Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
File: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft (raw, json)
Hash identifier: xefOgQluUYaayuoI5/j7np2faqJwSsIiO3B8TO10x1Q=
Subject key identifier: FB:DD:9A:17:03:E9:F3:CF:83:8C:BE:16:22:30:94:F9:E6:CE:B5:A1
Authority key identifier: 09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
Certificate issuer: /CN=0963491cd67570b0783b400161c0adcaa002f0db
Certificate serial: 019679B1FE9812247CDE0E0381C9FB98D43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
Manifest number: 03E5
Signing time: Mon 28 Apr 2025 00:00:30 +0000
Manifest this update: Mon 28 Apr 2025 00:00:30 +0000
Manifest next update: Tue 29 Apr 2025 00:00:30 +0000
Files and hashes: 1: CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl (hash: kNt716xC+0k6CupWZJbmsdMWRXwSRLToRsyuA9+9hxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:fe:98:12:24:7c:de:0e:03:81:c9:fb:98:d4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0963491cd67570b0783b400161c0adcaa002f0db
Validity
Not Before: Apr 28 00:00:30 2025 GMT
Not After : Apr 29 00:00:30 2025 GMT
Subject: CN=fbdd9a1703e9f3cf838cbe16223094f9e6ceb5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:e4:ba:7f:c2:53:31:c0:e4:46:b0:ee:5f:
61:9a:44:9a:21:c6:b4:dc:b6:4c:48:d6:ca:ef:f9:
1a:a5:35:48:3e:9c:79:76:d6:87:52:bb:24:bd:70:
73:b5:1f:81:78:16:e5:4f:22:8c:f1:b3:3a:18:1a:
44:89:a9:ad:d1:47:48:8b:32:73:3a:9d:df:ba:4c:
cd:04:d9:6b:f6:f0:bf:29:9c:1b:17:76:7b:d9:a2:
4a:81:e3:e7:ba:1c:65:bc:52:d3:1f:b4:43:4b:20:
02:7a:29:f9:1e:79:0b:b6:0f:3c:f1:f1:2b:22:9f:
a3:ba:f2:b8:c9:9a:1e:f1:a1:de:44:30:6d:a1:52:
aa:2d:9d:4c:03:fb:ef:25:b3:ea:29:25:b7:f0:21:
57:60:f3:3f:4d:42:18:ef:c8:e8:59:c9:86:86:54:
8a:bf:59:69:4e:71:81:f4:f0:97:05:92:e8:fa:43:
c5:05:30:d5:56:16:f3:72:1c:d9:6f:43:2d:33:c2:
4d:0e:cf:1a:53:88:73:fd:43:42:3b:6e:a1:81:bc:
e4:65:5a:9f:fd:df:8c:ce:d1:0b:06:99:be:a3:b7:
ad:5a:5a:0e:0d:e3:26:2f:d6:b8:79:a3:7e:65:03:
08:d3:68:8d:e4:1e:35:ae:ad:90:75:51:1d:46:7e:
76:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DD:9A:17:03:E9:F3:CF:83:8C:BE:16:22:30:94:F9:E6:CE:B5:A1
X509v3 Authority Key Identifier:
keyid:09:63:49:1C:D6:75:70:B0:78:3B:40:01:61:C0:AD:CA:A0:02:F0:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/2a576d-d3af-464c-8da9-c93169a08883/1/CWNJHNZ1cLB4O0ABYcCtyqAC8Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f1:4f:c1:03:7b:43:8a:d3:45:b3:cf:62:61:37:73:ad:b1:
c9:ea:a3:9c:ec:ef:03:aa:c2:f8:24:92:63:34:f3:64:86:27:
a8:c5:3e:55:6a:bf:61:f4:cb:43:ac:4a:ed:f4:45:2f:95:a8:
72:9a:50:d7:0c:32:72:75:95:a1:dc:9c:ae:0d:f8:e4:81:dc:
9b:1a:e7:3e:5c:a8:eb:45:ab:85:f3:09:96:36:a8:75:a5:37:
c9:c8:22:fc:62:da:86:57:1f:5b:ce:10:85:34:6c:4a:a3:4f:
93:99:7b:3b:cd:a4:46:4f:8c:80:c9:fc:e2:1d:51:29:6c:70:
60:ff:ed:b0:f2:33:71:0a:0c:6e:67:d5:32:6d:e1:59:2d:40:
58:c0:d7:d6:dc:42:4f:76:b8:95:9c:98:e2:7d:42:1a:21:82:
92:86:39:c4:1d:c0:6d:da:b6:16:d3:f5:01:21:69:03:88:8b:
4b:c8:ca:3c:fc:48:8d:d0:c5:d2:fe:b2:20:32:a6:05:ba:88:
6e:c4:4c:68:cf:34:b2:4d:c2:96:ab:18:b9:a3:62:61:e8:45:
07:d8:30:27:bf:4e:81:08:6f:c6:fe:56:a9:18:02:3f:e6:bb:
0f:18:30:3d:85:a6:5b:99:cb:97:2e:90:93:f9:57:f9:41:78:
ef:58:87:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ5sf6YEiR83g4Dgcn7mNQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjM0OTFjZDY3NTcwYjA3ODNiNDAwMTYxYzBhZGNhYTAw
MmYwZGIwHhcNMjUwNDI4MDAwMDMwWhcNMjUwNDI5MDAwMDMwWjAzMTEwLwYDVQQD
EyhmYmRkOWExNzAzZTlmM2NmODM4Y2JlMTYyMjMwOTRmOWU2Y2ViNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NLkun/CUzHA5Eaw7l9hmkSaIca0
3LZMSNbK7/kapTVIPpx5dtaHUrskvXBztR+BeBblTyKM8bM6GBpEiamt0UdIizJz
Op3fukzNBNlr9vC/KZwbF3Z72aJKgePnuhxlvFLTH7RDSyACein5HnkLtg888fEr
Ip+juvK4yZoe8aHeRDBtoVKqLZ1MA/vvJbPqKSW38CFXYPM/TUIY78joWcmGhlSK
v1lpTnGB9PCXBZLo+kPFBTDVVhbzchzZb0MtM8JNDs8aU4hz/UNCO26hgbzkZVqf
/d+MztELBpm+o7etWloODeMmL9a4eaN+ZQMI02iN5B41rq2QdVEdRn52/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvdmhcD6fPPg4y+FiIwlPnmzrWhMB8GA1UdIwQY
MBaAFAljSRzWdXCweDtAAWHArcqgAvDbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yYTU3NmQtZDNhZi00NjRjLThkYTkt
YzkzMTY5YTA4ODgzLzEvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8yYTU3NmQtZDNhZi00NjRjLThkYTktYzkzMTY5YTA4ODgz
LzEvQ1dOSkhOWjFjTEI0TzBBQlljQ3R5cUFDOE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPFPwQN7
Q4rTRbPPYmE3c62xyeqjnOzvA6rC+CSSYzTzZIYnqMU+VWq/YfTLQ6xK7fRFL5Wo
cppQ1wwycnWVodycrg345IHcmxrnPlyo60WrhfMJljaodaU3ycgi/GLahlcfW84Q
hTRsSqNPk5l7O82kRk+MgMn84h1RKWxwYP/tsPIzcQoMbmfVMm3hWS1AWMDX1txC
T3a4lZyY4n1CGiGCkoY5xB3Abdq2FtP1ASFpA4iLS8jKPPxIjdDF0v6yIDKmBbqI
bsRMaM80sk3ClqsYuaNiYehFB9gwJ79OgQhvxv5WqRgCP+a7DxgwPYWmW5nLly6Q
k/lX+UF471iH/g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 07:43:59 2025 by rpki-client