Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: ymPgpRdnHT1xAGoDKCL+no18fQ9zDQ3fOk7HJI8sfh8=
Subject key identifier: CF:34:79:F9:1D:DB:1F:C8:EE:46:D1:B2:C5:D6:1E:93:7F:90:96:2E
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019683C7EE8B4B151654F5A9B433D4F06310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: 5C
Signing time: Tue 29 Apr 2025 23:00:40 +0000
Manifest this update: Tue 29 Apr 2025 23:00:40 +0000
Manifest next update: Wed 30 Apr 2025 23:00:40 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: NoJ1UKHiukde2mRT9-_nIR1Anh8.roa (hash: /+lwIce8p8YhYy+vTvo5y1ZD5U8+OHW9eM/9QYNo8AI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: v5oqDGyTuklqeIRtgt9FB5+RPmnoi0wejsngKJLRxDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:ee:8b:4b:15:16:54:f5:a9:b4:33:d4:f0:63:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Apr 29 23:00:40 2025 GMT
Not After : Apr 30 23:00:40 2025 GMT
Subject: CN=cf3479f91ddb1fc8ee46d1b2c5d61e937f90962e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b5:03:bd:cc:09:78:7d:e7:ae:9c:ec:de:98:
02:53:28:19:24:25:70:9c:17:65:04:96:d7:c7:cd:
2e:9e:7d:0e:c3:e6:97:ef:b3:9d:42:b7:27:df:a0:
18:b1:47:08:e4:bd:a2:ff:28:db:ca:dd:8c:c7:17:
05:25:ff:9d:75:40:9b:d3:66:cd:a9:72:81:d7:18:
0a:d3:08:17:ad:f4:af:64:94:47:d3:5d:26:57:5d:
03:aa:d0:8f:64:68:58:0a:0b:da:59:80:bc:bb:5f:
36:e9:da:b0:9b:e0:2a:8b:c2:03:f8:ef:c1:da:f9:
b1:b2:81:01:a0:cb:9b:71:81:30:29:7a:9f:8e:63:
9f:e0:df:d5:57:f6:98:34:a1:ef:c0:02:b5:e2:b7:
3f:11:a2:34:a2:06:c8:80:43:99:b8:43:d1:94:78:
67:f6:d2:84:e3:3c:e4:10:bf:b1:2e:e4:cf:fc:8e:
47:8d:c6:90:14:32:33:dc:23:54:66:e7:14:21:33:
bf:7f:a9:de:7d:a7:77:5d:d9:57:da:42:53:a1:49:
f3:66:27:11:c3:5e:e6:49:cc:4c:92:ab:f4:83:d4:
1c:32:91:19:90:cd:f4:f4:28:46:87:e0:21:f1:b6:
fb:94:51:18:97:37:f0:0b:e4:3e:eb:f0:5a:21:89:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:34:79:F9:1D:DB:1F:C8:EE:46:D1:B2:C5:D6:1E:93:7F:90:96:2E
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a7:e9:1b:b4:78:5b:5e:a8:56:d4:6f:8c:a0:00:29:7f:30:
43:5f:95:08:fd:1c:bc:ab:e7:c8:a0:fa:e5:76:c8:19:42:41:
39:e5:c3:21:5c:af:d2:f9:1a:95:77:c9:95:5f:fc:0e:fa:6a:
a4:18:d8:80:05:ce:1a:38:ff:88:66:a7:9e:56:69:56:aa:c1:
f3:40:02:fb:20:5b:c5:d0:da:34:27:4a:b4:d0:db:89:43:fc:
ed:b3:c0:c8:f0:de:c4:9a:58:55:35:ea:78:a5:de:88:87:bb:
1f:d5:dd:1f:d2:63:56:28:4f:8f:17:49:7d:54:9e:3e:84:04:
b5:23:f9:77:63:29:d6:15:4b:ec:0a:c8:5e:3d:c0:a3:c1:b6:
1c:c9:da:85:a3:2b:71:b8:63:7e:f6:96:0a:22:95:5d:3d:ba:
b7:17:4a:4f:a3:ed:fc:5c:e4:cd:50:03:24:fb:5f:64:9f:d9:
02:8d:4c:f5:d6:1a:b8:86:1a:9c:4b:e8:bb:87:3f:cf:90:7e:
ff:90:84:55:83:da:aa:ad:5f:e2:59:63:89:2a:03:e0:8e:d0:
d5:97:a7:f8:55:72:38:3e:a7:24:08:72:86:e3:6c:17:3a:4c:
46:2c:16:31:f7:0a:77:8a:00:e2:d5:e9:80:2c:5a:99:eb:fb:
71:1e:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:11:01 2025 by rpki-client