Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier: FQN74yTlYjBgCDB6TRTVucbTmEx4xUPn1TVKjOE8E9k=
Subject key identifier: E3:A1:1D:B8:A5:B6:C2:B8:0A:57:26:0D:3D:31:36:86:AC:CC:7D:F6
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial: 01969FE40D6AB23D7BAF002117123208BEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number: 152F
Signing time: Mon 05 May 2025 10:00:45 +0000
Manifest this update: Mon 05 May 2025 10:00:45 +0000
Manifest next update: Tue 06 May 2025 10:00:45 +0000
Files and hashes: 1: Gp59J-5Sjta1tmO1BUNSwj87vUI.roa (hash: OgOIKzaveJZdrN8U7gkn47rkfBwhkft0gqHgmzmYmdc=)
2: oX3nNgieJ2JInSOqTkqnW4BSKKU.roa (hash: E/puRqDQplddqvaDsExSE6S/JUmdbOP6wn7iah2FAFE=)
3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: oF2T/33hmP3wmPug78u30aEbfzp8C4Zsa5oiffZYgkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e4:0d:6a:b2:3d:7b:af:00:21:17:12:32:08:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Validity
Not Before: May 5 10:00:45 2025 GMT
Not After : May 6 10:00:45 2025 GMT
Subject: CN=e3a11db8a5b6c2b80a57260d3d313686accc7df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:f9:11:4e:7c:dc:57:2b:f4:d1:40:fd:34:
32:d3:5a:09:e9:eb:75:42:3b:6e:48:e4:25:2a:ca:
74:b9:30:f9:dc:73:57:2c:88:81:3a:4f:60:2a:f3:
87:0e:49:74:58:00:8e:7b:2f:08:06:dd:43:8c:6a:
9c:47:f9:1c:9c:b5:0f:a4:4f:48:fc:ac:7e:04:2a:
f5:d6:3f:d5:e9:4b:81:2b:83:77:fe:01:8b:40:1d:
a9:0d:31:14:e5:81:ad:51:57:d2:79:89:92:1c:e7:
10:28:62:3e:3d:cd:76:fb:5e:6f:10:85:4e:bf:54:
b1:17:ca:7f:eb:ed:43:aa:03:29:41:e0:89:cf:34:
b1:cf:51:d8:d3:aa:e1:57:b0:43:0d:fa:74:ce:43:
6d:a2:4a:8f:d3:9b:61:51:97:69:e4:b6:80:05:bf:
58:d1:24:fb:bb:bc:6e:70:eb:01:f5:a5:2e:06:fd:
e8:93:cd:b4:2a:29:53:4c:fc:71:3c:38:05:9d:9d:
9b:a3:cf:16:d6:4b:c6:02:6d:96:97:87:60:3e:47:
80:16:bf:d6:42:85:2a:95:fa:80:bb:83:8c:cd:48:
e2:da:a4:26:5c:b2:f0:9f:83:65:4a:19:16:5e:07:
e5:e6:66:07:b3:c2:72:58:70:78:f8:8a:2c:f5:ad:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:1D:B8:A5:B6:C2:B8:0A:57:26:0D:3D:31:36:86:AC:CC:7D:F6
X509v3 Authority Key Identifier:
keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fa:8d:a2:91:40:c1:2f:f9:02:d9:b1:05:96:df:6c:83:1e:
ee:8b:c8:77:96:ab:c1:3d:1e:1b:52:fe:82:20:b0:ee:fd:b7:
3e:a7:54:66:60:6e:73:9f:0f:5d:ee:97:e9:b4:68:1a:ec:48:
65:49:22:df:82:dd:60:5f:48:81:10:b0:f1:a7:4c:91:e3:79:
f8:02:b1:35:51:0b:ac:43:b4:f6:ee:62:4c:e0:37:2b:e3:56:
8c:08:c0:c5:39:8a:1c:c4:5d:a8:39:02:bb:6e:ad:21:51:5e:
bb:a3:21:c3:3d:b7:ba:90:4c:f0:a3:b7:b7:4e:15:ce:8f:b3:
32:43:c3:74:a2:9b:68:8c:24:9b:cb:22:1e:21:9f:52:bb:85:
57:00:7b:8b:fa:66:df:3e:fe:45:1c:36:90:49:db:52:dd:d6:
03:6f:a5:40:91:c9:c7:57:ee:74:25:e6:f7:72:76:32:e0:76:
81:c0:3b:a9:11:1b:89:d7:23:4c:f3:7e:9f:3b:bd:ef:45:fe:
f1:78:fa:13:74:1b:6c:60:b3:2f:f1:db:89:09:ef:f7:be:09:
f6:09:86:4f:8a:63:42:32:fd:4b:c6:c4:af:de:ab:86:5e:0d:
06:b2:1f:96:88:38:67:88:70:e7:a5:6f:47:16:33:7c:a6:17:
75:83:52:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:53:01 2025 by rpki-client