:c2:66:40:f8:78:87:b8:
07:9e:63:f9:5a:9e:ef:e4:af:82:fa:b3:33:da:22:d8:a4:c1:
09:2f:ba:84:14:9d:de:f9:77:5d:45:61:3a:9f:a6:96:2e:6f:
ab:0e:33:bd:cc:64:70:2e:ef:70:9a:61:f4:90:43:8f:ee:44:
46:80:35:67:9b:cb:93:bc:e2:d1:52:a3:22:d7:73:b4:b0:5d:
b7:7a:8e:31:79:c3:d1:62:02:d9:28:02:6d:ac:ba:ad:ff:44:
ed:d6:f0:0b:b9:0c:c0:4c:d0:de:38:fd:b9:c9:3b:ab:c9:a2:
24:9c:33:8e:59:fa:14:72:04:4c:18:3b:11:df:74:ce:ac:c0:
1f:c8:f1:d2:ea:57:78:5b:70:88:e8:fd:7f:95:b0:35:2c:b8:
ed:5c:cc:d5:88:06:d3:14:cc:ce:21:27:42:91:46:7c:0e:0d:
4b:a1:5f:c5:7d:03:28:62:0d:f1:19:fb:5d:3d:ee:c5:ee:ad:
d3:44:83:c4:29:60:d5:21:2c:a6:6b:5b:10:06:5d:a4:26:df:
43:15:f3:be:bc:b6:e5:f4:f1:83:b3:22:01:4c:28:19:74:1c:
5d:57:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:58:29 2025 by rpki-client