Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: UNvQ8mLo9Igwe4s3BZ5qob3dy0y08kdKMCGdEtZEs2A=
Subject key identifier: 37:67:61:CA:FC:23:74:D1:D0:61:AC:76:F6:98:66:57:BF:FB:BB:1E
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 0196797B499A6A76F5F7353C81B55CF8543A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1519
Signing time: Sun 27 Apr 2025 23:00:44 +0000
Manifest this update: Sun 27 Apr 2025 23:00:44 +0000
Manifest next update: Mon 28 Apr 2025 23:00:44 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: 1PTHv4Y09JnLUFO4IQb8otFYYnQHqGw5CNSiu/2roFg=)
2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=)
3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:7b:49:9a:6a:76:f5:f7:35:3c:81:b5:5c:f8:54:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Apr 27 23:00:44 2025 GMT
Not After : Apr 28 23:00:44 2025 GMT
Subject: CN=376761cafc2374d1d061ac76f6986657bffbbb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:07:dc:82:c8:2d:7b:df:aa:3e:9a:b9:6c:
e5:47:d6:06:c8:da:2f:db:5a:88:8b:01:77:80:63:
43:47:3d:34:32:5a:8b:a9:9e:9f:e7:1a:ef:c2:d7:
bd:2c:5d:4b:23:38:cb:5b:41:aa:35:59:34:d1:c0:
4b:03:df:6f:ee:f9:f6:91:b5:b0:89:f3:f0:9c:7f:
83:a4:1f:d5:fd:93:e1:e6:b4:72:8a:d4:76:4e:24:
77:69:62:94:95:c2:a0:d0:57:71:28:ad:ef:af:0f:
37:4f:3a:3a:d8:21:de:aa:52:12:77:cf:8c:05:04:
0b:75:4b:9e:fc:13:17:40:b6:7c:bd:76:46:1b:44:
91:82:b1:14:f6:16:45:c4:55:6b:2f:aa:bb:97:da:
a7:08:09:75:e2:95:22:1b:94:ee:7f:b0:21:db:d0:
bd:ee:c1:98:c9:c2:94:ea:be:4e:7d:11:15:8e:28:
1d:1a:63:f6:8b:56:8d:f3:da:5d:98:7f:9c:6f:c0:
1e:a3:cf:a9:f9:84:a2:86:79:b2:fc:09:68:d9:45:
59:12:85:95:2c:72:bc:ba:75:41:8b:95:02:40:79:
f9:59:91:7c:22:9a:a5:b7:35:64:84:c9:47:b2:a4:
8a:e4:b9:e8:61:ed:21:50:03:e0:42:29:b0:77:a6:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:67:61:CA:FC:23:74:D1:D0:61:AC:76:F6:98:66:57:BF:FB:BB:1E
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3d:c1:e9:89:e4:84:0a:9e:8b:29:c5:87:1f:4d:1a:5c:4f:
81:38:c7:ba:2a:52:3e:df:8c:7e:41:fa:9b:66:aa:13:bf:7d:
54:32:3a:bc:49:ef:96:14:52:5b:46:3c:58:b3:e0:49:e7:87:
21:07:d9:bd:8e:32:c8:fb:2c:93:3a:27:0b:88:ce:b1:f1:11:
d6:d0:91:3f:cd:f3:6d:36:40:8d:e1:b5:8b:a2:37:ac:ba:49:
0f:8b:59:18:f3:92:08:41:4e:61:e1:44:26:26:75:7a:50:cb:
18:97:7b:04:e6:b1:16:82:0a:ee:bd:2f:16:ba:06:6a:b7:93:
66:06:7d:3c:de:a8:2e:bb:c8:29:c7:32:e7:7e:15:d8:27:65:
6d:ed:2b:67:08:c2:60:97:61:a0:ef:bf:61:ef:d9:7c:a3:28:
c9:81:c9:da:99:7f:00:aa:5d:99:c6:e1:61:a8:73:e9:75:ea:
5a:fb:d0:c8:75:3b:81:58:2c:49:36:1b:d8:a8:2b:fc:16:36:
4e:16:f7:4e:54:2f:4e:6f:31:33:30:ac:58:63:84:9f:ed:0d:
3e:ec:cb:8d:3c:c3:6b:c3:70:f2:bb:77:a2:98:06:40:21:3e:
04:5f:c0:07:73:58:14:a3:da:0b:f1:60:ad:a7:f3:d4:31:d2:
5a:1a:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:10:59 2025 by rpki-client