Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
File: w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft (raw, json)
Hash identifier: RICDjV12H8Q2Afj9TinpHIC87NsYYnas2CdQImaS3ec=
Subject key identifier: 04:A2:C3:B8:79:F6:84:6E:B8:92:FB:68:77:CE:C5:B5:BF:7D:30:AB
Authority key identifier: C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
Certificate issuer: /CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Certificate serial: 01968B1379EDA1E00199D95C28E19DBD08B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 09:00:31 +0000
Manifest this update: Thu 01 May 2025 09:00:31 +0000
Manifest next update: Fri 02 May 2025 09:00:31 +0000
Files and hashes: 1: 4mL1zKKLOxGn25fl7m9On5y2ZYA.roa (hash: 9EgYMO8cQ5z/aiE1aC8zT4GRbu01MVUJ2bPVFVsvu8U=)
2: jdL88fKfBRcDZQd2LJ3KQAGZWz0.roa (hash: Rtx6TLOA/PMGBKD0sU4jO9D8OJMlb2E7ArhYwQT50vQ=)
3: w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl (hash: 48e01xUICZJUD1pRk/1wh3V5D20/Dph6hS6oa16U1Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:13:79:ed:a1:e0:01:99:d9:5c:28:e1:9d:bd:08:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3b4351e0a495c26efdc6e415f0bb189fbbd6edf
Validity
Not Before: May 1 09:00:31 2025 GMT
Not After : May 2 09:00:31 2025 GMT
Subject: CN=04a2c3b879f6846eb892fb6877cec5b5bf7d30ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:74:06:0c:aa:20:64:28:72:c8:6f:ba:15:
4e:e0:c7:e1:3c:63:1b:ac:bb:bb:73:2c:a5:06:f4:
92:07:e5:21:2b:3e:d3:79:0a:cc:a3:46:02:ae:85:
f6:6d:54:72:83:94:a9:da:b9:d6:e9:d8:18:75:98:
55:0a:84:bf:4a:cc:00:92:39:bb:62:69:f6:07:6e:
74:a9:4f:98:e6:f4:d8:d3:6d:2c:5d:36:72:67:96:
f8:d4:e7:a7:15:9f:aa:98:14:90:f9:a4:9e:27:3a:
ab:35:cd:9e:d5:f9:d5:81:42:87:09:97:0f:7d:0c:
3c:41:c6:80:f7:96:9d:71:6e:5d:7f:8f:40:90:e3:
79:e5:9c:7c:48:8a:07:36:d7:60:eb:71:26:26:88:
52:b7:a9:3c:4d:08:47:f8:a4:cd:5c:c4:6f:d7:45:
97:bd:32:5f:f6:6d:a1:71:e3:42:10:8b:4c:d3:2f:
19:58:5c:d8:4c:3a:58:a9:c5:3b:b4:5e:ef:d4:11:
db:68:78:c6:8d:10:53:d0:2d:9d:8d:b1:ea:37:ef:
b3:00:2e:a4:61:85:41:5d:94:23:81:27:5e:be:0e:
61:de:72:14:0e:98:23:00:d5:5c:5a:a8:4c:9f:69:
1b:2d:13:0a:59:c7:e4:c6:52:1e:c2:9c:d1:b5:0c:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:C3:B8:79:F6:84:6E:B8:92:FB:68:77:CE:C5:B5:BF:7D:30:AB
X509v3 Authority Key Identifier:
keyid:C3:B4:35:1E:0A:49:5C:26:EF:DC:6E:41:5F:0B:B1:89:FB:BD:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7Q1HgpJXCbv3G5BXwuxifu9bt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/37e363-84d1-470e-96a2-0ef1cac7418d/1/w7Q1HgpJXCbv3G5BXwuxifu9bt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:34:4f:6d:0e:78:e4:28:28:81:50:3e:be:c5:19:d0:52:be:
57:89:64:b4:b7:28:ef:82:c5:2d:f0:10:0e:10:a1:e9:f4:d7:
ed:3a:a0:fe:a2:0b:eb:aa:f2:41:9c:f7:27:44:f4:5c:2e:fe:
9b:da:6c:2f:9d:4e:ea:4b:5f:9a:e9:63:30:07:ef:3f:b8:2f:
17:95:0c:e9:da:ad:70:ad:12:b3:3d:4a:e2:0a:8e:40:f5:3c:
7d:9a:8a:a9:08:21:0d:6b:bc:6d:6f:f1:0c:f9:04:4a:83:dc:
24:20:44:2d:4a:06:6b:71:74:ea:5b:10:a4:cf:55:1c:fb:cc:
68:b9:b5:74:cb:03:a8:8d:ce:b3:21:18:38:b7:9b:08:de:1e:
68:d0:35:e9:63:2c:75:b0:c6:f0:8e:03:55:b5:9e:f2:18:7a:
b5:b7:4e:29:49:09:49:ad:39:d1:b2:f3:d4:07:d9:7e:6d:1a:
e6:b6:ce:4a:d9:b2:3b:77:87:65:2c:ce:ce:51:17:06:05:eb:
f1:3a:71:23:3f:17:0b:b2:04:05:c7:04:9a:84:5a:84:7a:a4:
ac:8d:66:50:de:e8:cf:60:80:64:e7:31:3e:b9:e1:79:97:b7:
24:af:89:48:2e:06:7c:bb:4c:51:9f:23:d4:0d:65:e9:1b:ab:
b0:e7:07:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:17:13 2025 by rpki-client