Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft (raw, json)
Hash identifier: uYx/VSPCZOndFoRvL5PVqP7+9HHUz0Gdx0S5sL7phuY=
Subject key identifier: 67:67:1A:C4:5E:5B:2F:35:69:C8:48:D3:D0:11:06:FC:D4:1E:95:03
Authority key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Certificate issuer: /CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Certificate serial: 0196C8E00A5FE127CA9E5330BC288AF40EAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
Manifest number: 2A
Signing time: Tue 13 May 2025 09:00:47 +0000
Manifest this update: Tue 13 May 2025 09:00:47 +0000
Manifest next update: Wed 14 May 2025 09:00:47 +0000
Files and hashes: 1: _M9B2KOz2UeSzhUegvYxGA2BwYo.roa (hash: D0dhCF5CGV5Me0OwA23AKaMmK0KyGQzZrCqAnO1Fksg=)
2: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl (hash: ZmznOrPRXkFFWdxpo9r3KWZwKbUr0AecmVSq0CmZ9TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:0a:5f:e1:27:ca:9e:53:30:bc:28:8a:f4:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Validity
Not Before: May 13 09:00:47 2025 GMT
Not After : May 14 09:00:47 2025 GMT
Subject: CN=67671ac45e5b2f3569c848d3d01106fcd41e9503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:40:e7:45:01:94:b0:41:c9:46:4b:aa:4f:
43:32:31:f8:07:32:17:22:f9:ec:e7:c5:3f:a9:0b:
3b:47:a5:72:69:f0:e6:5a:42:e8:b4:6b:57:18:93:
d2:b7:4c:be:28:6c:ca:7f:c5:98:25:48:c6:59:48:
5f:6f:cc:b7:19:1b:01:30:47:27:b6:31:f2:50:2c:
19:5d:bf:c4:8b:1c:87:0a:26:0a:24:d3:d0:db:62:
6a:24:f9:ff:d9:c3:a1:b0:d5:ec:4d:95:ac:19:a3:
87:46:54:8d:75:f3:37:9c:8b:b0:3e:db:e4:fb:5e:
39:f5:27:6f:07:1f:99:19:d8:36:da:1b:4e:4a:8f:
39:6c:88:b3:4a:28:d5:1b:b0:bb:84:3e:d7:1f:3b:
86:5f:f7:72:d3:86:e7:70:a8:68:09:4a:e5:ce:f6:
42:8e:1e:ad:89:58:85:33:a3:ec:d8:e3:93:ff:5f:
b3:81:10:ea:31:76:4b:df:d4:55:81:12:fe:a1:01:
76:5c:17:d4:b5:c3:b3:63:e3:d5:da:f5:06:be:d5:
93:9f:d7:71:34:32:89:27:d1:21:3e:9f:2f:f2:97:
d4:8b:57:a7:78:3e:36:e8:ed:5e:cf:48:4f:1b:cc:
bf:fc:95:dd:ef:fc:18:c4:85:1f:f6:a2:6a:bd:48:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:67:1A:C4:5E:5B:2F:35:69:C8:48:D3:D0:11:06:FC:D4:1E:95:03
X509v3 Authority Key Identifier:
keyid:C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6f:61:c3:45:5c:e7:57:b3:3e:2c:25:c8:22:43:11:64:6f:
c7:95:ff:df:77:ad:c1:12:ba:b8:b4:7e:f0:13:c2:a6:33:ff:
ce:24:f8:24:c4:7c:4e:9e:b4:81:3f:68:a8:32:54:fd:00:f0:
a2:b8:f2:1f:7c:ca:e0:0c:e7:7a:e3:e1:bd:58:ae:f0:df:a8:
04:bc:7c:57:a2:d3:21:98:c6:c8:43:7e:6a:65:11:06:1a:00:
88:09:f7:3d:eb:a9:db:c8:7e:92:56:fb:c4:72:9e:ae:1e:e1:
e2:8e:fd:45:9e:c9:59:01:b4:c5:05:3a:3b:e7:9c:bb:09:08:
4d:fc:d3:9d:da:50:e1:03:d8:3c:9e:05:ad:b5:b0:a1:1e:ab:
c8:8a:eb:50:85:73:7c:64:7b:d2:9a:75:ca:5d:54:47:af:4d:
37:95:d9:81:a4:bd:44:58:5a:33:82:f1:8e:f9:87:a1:d2:09:
2d:f9:c1:0b:9a:33:ef:66:c3:e6:b1:96:8e:45:8f:f8:ea:32:
e7:08:dc:d2:b2:a8:2d:f7:f7:ef:f2:ea:f1:49:18:9b:1a:bd:
f6:7d:a1:eb:2c:48:b2:0b:07:52:5d:eb:42:50:55:56:c0:20:
63:2f:70:fd:c9:57:b6:3e:3b:56:6e:01:7a:e6:d1:ac:0d:19:
51:9c:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:40:26 2025 by rpki-client