Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: 5H5E1W6dWMGJMCGfVpv6irMeXU0ioHXF9ST/C+0Kq2Y=
Subject key identifier: 53:78:0B:C0:7F:05:E1:47:6B:1A:CF:63:E6:F3:00:EC:6A:95:BF:11
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 0196BE254F842B5E7C6E3CD27FAAF3147A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 1555
Signing time: Sun 11 May 2025 07:00:38 +0000
Manifest this update: Sun 11 May 2025 07:00:38 +0000
Manifest next update: Mon 12 May 2025 07:00:38 +0000
Files and hashes: 1: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
2: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
3: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
4: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
5: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
6: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
7: sUKcclZahYIz3onbKqmP3P88pdI.roa (hash: CBZMv3jQPhyiFf/dy9HbfwPs9kQApWp7DL2KyK40I5c=)
8: v3O2rk8WaR7VhMc1DaSHWT3Xzz8.roa (hash: QkMQyvC3sEpgXeZ6lU5JRmWJPmKhWgedStjiN3opkDY=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: HKQQm3AsFOoSj7EGL+AsoQrI4gYA3mGaOsT/rvIKhGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:4f:84:2b:5e:7c:6e:3c:d2:7f:aa:f3:14:7a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: May 11 07:00:38 2025 GMT
Not After : May 12 07:00:38 2025 GMT
Subject: CN=53780bc07f05e1476b1acf63e6f300ec6a95bf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:d2:6d:f9:e9:f4:9f:31:30:1b:b1:c2:78:
ef:08:84:70:44:d2:1f:2f:11:c3:ec:f7:71:cc:53:
85:0e:8d:29:10:ed:8b:4d:d3:56:ff:64:a3:10:b7:
ee:82:6e:38:35:c3:5c:d1:9a:66:f9:07:90:6c:67:
03:1e:28:37:02:1f:ca:98:b0:87:e1:44:ae:c2:4f:
93:4a:9e:cf:06:c8:f6:0b:d4:39:95:26:c5:86:1a:
e5:eb:84:a4:f7:61:3e:fa:14:68:50:c6:29:bd:c7:
e7:58:35:f8:74:b3:20:de:06:3e:02:d1:17:65:49:
4d:ab:99:e2:c5:85:9d:0b:18:4e:b5:c7:38:03:22:
29:bc:92:8d:90:64:b8:be:85:52:09:f0:95:35:b1:
eb:ae:64:58:ac:3f:f5:44:fc:ed:f7:f5:3b:28:ff:
23:01:17:0d:24:4e:37:da:7f:6a:95:03:c8:4f:69:
bc:ad:54:de:57:d3:86:e9:ee:57:74:2a:69:ac:99:
15:67:2d:d5:f9:5a:80:79:dd:a3:72:94:e2:09:60:
41:58:d3:da:39:14:9b:b5:87:db:82:5f:a6:6c:0a:
2b:f5:aa:45:45:13:07:40:78:29:02:41:02:0e:f0:
df:48:86:e4:04:8c:2e:17:86:fc:bb:96:b7:34:6b:
c3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:0B:C0:7F:05:E1:47:6B:1A:CF:63:E6:F3:00:EC:6A:95:BF:11
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a8:d1:de:fc:a9:a7:b0:32:0d:4c:07:64:46:56:48:38:8a:
00:f5:96:1f:4a:98:7c:72:1a:1e:f0:1b:39:90:db:6d:57:46:
30:35:da:02:d4:8a:09:ab:2a:65:d3:64:d2:72:a1:d0:ac:1a:
51:58:e2:fc:b2:6e:cb:1a:5c:af:23:8c:8d:66:fb:98:84:71:
47:29:ce:e6:11:19:21:c1:83:ae:de:b6:ab:57:b6:00:ac:81:
be:99:3b:5c:a0:b3:61:42:b5:99:0e:5f:27:5e:e4:81:b7:ce:
a1:1e:ec:e3:8e:2d:27:1c:5d:3e:ec:89:74:82:af:38:4a:22:
2b:11:30:47:a6:5e:29:59:d2:cd:e1:3b:0b:21:05:3d:a4:c9:
4e:13:88:36:70:3d:f7:1d:37:78:f5:e9:e7:98:dc:df:dc:94:
8c:99:08:b8:6e:75:eb:e0:a3:f4:1f:91:7e:ef:a5:cf:6d:05:
13:14:00:10:61:03:0d:d6:d8:b0:40:5b:9a:a6:11:20:78:86:
68:4f:f7:68:45:59:0b:9c:20:3e:70:4d:fd:34:08:96:d3:70:
60:6c:16:81:da:34:93:98:2f:be:72:7e:a3:cc:bc:3a:49:47:
3e:32:27:df:d3:f2:82:9d:40:6e:94:b7:c0:62:cc:77:7d:5d:
47:ab:bf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:44:44 2025 by rpki-client