Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File: wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier: 4ySwHdc9vy8MuMZX8lnjaT/5japbOw7YeVvX4iAPdIs=
Subject key identifier: A6:2F:7F:5E:84:92:5C:A0:2E:D6:FA:57:98:20:F3:D8:AB:92:03:F1
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer: /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial: 0196A0F68728961355C3196FE6E6DBA92B2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number: 021A
Signing time: Mon 05 May 2025 15:00:33 +0000
Manifest this update: Mon 05 May 2025 15:00:33 +0000
Manifest next update: Tue 06 May 2025 15:00:33 +0000
Files and hashes: 1: UsAeeJKz5x5UM9R7HFO2Dgzi0jA.roa (hash: FFiDVfqG1v30MyW/O7JaJbrLiihT2L0idYJ853z7lV4=)
2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: wU096KYsll2zq3k0gFhYPAUqwMUFNz12OaFntmdLSrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:87:28:96:13:55:c3:19:6f:e6:e6:db:a9:2b:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
Validity
Not Before: May 5 15:00:33 2025 GMT
Not After : May 6 15:00:33 2025 GMT
Subject: CN=a62f7f5e84925ca02ed6fa579820f3d8ab9203f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:77:32:b2:9d:58:b8:66:07:b7:31:0b:43:
74:4e:ce:e5:69:51:73:81:80:e5:c4:5d:de:06:5a:
85:64:9d:29:04:f6:cb:38:be:14:ff:ea:20:19:99:
0d:a4:42:60:97:70:a5:bf:0c:b4:70:6e:d3:36:3b:
38:0d:df:ce:12:99:29:95:81:ff:26:49:73:4f:16:
df:d5:96:b2:60:dd:02:1f:50:0d:81:b4:5a:ae:cc:
a2:68:d6:3f:a2:55:10:b5:d0:83:b5:f3:5d:54:11:
86:07:9b:b3:59:7d:16:00:3a:38:84:c5:fa:f4:62:
19:4d:66:37:54:36:e3:ee:21:8b:f7:76:81:7d:a5:
e3:22:4b:0f:bc:d2:0f:b7:ab:c1:f2:39:44:42:97:
b4:8d:40:89:49:e6:4d:44:34:24:86:a1:5d:d1:d4:
61:4e:47:ff:d2:a6:41:9c:d6:d9:1b:09:4a:2d:6a:
c0:78:19:2b:9e:f8:8f:7a:af:f6:3f:da:43:fa:44:
ae:46:8c:86:b8:86:07:cb:52:01:41:70:12:48:9b:
44:1f:e6:21:68:54:ae:2a:83:ea:56:fc:97:9d:d0:
a4:fe:84:14:05:cc:66:66:13:ee:3d:00:5f:8d:df:
89:ef:0a:c8:9b:a4:c7:6b:81:91:63:c4:ec:95:19:
58:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2F:7F:5E:84:92:5C:A0:2E:D6:FA:57:98:20:F3:D8:AB:92:03:F1
X509v3 Authority Key Identifier:
keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:45:d8:76:5b:86:44:8d:cd:4f:7b:30:e2:68:3d:46:23:ba:
84:31:72:35:cc:01:3a:63:ec:47:42:25:5a:4f:8b:0e:3d:34:
de:78:f0:94:89:f0:9e:72:9a:c2:32:c0:b9:1c:d8:8c:df:f1:
c4:a5:85:ac:56:aa:80:7c:cc:18:91:73:3e:0c:5a:a2:f0:56:
ca:ac:ee:9d:06:10:c0:87:89:b1:bb:06:58:4f:21:3d:dc:4a:
12:8b:33:4b:50:22:13:36:fd:28:40:fb:aa:44:b5:e8:4d:6c:
bb:a0:66:ec:db:e5:44:78:80:47:ce:6e:86:09:ff:ed:7d:16:
b1:47:ba:d0:77:56:bf:97:32:85:3c:47:dc:c4:31:6d:3b:d5:
92:48:55:0f:da:9f:5b:b5:8e:1d:18:c2:5f:96:68:02:cc:0d:
15:8d:7e:58:42:24:ac:a6:b3:69:03:fa:f3:a5:35:66:e7:59:
19:05:91:58:c5:11:20:a9:32:37:4d:d5:72:56:75:82:7c:db:
88:95:89:28:96:1f:67:50:69:d6:4d:74:9a:e8:c0:98:06:e6:
02:bf:36:3c:8e:a2:64:35:d2:6d:36:0c:b0:e4:07:8e:28:bd:
a0:28:d3:97:b0:0f:c9:12:66:65:d1:12:da:b1:ac:9e:06:88:
c8:7a:fd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:02:39 2025 by rpki-client