Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
File: r5NWA-UugxU3cW1FizYBkvmaNok.mft (raw, json)
Hash identifier: t2XukIlOCjBRLx+BGun5hJUbd4/r5D0zKi+yBOrtCsU=
Subject key identifier: A2:E6:D6:AF:57:52:B1:CD:8F:2B:D1:38:08:99:AE:81:AC:53:09:B2
Authority key identifier: AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
Certificate issuer: /CN=af935603e52e831537716d458b360192f99a3689
Certificate serial: 0196722F2DC9B47CBB4222922CD9E2D4A956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
Manifest number: 0D05
Signing time: Sat 26 Apr 2025 13:00:16 +0000
Manifest this update: Sat 26 Apr 2025 13:00:16 +0000
Manifest next update: Sun 27 Apr 2025 13:00:16 +0000
Files and hashes: 1: C8GJTtN7fk4YCqjJY8mOHTrefmE.roa (hash: UKesPOi4+5CzCQnG0snfHD/ZU73osDFB9OchjV8wo3E=)
2: eQMDRNJuMlNlfPMiBSEoRMIZqkc.roa (hash: +YT5AumPRJxR5qeAOACvLYBXjcHMfp3cae2CLFa9pWo=)
3: pK186WjMEhCqpTApn72adWGJTc0.roa (hash: 2vPV6EcNoUKs6NmXfu/cqUoWqE3tnBkAH13PFqBjjPI=)
4: r5NWA-UugxU3cW1FizYBkvmaNok.crl (hash: NcYR5rKsGsXSOE0/0gxmMXNzux/Do/3UXUuychPDho8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:2f:2d:c9:b4:7c:bb:42:22:92:2c:d9:e2:d4:a9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af935603e52e831537716d458b360192f99a3689
Validity
Not Before: Apr 26 13:00:16 2025 GMT
Not After : Apr 27 13:00:16 2025 GMT
Subject: CN=a2e6d6af5752b1cd8f2bd1380899ae81ac5309b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:cb:46:2b:6b:b1:04:c7:eb:d3:fd:ec:ed:
6c:b5:d7:16:67:c7:12:b6:08:b4:1d:fc:4f:db:ee:
d5:ba:a5:aa:22:cc:60:f1:ec:8c:25:68:1b:2e:9d:
16:ab:25:10:7d:f3:d2:3c:3e:55:7c:6c:43:c8:11:
ba:f8:96:73:b6:4a:92:d6:9f:64:21:9e:72:37:44:
75:3f:03:c5:d4:82:98:34:3c:52:f1:42:86:2f:ba:
62:d0:6f:79:6f:61:ca:78:74:29:72:89:4e:04:2c:
4f:75:71:30:5c:99:2b:c5:42:7a:3d:a2:7c:08:75:
bc:5b:95:10:12:9e:d5:05:06:0d:15:cb:e1:3d:aa:
48:7e:0f:9a:61:71:c6:f4:6c:68:45:30:40:8b:62:
78:81:a6:e8:4a:9a:bb:ab:56:63:c0:fd:e4:7f:d4:
5a:23:ad:4c:97:7a:89:fe:23:70:f0:63:ed:d2:2d:
94:08:df:e6:c2:a8:99:3e:00:72:60:00:88:6a:3d:
85:2c:9c:a6:f5:6d:28:0f:32:c0:a3:89:fd:a5:fd:
25:39:cb:08:87:13:1a:8f:2b:c2:0e:a8:49:02:f4:
67:c2:f5:26:85:03:f0:d1:c7:20:5e:52:9a:72:1c:
00:99:09:7e:0f:92:ec:0c:08:9b:b8:1e:b6:e5:bd:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:D6:AF:57:52:B1:CD:8F:2B:D1:38:08:99:AE:81:AC:53:09:B2
X509v3 Authority Key Identifier:
keyid:AF:93:56:03:E5:2E:83:15:37:71:6D:45:8B:36:01:92:F9:9A:36:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5NWA-UugxU3cW1FizYBkvmaNok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/3001ad-de90-4360-811f-0a0d05ed0c6b/1/r5NWA-UugxU3cW1FizYBkvmaNok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:51:a8:4f:22:49:18:58:04:97:72:52:b8:84:70:0c:b2:16:
e9:00:cf:ac:de:18:40:55:fd:f1:88:28:3e:7e:7b:0b:16:e0:
c0:9d:a3:85:25:73:ba:0b:25:ba:df:b2:be:ec:5e:05:d5:9a:
f4:fa:f8:fe:04:b7:4d:67:5d:39:9b:36:12:84:05:7e:45:9a:
da:a0:be:d9:c3:f9:42:90:5b:49:3e:12:c0:61:9f:3d:23:fc:
9f:90:3d:47:4c:93:f4:74:4c:1f:d1:03:cb:b5:77:77:3e:e3:
36:a1:8d:ed:71:91:40:e5:ff:dd:ba:c5:61:20:d5:c2:02:e5:
5d:38:74:1e:22:c3:c1:f6:b4:44:81:26:21:5b:6f:c9:0e:ee:
a7:47:e0:06:49:5e:0b:ba:b9:49:0a:3d:1d:ed:4f:72:0a:15:
18:54:c5:62:a7:ee:74:c8:51:83:ab:d4:cc:73:c5:31:75:fb:
2c:71:8a:dd:a3:64:65:aa:d3:96:c0:63:81:ed:78:a2:e5:3a:
54:ca:9c:c5:3e:2c:da:d7:0c:fd:c2:33:d4:39:d0:5f:b5:af:
63:31:1d:29:63:0b:02:cd:69:15:b2:09:16:07:31:3e:f5:66:
da:24:e5:53:c5:03:1c:1c:c0:da:70:43:06:cc:c9:60:b5:df:
25:68:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:09:18 2025 by rpki-client