Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
File: p2t7n3_WaUOSfGDc8SEt3AffBSM.mft (raw, json)
Hash identifier: qvYAW4KknudyYgosfXOEB7sTEJNxWzQg/hbgOErFgEA=
Subject key identifier: 09:6A:AB:54:EC:27:0F:40:C2:6A:A9:95:75:D0:A8:07:D9:C9:46:24
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 019674F9A5FB1DBFAF6ADF40DA11D6D3751F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
Manifest number: 0D63
Signing time: Sun 27 Apr 2025 02:00:40 +0000
Manifest this update: Sun 27 Apr 2025 02:00:40 +0000
Manifest next update: Mon 28 Apr 2025 02:00:40 +0000
Files and hashes: 1: Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa (hash: hrePu0JTxNPu0+eBuJ/EjFtZTApZ3mGXZCXxWWMuor0=)
2: p2t7n3_WaUOSfGDc8SEt3AffBSM.crl (hash: fF4bXyqBpnQIfV+oAxQ6Tym6Rl5+wRVCBznRQtTJAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:a5:fb:1d:bf:af:6a:df:40:da:11:d6:d3:75:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Apr 27 02:00:40 2025 GMT
Not After : Apr 28 02:00:40 2025 GMT
Subject: CN=096aab54ec270f40c26aa99575d0a807d9c94624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:02:f2:6d:55:de:29:89:b4:c4:4c:4c:6c:
60:92:4f:22:71:84:73:b3:e4:3e:dd:ac:55:60:80:
f8:2d:2c:ca:48:33:5e:c6:d1:bf:41:aa:0e:2c:15:
a2:2f:5b:13:13:2c:37:8f:ef:a4:56:7a:77:96:36:
29:b7:14:f7:9e:78:96:1f:5e:18:ee:42:16:d6:be:
5b:48:66:b8:45:c2:f2:55:34:04:62:0c:f0:52:d3:
3f:ad:6a:a7:fe:fa:1f:57:15:ae:fe:e6:8e:6e:30:
85:7f:82:97:5b:b8:b6:af:57:46:00:62:30:12:ba:
dc:b3:6c:43:dd:fe:d4:b9:a0:2f:05:07:7e:dc:76:
b2:66:6c:5e:45:b3:7c:fb:08:f9:dc:d3:20:57:11:
ea:78:fd:7c:e1:bf:8b:cd:55:0e:25:22:62:be:d6:
02:b0:50:78:42:42:61:4b:83:11:8a:52:8d:59:89:
8a:8b:cf:9d:70:9f:40:45:ed:f1:fe:6b:29:f4:65:
91:eb:0d:2c:1b:f6:14:29:fa:f3:e0:78:3c:27:7d:
c6:d2:17:a0:11:14:ab:4c:d8:fb:a3:ec:14:83:d3:
10:02:30:33:fb:ef:65:cc:d7:63:8d:ac:af:b1:8a:
76:cf:28:88:9f:9c:56:a0:21:5c:a6:da:fe:af:a1:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:AB:54:EC:27:0F:40:C2:6A:A9:95:75:D0:A8:07:D9:C9:46:24
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:4a:2d:6a:9d:0a:97:20:bc:f1:d3:6f:b4:c9:0b:0a:d7:69:
0f:7c:14:73:0c:41:a6:c4:10:a2:6d:98:05:28:8e:23:d2:c9:
ae:af:f2:96:17:5a:d8:30:39:f2:9b:21:73:0f:fb:83:76:a8:
d0:c5:43:19:c1:ed:96:cf:3c:3f:26:84:2f:3e:c5:49:e1:5f:
9a:db:1d:a4:8e:83:7c:70:d8:75:6e:23:68:6e:5a:07:6d:01:
c9:dd:da:a8:2c:8e:22:d9:b3:e9:39:0d:ad:62:21:da:1b:c5:
da:96:74:9d:e3:50:65:af:9a:0b:00:cd:65:3c:ad:17:ba:88:
95:b3:e4:62:e7:35:16:9e:46:2b:dd:72:21:11:46:75:51:cf:
fc:d7:79:63:3f:e7:54:b5:5b:c2:44:58:9a:72:65:cc:96:95:
78:c7:f7:d1:77:61:3a:f0:30:38:69:aa:a3:8e:c4:6e:e5:63:
dc:d6:a2:9c:b3:5f:da:e8:9f:ae:bb:d3:9e:8c:f2:7e:0e:e0:
7f:19:70:a5:4d:05:a4:55:39:13:8b:c7:47:aa:61:6c:7b:7a:
ac:af:11:86:db:a3:e3:e5:66:e5:85:3e:a9:d3:04:26:e8:ea:
e9:67:e4:46:07:de:a0:3b:df:86:ff:c1:53:c2:3f:dd:6d:91:
2e:7b:87:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:59 2025 by rpki-client