Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File: r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier: W9mOC7GYyYepxAK1ckgjF+lIN9CN0ijK3no5ebL1nWA=
Subject key identifier: F9:A1:46:21:A9:C1:D9:DB:B4:52:F2:4E:97:CA:CC:5F:F5:82:17:06
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer: /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial: 0196760C980EE23FCC4685FA61CA72F3BA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number: 0619
Signing time: Sun 27 Apr 2025 07:00:58 +0000
Manifest this update: Sun 27 Apr 2025 07:00:58 +0000
Manifest next update: Mon 28 Apr 2025 07:00:58 +0000
Files and hashes: 1: 3hblAUbohBwFT91IssPjV90kLNw.roa (hash: 38EdVnlMAGIlx0Mlz1graFZq4XBH6eOlqF04LdXhHB4=)
2: 3u-LFDYOPDKUR_aD9yRJMe6LFho.roa (hash: euYR+CNCm6M5QEu0e13mte8Lec7fxC8lashK6MZRo8E=)
3: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: Oy+62cBVfsqFLOMAD7+VsK+gqnozvIUVrV4l7GrlCGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:98:0e:e2:3f:cc:46:85:fa:61:ca:72:f3:ba:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Validity
Not Before: Apr 27 07:00:58 2025 GMT
Not After : Apr 28 07:00:58 2025 GMT
Subject: CN=f9a14621a9c1d9dbb452f24e97cacc5ff5821706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:19:ab:da:73:94:72:f1:6b:1c:0c:52:55:
c0:aa:09:fa:d9:d1:39:b6:84:1d:c6:51:79:50:88:
89:6a:fb:8a:42:70:9b:1b:6c:1b:78:20:89:72:6c:
65:75:37:ab:09:4a:1c:b0:78:ed:c8:a1:c2:07:8a:
df:c5:c1:1d:56:1a:be:32:6f:1e:0f:e9:17:46:b4:
fb:b5:4b:59:b9:c0:fb:9f:cb:a5:f6:93:bd:53:17:
c2:1f:d7:fe:ed:f6:0c:8a:7d:d0:cd:4e:db:df:aa:
35:82:a0:41:f6:1a:4e:5a:c4:9c:5e:b6:69:c7:c8:
23:f6:76:e4:4e:bd:6e:cf:23:8d:fc:97:1b:09:0a:
3d:0b:ad:cb:42:fb:a5:9c:ff:dd:56:29:68:2b:56:
47:7b:88:ef:2c:28:b5:4d:3b:e5:a0:a9:0e:c5:cb:
59:ac:d2:9f:73:18:e9:ad:5b:bc:68:f3:b6:77:17:
61:94:63:ff:83:9d:da:5b:a6:74:b2:1c:67:89:b7:
95:24:34:e0:65:56:6c:4d:61:fb:e9:99:e6:55:20:
b3:fa:38:dc:64:53:0e:a9:49:cd:fe:f5:d4:3f:78:
db:9f:30:d1:3d:3f:6e:19:de:5f:c6:ab:ca:c1:00:
17:d0:8a:ba:5a:8e:e1:3f:f2:94:cd:2d:75:f1:7b:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A1:46:21:A9:C1:D9:DB:B4:52:F2:4E:97:CA:CC:5F:F5:82:17:06
X509v3 Authority Key Identifier:
keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0f:f1:b8:b9:ba:6e:f0:f5:56:a8:c4:76:39:2c:74:0b:0a:
4d:57:19:5f:7a:04:7c:37:8c:24:96:57:6f:76:55:9b:69:9d:
c1:8f:e8:58:33:f2:ff:09:f7:c7:66:40:3a:a7:3b:4c:09:5f:
99:29:e5:cb:f1:e5:c5:33:87:83:88:02:7e:33:a1:89:37:69:
b9:7f:35:f2:5e:fe:1d:13:26:f8:e9:d6:dd:3e:44:a2:76:ee:
ed:03:9a:f8:20:18:e7:b5:cd:ca:38:33:b8:cd:0e:00:9b:b2:
f2:05:66:d0:3f:c9:0a:98:47:82:2d:83:dc:69:6f:dd:cd:39:
33:a9:44:85:22:ab:73:91:5c:e2:d0:a5:9c:f9:9a:c5:a0:64:
eb:2e:23:31:29:5c:66:ea:cc:97:f9:4a:f8:c8:fe:13:10:f4:
24:43:3a:fe:8a:0f:c2:89:e6:a3:8d:13:1b:67:8c:81:0f:65:
9d:e1:77:e7:ed:bf:f6:a1:59:ed:43:68:8e:a6:cb:24:c0:e2:
48:a8:6a:ba:76:65:7d:17:81:87:ff:92:0d:fd:e2:cb:9b:1f:
a1:ae:d7:48:f5:f6:e6:3c:0e:b3:ec:39:38:67:58:44:57:75:
61:e1:16:f8:05:58:87:7c:e3:94:6b:7f:2e:01:3c:66:13:58:
85:2a:bb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:56:59 2025 by rpki-client