Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
File: wNKohFzfZXbejrARGAir1l_YvEQ.mft (raw, json)
Hash identifier: EzUniAwNSX6ylqej/WUF+kfSXtDP+UpP9UTfFQrCuyc=
Subject key identifier: 64:7E:12:29:4E:EF:DC:11:B5:E6:78:80:C8:AB:0E:DE:0D:E9:A1:38
Authority key identifier: C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
Certificate issuer: /CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Certificate serial: 0196CEE293257036DB245EC52A758B286DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
Manifest number: 153D
Signing time: Wed 14 May 2025 13:01:17 +0000
Manifest this update: Wed 14 May 2025 13:01:17 +0000
Manifest next update: Thu 15 May 2025 13:01:17 +0000
Files and hashes: 1: OmgVAw8ZHFFpHCyw7LOehrOM8KA.roa (hash: 6CbGQ8M2p8DqUv4lPi9kJg+A49OPSohIvq46VoGyAHM=)
2: iB80sjC3FaeKn3w8-_wDD7I9eLg.roa (hash: J8k5oGXUl2TYImVeWDD/bvu/zaBz6UEfFHiKZd9EJV0=)
3: wNKohFzfZXbejrARGAir1l_YvEQ.crl (hash: gbZwJl0FYZT8TvuCz1MJQpH3qqkygR43M9e+UveUD6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:e2:93:25:70:36:db:24:5e:c5:2a:75:8b:28:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d2a8845cdf6576de8eb0111808abd65fd8bc44
Validity
Not Before: May 14 13:01:17 2025 GMT
Not After : May 15 13:01:17 2025 GMT
Subject: CN=647e12294eefdc11b5e67880c8ab0ede0de9a138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7d:b7:b8:f3:18:d1:19:d2:4b:de:a4:fe:ee:
be:c2:91:5c:55:4c:32:01:dc:69:24:fb:07:91:c1:
bf:83:d1:77:eb:b7:33:24:7f:e0:8d:f0:6e:ae:14:
35:62:c6:64:08:76:65:9c:99:52:9c:d2:83:04:f1:
22:d6:40:dd:03:f4:81:f7:18:46:df:05:8b:3a:f3:
84:63:bc:f9:ee:96:88:9e:97:13:13:d0:44:20:c6:
de:71:ff:46:e6:53:bb:80:7f:d7:12:bb:7b:ca:e4:
95:7e:a4:67:09:6c:02:c6:49:42:72:30:9e:4e:51:
11:a6:a2:a9:01:35:41:98:6b:6d:1d:67:29:b0:0a:
79:eb:1c:f8:30:1b:94:c8:a9:68:0f:1e:af:77:ff:
5a:28:cb:61:d6:08:c7:cd:0b:f8:22:02:60:51:6e:
4f:1d:3b:83:08:ed:10:94:59:a8:d7:b0:6d:10:f4:
06:28:c1:84:39:fc:56:ff:6a:61:e9:ce:41:91:40:
1e:b2:c3:08:34:10:c6:78:49:df:0b:4d:7c:8f:50:
fe:b4:9f:c3:09:ec:f3:4f:bd:ee:92:de:8c:dc:bf:
e3:cf:42:31:1b:4a:44:cf:34:9e:5b:dd:ab:c6:0f:
10:62:de:58:59:6e:e1:c9:01:60:05:61:7a:14:49:
cc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7E:12:29:4E:EF:DC:11:B5:E6:78:80:C8:AB:0E:DE:0D:E9:A1:38
X509v3 Authority Key Identifier:
keyid:C0:D2:A8:84:5C:DF:65:76:DE:8E:B0:11:18:08:AB:D6:5F:D8:BC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNKohFzfZXbejrARGAir1l_YvEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/769743-4ba1-43ce-af23-4846062f9a73/1/wNKohFzfZXbejrARGAir1l_YvEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4f:e7:4c:18:3f:a8:45:4a:cc:64:d9:fd:ae:b5:9d:f6:09:
cf:c3:58:78:48:74:e9:d7:5c:aa:9d:ef:c9:19:28:0c:b8:70:
8c:d3:58:01:40:e2:1a:b4:b9:a5:ce:49:8e:59:2c:2b:c0:65:
dd:aa:fd:4d:e6:eb:f9:19:26:75:f3:be:f0:14:d8:78:d7:96:
3e:7e:d5:c0:be:9b:28:c8:de:5d:b4:e0:16:95:22:bc:87:ec:
68:4a:fc:cc:05:c3:1c:ae:7f:64:ff:3a:8e:b4:78:80:28:9b:
29:22:f5:e2:d7:4a:e6:1e:ad:af:13:7d:4d:c6:09:f3:cd:8c:
4a:df:c1:e9:f8:67:70:02:09:f3:a6:eb:c4:d8:e4:a3:32:2e:
c0:cc:6b:be:c0:ad:9b:3c:8e:2a:b6:9f:b9:c0:f0:49:c5:49:
39:14:ec:c9:f3:08:19:2b:8a:2b:1e:dc:db:24:52:0a:9f:65:
2e:49:aa:94:6e:e8:a3:e9:e2:ad:1b:9d:4b:e7:d7:b2:e1:0c:
6a:84:42:b3:aa:5a:c1:22:c1:14:f2:12:1b:08:77:90:e4:69:
b8:8d:13:cf:67:45:43:82:d4:da:b5:1f:9f:ea:12:f3:87:c4:
f4:d2:1a:c4:df:b7:c4:89:34:0a:f0:68:26:e7:63:33:1e:1c:
4e:ff:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:02:07 2025 by rpki-client