Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: NmWS4vbxeUn5Q7dJ+4zfscvhf43IaAHgkRsrrE9FqFs=
Subject key identifier: 3D:99:F9:A9:87:96:25:47:13:F9:1D:0E:0C:E0:F3:EA:5D:FA:8F:4D
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 0196C917269D6A27461D4977FA72E06B465B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0C1C
Signing time: Tue 13 May 2025 10:00:59 +0000
Manifest this update: Tue 13 May 2025 10:00:59 +0000
Manifest next update: Wed 14 May 2025 10:00:59 +0000
Files and hashes: 1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: 3uWWtEg7p9VutkVAIuecm7U/ZfNHGScdhoVQX7mTM1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:26:9d:6a:27:46:1d:49:77:fa:72:e0:6b:46:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: May 13 10:00:59 2025 GMT
Not After : May 14 10:00:59 2025 GMT
Subject: CN=3d99f9a98796254713f91d0e0ce0f3ea5dfa8f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:6e:11:f9:bd:f9:8d:1c:94:49:a1:88:62:
9c:14:60:a3:9f:f4:13:43:78:5a:db:94:05:95:ef:
21:2c:27:26:a2:ec:de:3d:93:a6:c2:aa:34:75:d6:
7d:b7:98:df:03:cf:bb:6e:aa:b0:e6:9e:58:08:da:
ec:65:4f:42:1c:61:39:04:60:3f:50:3d:e4:e4:67:
17:fa:45:4e:ff:9b:2f:bd:55:d2:be:5d:ee:60:61:
4b:1a:ac:60:26:6c:a7:95:ab:98:b7:5c:c3:ea:ca:
d0:ca:64:52:9e:4b:7c:7f:f6:04:cc:df:f6:49:58:
40:9e:09:1c:d9:cd:33:7d:82:0e:e0:1a:59:a8:4c:
c8:48:86:4c:94:cb:41:06:9a:ee:49:54:f7:58:db:
07:f4:0d:67:64:78:84:44:fa:68:98:9e:79:04:aa:
5b:fd:c0:08:26:fe:c1:da:60:90:55:bf:ad:9b:68:
47:11:9b:68:b7:7b:3c:01:a8:ce:77:33:a5:c2:28:
e0:ff:8a:61:ff:6b:40:c4:a0:b7:d5:2a:7e:d6:bd:
37:d0:a5:87:f1:3e:d5:83:42:be:ed:ba:55:c5:d3:
f4:d7:fe:a0:8d:36:bf:45:58:d9:74:f1:f9:df:01:
66:16:51:fc:fe:09:81:65:f4:25:af:e8:0f:8d:74:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:99:F9:A9:87:96:25:47:13:F9:1D:0E:0C:E0:F3:EA:5D:FA:8F:4D
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:30:bb:ed:92:36:40:55:59:a0:d8:2c:9b:04:81:99:f0:
df:01:36:cd:4b:66:0b:56:26:77:f6:11:6f:e5:48:5b:b0:9c:
7f:a0:30:99:13:c8:6a:d9:71:57:de:7f:f2:42:70:16:01:a4:
27:30:9b:f7:2d:2d:44:e8:79:38:a8:24:48:35:37:9e:bd:58:
29:8d:47:aa:ad:3b:7c:4a:2c:c6:e5:7d:a2:c1:dc:b8:2c:2e:
2f:3c:7f:62:e3:dd:5a:b3:06:36:2d:e3:91:cd:4f:d7:9e:fa:
2b:e6:c9:a6:16:15:f2:51:97:24:98:42:4d:af:01:b2:26:f4:
5e:10:6e:20:27:6b:08:57:8c:e6:16:de:86:80:81:8f:3a:30:
ba:1d:54:58:0f:ea:fa:11:76:0f:ff:fb:dd:6e:ab:f6:de:e7:
eb:81:d2:4e:9f:d7:df:38:82:e8:52:e5:42:66:bd:a3:5e:2b:
8e:e8:7f:b9:9d:48:17:76:25:2d:c6:a7:41:39:24:92:d2:61:
e6:4c:96:f4:47:90:39:89:09:d6:e0:43:09:87:76:49:a8:34:
2b:07:c7:30:a4:c2:1f:f4:3b:aa:dd:ae:9a:50:a0:09:8a:d4:
aa:18:36:a4:80:f7:b4:f9:72:99:07:ca:e8:95:37:01:1e:99:
1a:d3:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:33:45 2025 by rpki-client