Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File: dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier: T9wXOAZVspBlg1r8ysb0HwfNWZdl613qgxgcEX3no4w=
Subject key identifier: 9D:D5:18:DB:46:7D:A0:BD:46:0A:34:92:FB:35:5E:83:7D:41:D5:37
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer: /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial: 019686919E6C5777AE3F64197F5417B3A690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number: 0982
Signing time: Wed 30 Apr 2025 12:00:12 +0000
Manifest this update: Wed 30 Apr 2025 12:00:12 +0000
Manifest next update: Thu 01 May 2025 12:00:12 +0000
Files and hashes: 1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: NcXeYtdg9BPqTSAfZUxYG1CAV+T0FzXPRK6/XTGx4wo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 12:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:91:9e:6c:57:77:ae:3f:64:19:7f:54:17:b3:a6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Validity
Not Before: Apr 30 12:00:12 2025 GMT
Not After : May 1 12:00:12 2025 GMT
Subject: CN=9dd518db467da0bd460a3492fb355e837d41d537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:7d:e6:d4:ea:34:72:11:cf:17:0b:5b:42:
9d:05:1e:3d:29:06:2f:79:a7:a7:05:36:03:91:ae:
c0:25:91:27:6b:0a:2b:19:d3:d4:b9:da:a2:a4:71:
9e:49:8d:c4:96:94:4a:e0:33:a6:89:67:15:be:aa:
b5:bd:6f:ed:6a:89:d1:17:13:d3:5a:85:da:b4:d1:
71:ef:92:64:74:29:1e:9d:60:dd:14:93:09:6d:34:
f2:46:c1:2f:b7:4b:94:1c:b2:6c:d2:2f:07:93:5a:
bf:56:8b:f9:3a:32:58:65:70:76:f3:da:4c:48:2e:
0f:b1:3e:66:89:46:40:86:c6:64:6d:fa:0e:ce:01:
f2:d6:cd:d3:51:42:bb:76:1d:63:08:a1:66:89:9b:
00:7b:16:65:da:a7:33:dd:b5:b1:fe:ef:d6:64:d3:
85:5a:15:04:d0:45:4a:c0:96:ad:3f:0a:f3:b8:d0:
71:31:93:bb:1d:20:84:0e:d5:37:80:d9:a5:ea:56:
22:62:d3:c2:dd:2b:50:82:9b:aa:67:8c:3b:62:b1:
5b:aa:59:be:b3:fd:4b:f4:3a:8a:b1:e6:25:48:51:
1a:08:c3:57:07:ff:98:4b:3b:2a:4c:3f:50:54:5a:
67:00:da:65:a4:97:b2:9a:01:24:e3:f8:a9:e1:40:
f0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:18:DB:46:7D:A0:BD:46:0A:34:92:FB:35:5E:83:7D:41:D5:37
X509v3 Authority Key Identifier:
keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:15:20:c6:97:77:55:d7:a5:77:8f:72:28:07:06:5e:fd:db:
4e:40:76:20:38:bd:cd:2e:d5:26:d5:6e:ff:df:61:e4:be:2a:
7e:af:d4:15:ec:66:cc:fd:51:b5:cc:9d:bf:22:57:35:68:ed:
98:f7:4e:ef:4d:6d:f0:59:9b:ee:42:a4:68:34:93:8c:97:7c:
9b:52:8a:d2:b7:af:8a:31:18:6a:16:84:b5:5f:a5:2e:55:73:
dd:97:d5:50:c4:b5:b7:e9:99:a0:ef:bc:5d:96:bb:3f:00:e6:
25:0a:fc:1c:e0:14:fd:43:f8:16:3f:43:0a:e7:c3:4f:1b:1a:
e5:02:6e:c4:b5:bd:21:3a:26:4c:29:6e:93:7b:1b:86:e1:2a:
88:96:95:be:66:dc:74:48:e1:99:a5:48:3f:12:6e:4d:0a:ef:
ce:9d:5a:30:92:6c:a1:58:27:7c:c9:1a:e6:e3:db:20:c0:09:
51:23:9b:93:7a:a7:95:96:73:81:b0:85:9b:f4:83:27:56:04:
0a:6d:d9:c9:f3:55:a7:d7:47:b5:6b:f7:34:fa:40:49:da:2b:
ea:55:a7:58:d9:0a:70:94:ae:d1:27:78:85:5b:11:d5:df:8e:
6b:b7:c4:f6:0b:c8:bd:41:f4:52:55:64:1b:21:07:3d:88:93:
de:0b:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:43:13 2025 by rpki-client