Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.mft (raw, json)
Hash identifier: 8j4jr6Fq5B6Dl/CtIQTUAy6Zs77yeS9xnERMSuMmnlU=
Subject key identifier: B1:1F:9B:1C:1E:13:9E:E6:0C:97:22:5D:66:94:49:84:C5:3E:4E:60
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 01958C2946A183B63B1C7601FE4875F86027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
Manifest number: 11AD
Signing time: Wed 12 Mar 2025 21:01:10 +0000
Manifest this update: Wed 12 Mar 2025 21:01:10 +0000
Manifest next update: Thu 13 Mar 2025 21:01:10 +0000
Files and hashes: 1: 0MOXDUv4IarmUDXJ_6_NJ_DNTjE.roa (hash: rLEoAgpILfeLseNAIpfgmASNTffHIHsRIbvYzKEOLhA=)
2: GoeAUL2QksRS16LiLx9M0SmG6h8.roa (hash: Lp7ZvoPe3FFQc8UoBl571bW941fIgYX0UUaKwSRXqLI=)
3: p9gQbHg8IpMtNLW0NQ42q_UAiDc.roa (hash: t3Lsla/WvydRj60ad7MeBwokpBl+kvF1NmkVZ9213jY=)
4: rw9am9KtHpaGXwDQhSK5qtPpGk0.crl (hash: wiWfMlr2ysaLqsoL0Kuj7g4pMa9BHkB0cRRhUXE/7nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:29:46:a1:83:b6:3b:1c:76:01:fe:48:75:f8:60:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Mar 12 21:01:10 2025 GMT
Not After : Mar 13 21:01:10 2025 GMT
Subject: CN=b11f9b1c1e139ee60c97225d66944984c53e4e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:06:ce:ad:be:b5:b3:bb:f6:5f:2c:5b:8a:
2d:48:fd:9d:0f:2f:41:0a:7a:ea:bc:70:c2:e7:43:
81:b9:dd:9e:6f:98:a1:05:8a:a3:93:16:80:1f:5d:
09:52:94:35:ac:4c:c8:41:bb:90:cb:ca:76:c6:92:
97:38:39:13:a6:90:a2:e0:ad:a8:8d:6c:db:7f:ba:
e4:a0:7c:03:84:03:5d:f2:c7:64:10:ed:9b:87:5b:
87:ff:3d:ca:96:ad:34:33:3b:af:40:3f:b3:ac:df:
26:de:34:21:39:e9:51:00:31:40:22:76:00:fd:81:
6d:1a:3a:c2:11:10:01:55:7d:29:d7:d6:68:ad:bd:
6b:bf:48:ce:08:10:a7:35:a6:b5:13:c3:0a:01:30:
0a:4e:b3:18:ec:45:8f:6b:2f:76:72:ba:e2:88:f7:
aa:d4:2b:ac:28:c4:2d:b7:d5:2c:1f:b3:77:85:56:
1a:c8:4c:25:dd:e3:0a:f7:5e:b6:9e:cb:7a:2e:d1:
26:21:2e:76:fc:67:cc:45:6c:da:f7:6e:1a:3f:5e:
2e:47:a2:c0:32:15:0f:49:ef:17:23:c5:19:e9:63:
13:16:35:d4:6c:ee:ea:16:6b:07:96:49:d3:d4:20:
ac:8a:20:d9:c0:b9:be:dc:a4:3e:7b:67:04:41:6d:
f9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1F:9B:1C:1E:13:9E:E6:0C:97:22:5D:66:94:49:84:C5:3E:4E:60
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:da:0c:a8:3b:75:b7:53:06:01:e6:33:4e:4e:a5:42:7d:09:
f0:d5:2d:f6:04:23:e3:b3:fe:7b:64:05:dc:e0:d2:a5:f6:62:
91:c5:e2:ea:f8:c6:f8:ab:b0:8a:27:67:af:54:b9:d9:d5:52:
ef:84:0f:37:a1:2b:cb:cd:ab:9c:d5:7b:c7:94:32:19:79:7f:
c5:8d:65:b0:9b:fc:4d:fa:d9:b0:16:94:b8:a0:dc:d7:ed:29:
b4:db:1b:61:44:1e:ec:f9:a1:38:94:2f:8b:e4:af:ca:e7:00:
39:44:cb:1a:45:c3:0c:77:53:63:45:37:3f:c4:71:f4:59:54:
75:2d:43:36:cb:29:6b:08:91:05:9c:e3:b9:93:0a:d8:7d:49:
d5:de:de:ac:98:c4:c4:c8:ca:58:b0:ce:d0:22:4a:01:17:bd:
77:d0:f2:11:43:cb:ee:93:8b:36:95:79:22:57:65:25:b9:e2:
fe:dd:0d:58:87:d2:c2:5e:21:3e:a9:a3:f1:02:eb:9e:f7:dc:
69:bf:51:9a:d8:dc:80:11:e3:d3:6d:1a:c7:5c:57:cd:97:1b:
6f:3f:a6:29:ce:58:90:44:16:41:f3:bf:bb:d9:63:15:e4:e1:
ee:f6:84:0e:f7:c9:9d:8b:6a:c9:df:ef:8f:7b:5f:54:eb:5e:
a7:92:5e:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMKUahg7Y7HHYB/kh1+GAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl
OTFhNGQwHhcNMjUwMzEyMjEwMTEwWhcNMjUwMzEzMjEwMTEwWjAzMTEwLwYDVQQD
EyhiMTFmOWIxYzFlMTM5ZWU2MGM5NzIyNWQ2Njk0NDk4NGM1M2U0ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonEGzq2+tbO79l8sW4otSP2dDy9B
CnrqvHDC50OBud2eb5ihBYqjkxaAH10JUpQ1rEzIQbuQy8p2xpKXODkTppCi4K2o
jWzbf7rkoHwDhANd8sdkEO2bh1uH/z3Klq00MzuvQD+zrN8m3jQhOelRADFAInYA
/YFtGjrCERABVX0p19Zorb1rv0jOCBCnNaa1E8MKATAKTrMY7EWPay92crriiPeq
1CusKMQtt9UsH7N3hVYayEwl3eMK9162nst6LtEmIS52/GfMRWza924aP14uR6LA
MhUPSe8XI8UZ6WMTFjXUbO7qFmsHlknT1CCsiiDZwLm+3KQ+e2cEQW35GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEfmxweE57mDJciXWaUSYTFPk5gMB8GA1UdIwQY
MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt
M2FjM2I2NzM3MDQyLzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy
LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudoMqDt1
t1MGAeYzTk6lQn0J8NUt9gQj47P+e2QF3ODSpfZikcXi6vjG+Kuwiidnr1S52dVS
74QPN6Ery82rnNV7x5QyGXl/xY1lsJv8TfrZsBaUuKDc1+0ptNsbYUQe7PmhOJQv
i+SvyucAOUTLGkXDDHdTY0U3P8Rx9FlUdS1DNsspawiRBZzjuZMK2H1J1d7erJjE
xMjKWLDO0CJKARe9d9DyEUPL7pOLNpV5IldlJbni/t0NWIfSwl4hPqmj8QLrnvfc
ab9RmtjcgBHj020ax1xXzZcbbz+mKc5YkEQWQfO/u9ljFeTh7vaEDvfJnYtqyd/v
j3tfVOtep5JeOw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:36:37 2025 by rpki-client