Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
File: wvX9MCMFUknyE9FcugAMoCa7b6M.mft (raw, json)
Hash identifier: 2lGCWir2Va6LQBKYO23CFKecj3+Tehld50qow5w18kM=
Subject key identifier: 43:47:4D:D4:EA:D9:D0:78:F6:2D:88:A3:37:D8:EE:A1:A1:6C:D3:A2
Authority key identifier: C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
Certificate issuer: /CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Certificate serial: 0196C57124D2D15D5A9AAA6238BF16B8F974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 17:00:48 +0000
Manifest this update: Mon 12 May 2025 17:00:48 +0000
Manifest next update: Tue 13 May 2025 17:00:48 +0000
Files and hashes: 1: BMHVHu-JbszVmlaPK0QGdQjobqk.roa (hash: G29ynB8gmG1T9KHI25JYWbt3xJ8CodHiSO5tv95eYEk=)
2: wvX9MCMFUknyE9FcugAMoCa7b6M.crl (hash: Bfw+j/qXMMnEx3E8Tmx609vWX+M2AxZxUBaQ1KqrCDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:71:24:d2:d1:5d:5a:9a:aa:62:38:bf:16:b8:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f5fd3023055249f213d15cba000ca026bb6fa3
Validity
Not Before: May 12 17:00:48 2025 GMT
Not After : May 13 17:00:48 2025 GMT
Subject: CN=43474dd4ead9d078f62d88a337d8eea1a16cd3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:30:9f:e9:71:81:36:58:77:23:da:dc:7c:19:
f7:51:fc:7c:e3:2f:1c:2e:72:57:46:fb:c7:6c:0e:
ac:ca:a9:49:97:cd:2a:42:e6:28:a5:ca:6f:ca:07:
18:50:36:5d:b9:22:11:f1:96:8c:71:92:69:cc:13:
4d:21:13:92:f0:8e:a6:ba:dc:5e:82:0d:58:f1:3d:
19:39:55:f9:b3:0c:8c:e0:0c:33:ee:ab:d6:de:1e:
0d:11:79:a4:5b:ee:05:2b:78:8f:a4:5f:7c:b9:ef:
6d:db:3b:d4:0b:4c:fe:4d:00:5c:63:b1:dc:5d:08:
ef:85:19:49:24:d9:a1:f7:a5:9d:42:1c:fb:4b:cd:
e4:68:8e:46:df:b1:29:e4:59:36:7f:55:ca:66:54:
f8:8f:ee:43:f2:d2:7a:33:99:04:e7:0e:e4:97:29:
90:86:e4:d0:bd:88:1a:1a:8d:ff:e0:de:89:c2:ce:
c9:f7:ff:18:13:32:a3:75:37:ea:de:47:d2:f7:ea:
8a:49:4b:1d:19:9d:9b:92:54:e4:11:49:95:eb:ef:
04:07:13:20:15:4e:04:28:47:28:f7:d5:13:16:ff:
9d:fb:d4:84:90:cf:8e:df:00:dd:93:52:80:2a:fd:
9a:0f:f0:e7:e6:2c:01:82:c5:2d:1d:e5:bd:3a:81:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:4D:D4:EA:D9:D0:78:F6:2D:88:A3:37:D8:EE:A1:A1:6C:D3:A2
X509v3 Authority Key Identifier:
keyid:C2:F5:FD:30:23:05:52:49:F2:13:D1:5C:BA:00:0C:A0:26:BB:6F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvX9MCMFUknyE9FcugAMoCa7b6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/cc02e1-8b36-42a3-b756-be3485706a7f/1/wvX9MCMFUknyE9FcugAMoCa7b6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:04:14:26:8a:95:ee:fe:47:d3:ce:e4:b3:ca:55:2d:cb:85:
81:2b:67:61:e6:f7:7f:c3:a7:76:b8:d8:ce:10:cc:8d:f4:b1:
3d:3e:23:c9:2b:40:6f:38:fc:f9:6e:3f:70:76:c3:c4:2d:8b:
8c:d9:72:f1:e0:6c:2b:d4:1b:f8:86:9c:47:6f:b6:71:70:eb:
49:3b:da:da:9c:f6:0e:c6:5f:36:e2:48:c7:25:c0:1d:79:a2:
ad:3d:f0:ff:e6:da:67:81:bd:7c:df:ab:12:0f:92:14:6d:f5:
05:9e:64:64:85:28:15:1f:e2:87:09:96:7a:6b:c9:36:c1:a3:
67:c6:ae:4f:1b:74:53:30:28:d2:6a:da:15:49:a5:76:0d:2e:
e2:f0:59:19:cb:44:1f:aa:87:2b:7a:61:2e:2d:b8:98:eb:6f:
db:05:f0:f0:2d:7f:fb:cc:24:9e:75:aa:29:f4:4d:1d:ee:d7:
c4:4b:f9:b4:3b:2c:f0:fd:1b:d2:f0:49:8c:64:10:5b:73:4e:
90:db:0a:a8:50:8b:89:7b:f4:b9:1c:ee:1d:e8:ff:15:88:55:
77:b7:ab:c2:96:34:d6:5c:f2:f3:0f:3d:2a:21:f8:4d:60:0b:
ae:47:e4:b4:4f:42:86:c3:38:85:38:34:fc:86:c6:49:ec:22:
16:bb:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:06:47 2025 by rpki-client