Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json)
Hash identifier: ATjLbKOHcD86Bok0gwbw10IclqWik4ZfW3887kPAGRM=
Subject key identifier: 99:23:5D:07:C3:44:39:7F:F3:05:C1:97:20:53:27:B6:E3:65:64:8A
Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Certificate serial: 0196BCA4F5B234B74D8613C87C9C577B5022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
Manifest number: 0239
Signing time: Sun 11 May 2025 00:00:49 +0000
Manifest this update: Sun 11 May 2025 00:00:49 +0000
Manifest next update: Mon 12 May 2025 00:00:49 +0000
Files and hashes: 1: L4zdfpQTMapiD2xjjc9b_8rVphY.roa (hash: X4ulaYGn7ALPkkvP3AdThxBx//teLK+YYJfbh5wE5to=)
2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: /c58xFR9GkxndLHrYDvMus8RAyKp17Xkzcz8wbClzV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f5:b2:34:b7:4d:86:13:c8:7c:9c:57:7b:50:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Validity
Not Before: May 11 00:00:49 2025 GMT
Not After : May 12 00:00:49 2025 GMT
Subject: CN=99235d07c344397ff305c197205327b6e365648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:eb:a5:25:18:03:02:d0:71:31:23:23:5e:
2d:f7:48:e5:8c:8d:47:9f:60:9d:7f:8a:95:ef:06:
e6:7f:16:08:a3:8f:a1:f5:65:9d:67:e6:bc:55:00:
11:22:e3:fd:d9:51:69:7a:f0:45:12:79:2a:58:ad:
1b:b5:db:80:6f:d8:5c:af:c0:82:77:80:a4:15:5a:
60:b6:fe:0f:5a:f4:a1:1d:2d:ff:07:57:7e:df:e9:
da:e0:ea:71:ea:85:a8:23:46:78:9a:2a:d6:0f:02:
a8:48:ec:83:1d:10:bc:8c:07:ce:b8:a5:56:08:b1:
2b:06:d1:37:be:9c:de:77:dc:f9:8a:bf:a3:8c:3d:
0c:a8:3e:54:34:22:80:b7:22:1f:2b:32:79:4f:ae:
28:9e:16:ac:75:80:e8:d9:a2:f9:38:04:7e:64:d8:
f5:7d:0d:18:08:81:20:c3:45:7e:81:e0:b9:93:eb:
b2:5a:2b:a6:30:74:73:62:cb:65:21:ee:e3:ea:84:
fc:40:b0:c2:92:44:e3:f0:f8:63:dc:8d:ee:23:88:
dd:da:ab:56:06:74:09:c7:32:c9:ff:7d:ba:d3:6a:
0d:82:c9:f9:bd:a1:c9:7f:f6:33:56:ef:16:82:48:
49:40:5f:c8:12:3e:f4:2c:6a:e7:be:ac:a6:58:d0:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:23:5D:07:C3:44:39:7F:F3:05:C1:97:20:53:27:B6:E3:65:64:8A
X509v3 Authority Key Identifier:
keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f2:1a:f7:c2:79:7c:06:22:1e:58:d8:ab:46:32:fc:ea:c0:
91:55:ba:9a:1a:ca:37:da:bb:c6:e9:17:38:61:01:c2:18:a3:
1a:ff:40:26:00:07:c5:e3:c1:ac:e8:02:a6:36:1c:e6:7c:74:
87:22:29:8c:35:84:16:2c:14:eb:9d:9a:0e:d1:9c:d1:b9:10:
da:e8:d7:ac:f1:cf:80:18:b7:b2:73:4a:1b:a2:22:68:4f:58:
22:bd:35:86:69:e3:91:c1:46:52:de:0e:5f:0b:01:81:74:62:
71:ef:81:4c:8b:7e:68:c0:0e:db:31:9a:69:1a:65:2d:e8:c7:
1f:39:a6:af:74:93:3c:f0:ca:41:6e:45:69:ab:dc:64:63:f8:
bd:5d:f2:c4:71:22:18:d2:2e:85:85:4a:f8:19:d2:4d:9f:52:
08:b0:84:25:39:37:b9:a9:b8:a9:ed:18:68:a5:45:d3:ed:30:
f8:08:01:ff:db:f4:03:cb:dd:0c:e8:46:f5:aa:5f:6b:ac:68:
f4:af:13:81:25:1a:15:e7:4e:ce:60:b7:e3:d2:46:b8:8b:2e:
bd:e5:38:e1:22:c9:e2:6b:c4:4d:2d:73:c0:6e:77:e2:47:32:
ac:be:3a:5d:ce:c3:ee:00:37:94:e8:07:f5:92:a6:d2:f8:75:
4e:24:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:38:35 2025 by rpki-client