Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier: kqBOhofvkZxDz07hgJCHmnguW0eAJPkA/SFs6g066Ug=
Subject key identifier: 01:E5:4D:40:A9:3B:DB:18:F0:6F:6D:5C:32:A6:1D:7D:C8:25:64:29
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial: 0196B0D7CE81633F967C194931C125744424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 17:00:55 +0000
Manifest this update: Thu 08 May 2025 17:00:55 +0000
Manifest next update: Fri 09 May 2025 17:00:55 +0000
Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: 8nT2iV3SBqwfEqliXmshWwpoKdlPygDSZJkz4Th7dIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:ce:81:63:3f:96:7c:19:49:31:c1:25:74:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Validity
Not Before: May 8 17:00:55 2025 GMT
Not After : May 9 17:00:55 2025 GMT
Subject: CN=01e54d40a93bdb18f06f6d5c32a61d7dc8256429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a1:8b:3d:4e:f0:f0:1e:ca:e4:52:cc:2a:c4:
0f:cf:a6:04:7c:c4:3f:72:20:65:29:45:7a:cf:0a:
dd:e8:32:a6:0b:28:7e:fc:42:84:74:e9:76:f3:f6:
5c:ff:b0:10:af:f2:74:58:84:e0:26:96:89:b5:88:
6f:09:3a:9a:98:09:55:47:7c:32:29:48:ad:6a:62:
87:67:45:af:07:90:22:9d:0c:aa:80:de:a5:2f:b4:
da:dc:c2:02:c4:f9:76:6a:bd:1b:69:2f:96:0e:82:
db:76:13:30:2b:c7:e6:7a:ec:65:f5:29:bb:95:47:
89:de:80:46:b5:c4:85:18:7e:f8:67:38:90:80:1e:
b4:7f:55:c5:f8:88:b5:fe:57:19:79:06:c7:d0:0d:
66:8d:e0:89:d3:89:60:aa:0f:19:74:d7:51:2f:46:
d5:d9:00:ab:eb:04:0d:66:b7:fb:0e:35:8a:0c:0a:
1f:7c:7a:25:6f:e7:7e:47:8b:5b:52:75:73:92:e0:
ef:92:2c:33:03:1f:30:12:13:65:0a:b0:8d:f6:d6:
9e:32:7b:e7:ac:bb:43:8d:22:67:ca:b9:ec:4f:78:
4b:43:f4:ba:6c:18:0c:17:50:45:3f:ba:f4:0d:c8:
51:ed:8a:21:8d:44:85:de:d8:a0:3a:26:7b:69:59:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E5:4D:40:A9:3B:DB:18:F0:6F:6D:5C:32:A6:1D:7D:C8:25:64:29
X509v3 Authority Key Identifier:
keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:39:ad:b7:b3:38:ee:63:ba:4f:2d:13:33:ce:41:e1:95:44:
75:54:08:a4:18:18:12:9e:19:45:e2:98:e8:f7:21:3c:03:b1:
86:86:ff:30:02:e9:ce:78:b6:85:9d:70:92:7f:e2:5e:23:39:
8e:11:17:52:09:a1:7e:e6:01:14:2a:22:76:28:8a:35:cd:dd:
c6:3f:f6:ec:86:ff:11:15:e1:75:cc:99:2b:83:a1:dd:54:6d:
68:03:fd:3f:07:8a:03:e6:d1:80:62:68:5e:19:c1:9a:2f:ff:
5b:e0:24:b0:37:ed:69:67:ac:cc:48:17:f2:1a:e2:55:65:96:
83:34:40:7c:e7:e8:4b:56:17:d3:9e:97:64:45:9d:33:04:e4:
d8:bf:b5:8b:a9:97:94:ec:97:36:4c:95:9d:68:9b:7c:40:0e:
d3:46:95:36:d2:b7:cf:b1:91:db:50:9f:61:4b:55:d0:fd:ae:
73:87:ec:c3:cf:7e:18:28:01:c0:0d:fd:2e:5f:fb:7f:35:2e:
c2:81:b0:0e:cb:95:2b:a4:12:3f:af:4a:71:ea:ba:3c:8f:3f:
a5:20:5a:d3:17:05:3f:c5:39:f4:85:ef:ec:b1:3e:58:31:0b:
88:9d:27:e9:da:12:ed:23:32:f3:4f:e5:3b:41:1c:23:1d:e3:
07:5b:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:41:03 2025 by rpki-client