Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File: RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier: a4plAsNqmOblUuBVcnPh7HRwNwglBWJvAJ/CiclNXLM=
Subject key identifier: 37:A0:CB:B9:1B:E0:C0:1C:CA:93:0E:21:F2:53:DE:19:E9:6B:EA:0B
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer: /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial: 01968FCBD4502D2C126DD83D99648B10792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 07:00:21 +0000
Manifest this update: Fri 02 May 2025 07:00:21 +0000
Manifest next update: Sat 03 May 2025 07:00:21 +0000
Files and hashes: 1: B3HRVDq17dmYEd_4fHtjlcnZx1I.roa (hash: bT7FTTeSzclYhdeU0fsaRQxAGT8mqDYR/4kWlCp4d8o=)
2: RwwsmDticWkhhXHGuClHru6l984.crl (hash: pGBH5hKEYDyoD2DqbGkaMlTSNLKSuPTtub9z0ekLI50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:cb:d4:50:2d:2c:12:6d:d8:3d:99:64:8b:10:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
Validity
Not Before: May 2 07:00:21 2025 GMT
Not After : May 3 07:00:21 2025 GMT
Subject: CN=37a0cbb91be0c01cca930e21f253de19e96bea0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:38:13:11:97:42:c8:5c:16:f1:79:60:64:
ef:1b:1f:f7:93:33:fc:77:92:33:4c:48:d4:79:cd:
9c:f8:1f:3f:cb:96:87:66:c1:a9:45:c2:79:94:08:
71:90:ec:88:02:93:6c:50:39:d4:df:ae:7b:5d:50:
8a:75:a5:32:ee:e2:e6:aa:65:64:ce:3c:0b:c0:52:
84:c7:29:a4:d6:31:f6:77:ff:f8:f7:55:21:74:f6:
49:2d:7a:aa:dd:d2:e9:97:e0:0c:ce:d7:ee:39:d2:
a7:99:4b:83:30:9b:66:d2:a3:3f:ac:f5:58:e8:8c:
32:50:31:53:39:2d:c8:f1:07:00:31:c3:bd:7d:62:
23:ef:b8:06:bd:3a:b4:5c:10:bf:eb:f1:94:8f:00:
99:16:bc:3f:c8:c0:3d:61:50:2f:7d:a2:e1:f8:17:
29:4c:12:bc:cf:45:1a:ac:64:90:31:ed:01:55:9f:
32:2c:8c:5b:66:3f:2f:d8:47:56:50:4d:7e:45:62:
98:97:d1:af:61:6a:0d:a9:61:8d:78:44:76:26:22:
2d:80:c0:b1:d9:e4:5f:86:82:55:f5:ac:57:7d:4e:
6a:3f:f6:1f:79:46:8a:1f:3a:a2:7c:ed:0e:0d:c9:
ae:98:fb:1c:09:1b:62:a4:2e:68:21:77:b9:7f:01:
9a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A0:CB:B9:1B:E0:C0:1C:CA:93:0E:21:F2:53:DE:19:E9:6B:EA:0B
X509v3 Authority Key Identifier:
keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a3:8d:c6:db:13:65:5e:58:41:6f:81:33:74:6f:75:1b:6b:
b6:e6:58:26:85:68:58:95:ae:e5:45:35:a0:c5:25:95:77:c3:
1b:28:04:02:f9:44:6f:e1:11:d6:74:11:94:2e:f0:b1:86:e7:
43:c4:54:e5:19:90:7d:99:ef:48:50:c8:71:8e:9b:e7:31:e3:
1c:b8:50:81:8e:39:19:10:5f:38:2e:cc:b0:0a:13:ec:e7:66:
bc:fa:6d:f2:d4:8e:e1:b9:f6:bd:38:8a:38:89:75:24:72:0f:
96:6c:10:11:c5:6b:5b:ca:96:ea:7f:29:6d:a2:dd:0e:e3:e7:
ee:2c:ac:5a:bf:6e:dc:0e:d0:df:a1:14:22:79:46:ce:fc:5b:
36:79:72:cb:42:63:79:d2:03:62:56:0d:b2:a6:5e:11:2f:66:
0a:d6:60:e3:3c:60:64:95:30:33:b0:ee:0c:19:5b:46:cd:d1:
bb:81:49:7c:03:72:91:16:ee:38:a3:48:2e:3a:4f:a8:86:81:
b2:e6:aa:c2:ba:c2:67:5d:50:f0:d9:2b:00:e0:df:a0:ee:7f:
f6:d7:2c:d6:38:99:39:e8:6b:cb:e2:17:65:7a:e6:fa:4c:8b:
74:31:1a:3e:88:37:c1:9d:10:eb:de:5b:bd:fc:ad:de:68:11:
b9:94:de:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaPy9RQLSwSbdg9mWSLEHkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MGMyYzk4M2I2MjcxNjkyMTg1NzFjNmI4Mjk0N2FlZWVh
NWY3Y2UwHhcNMjUwNTAyMDcwMDIxWhcNMjUwNTAzMDcwMDIxWjAzMTEwLwYDVQQD
EygzN2EwY2JiOTFiZTBjMDFjY2E5MzBlMjFmMjUzZGUxOWU5NmJlYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncE4ExGXQshcFvF5YGTvGx/3kzP8
d5IzTEjUec2c+B8/y5aHZsGpRcJ5lAhxkOyIApNsUDnU3657XVCKdaUy7uLmqmVk
zjwLwFKExymk1jH2d//491UhdPZJLXqq3dLpl+AMztfuOdKnmUuDMJtm0qM/rPVY
6IwyUDFTOS3I8QcAMcO9fWIj77gGvTq0XBC/6/GUjwCZFrw/yMA9YVAvfaLh+Bcp
TBK8z0UarGSQMe0BVZ8yLIxbZj8v2EdWUE1+RWKYl9GvYWoNqWGNeER2JiItgMCx
2eRfhoJV9axXfU5qP/YfeUaKHzqifO0ODcmumPscCRtipC5oIXe5fwGaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDegy7kb4MAcypMOIfJT3hnpa+oLMB8GA1UdIwQY
MBaAFEcMLJg7YnFpIYVxxrgpR67upffOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAt
MTE1YWFjOTJlOWJmLzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ODE0MDgtYjIxNS00ZDFhLWIzMzAtMTE1YWFjOTJlOWJm
LzEvUnd3c21EdGljV2toaFhIR3VDbEhydTZsOTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHaONxtsT
ZV5YQW+BM3RvdRtrtuZYJoVoWJWu5UU1oMUllXfDGygEAvlEb+ER1nQRlC7wsYbn
Q8RU5RmQfZnvSFDIcY6b5zHjHLhQgY45GRBfOC7MsAoT7OdmvPpt8tSO4bn2vTiK
OIl1JHIPlmwQEcVrW8qW6n8pbaLdDuPn7iysWr9u3A7Q36EUInlGzvxbNnlyy0Jj
edIDYlYNsqZeES9mCtZg4zxgZJUwM7DuDBlbRs3Ru4FJfANykRbuOKNILjpPqIaB
suaqwrrCZ11Q8NkrAODfoO5/9tcs1jiZOehry+IXZXrm+kyLdDEaPog3wZ0Q695b
vfyt3mgRuZTe8w==
-----END CERTIFICATE-----
Generated at Fri May 2 15:39:40 2025 by rpki-client