Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: 5v4c7Kk6MEHMnh8By3PYqBw5ju1bGJr6V/RNBKdY/Zo=
Subject key identifier: E0:9B:8A:73:1E:72:0A:CE:57:50:96:80:E3:64:F4:61:A1:B7:18:55
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 0196AA9E560E29107C8FB416E04C01715EDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 0185
Signing time: Wed 07 May 2025 12:00:25 +0000
Manifest this update: Wed 07 May 2025 12:00:25 +0000
Manifest next update: Thu 08 May 2025 12:00:25 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: Csxy5kXCJHEbfF93l8y8Vht/aoR5X+ctvO3CL8AcUZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:56:0e:29:10:7c:8f:b4:16:e0:4c:01:71:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: May 7 12:00:25 2025 GMT
Not After : May 8 12:00:25 2025 GMT
Subject: CN=e09b8a731e720ace57509680e364f461a1b71855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d7:06:a3:2a:37:72:ce:86:26:1c:b1:0c:f7:
4e:5b:13:7c:37:56:b8:ec:2c:ef:56:d8:10:c7:67:
aa:19:32:e3:d9:ee:64:5c:be:63:66:f3:a5:3f:8f:
cc:fe:e4:99:d4:d2:1b:dc:33:19:b5:f7:af:e1:45:
fb:1b:40:b6:ea:f2:09:32:90:56:5b:2d:ae:76:16:
3e:f2:d6:29:73:b5:78:4d:67:a6:53:a7:ce:10:da:
13:e2:35:2f:7d:5b:8a:04:62:8b:5e:cd:04:b0:c9:
05:ce:a6:fa:93:c2:50:c5:70:87:f4:42:41:29:1c:
e5:c8:9e:46:10:15:1a:ac:f2:c2:de:c0:55:79:57:
02:47:32:5b:eb:07:08:b0:81:8e:65:fd:24:eb:26:
4b:99:9b:f6:8a:28:2c:e0:aa:d2:9e:72:2c:29:15:
b0:1f:14:2f:06:2d:be:87:42:0f:cb:ca:90:56:73:
27:2c:eb:38:95:30:ac:b6:ab:00:52:61:ce:29:1a:
c8:97:76:35:92:e7:0f:b9:72:e2:a3:1a:45:a5:b5:
92:f9:be:35:f6:07:b9:e2:cd:15:3d:d6:f4:2a:b4:
c6:fe:dc:9d:f9:ae:89:1f:77:8a:91:3e:a6:89:80:
73:1d:b9:bc:4e:5e:10:09:31:08:74:89:f8:c2:a5:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:8A:73:1E:72:0A:CE:57:50:96:80:E3:64:F4:61:A1:B7:18:55
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8d:8b:81:7d:7b:fc:f4:08:1c:90:4c:79:25:90:1c:24:e2:
4e:90:a1:5a:ca:c3:73:9d:65:ab:c4:c5:a9:0a:9d:93:09:dd:
86:c5:a3:c2:34:1b:25:0f:aa:21:2a:9b:ab:5f:04:01:b7:7f:
14:72:09:99:ae:ca:22:ab:0e:ab:25:67:ac:32:d4:a7:8e:f4:
18:e6:4c:b1:c4:d2:67:54:06:d5:07:f4:6b:05:50:4a:98:90:
a6:83:8c:12:44:29:99:13:2a:ab:d4:2d:aa:01:40:bb:97:cb:
3f:2e:a0:87:61:25:2d:12:dc:f5:38:8b:3e:3e:73:55:ad:cd:
2e:d9:80:92:23:a8:c2:6c:d2:8f:2c:fa:0b:d9:6e:82:7d:86:
a1:47:99:51:98:d6:c6:45:ae:c8:37:f4:b0:4d:46:5f:a0:49:
d2:bd:41:37:a6:ac:75:14:2c:9e:49:14:e4:2c:38:1d:a0:c6:
d6:c6:8c:02:53:53:fe:14:f4:d5:87:b8:ee:91:55:65:23:d5:
57:c5:4b:e0:d4:9f:84:b9:a4:ae:4a:82:3a:e8:40:bc:e5:b8:
09:51:1b:01:00:cd:89:52:04:a9:4f:a7:4c:a2:36:69:96:29:
7f:06:dd:1e:d2:02:99:d2:df:64:7c:fe:1c:75:3a:d6:7e:b7:
4d:ce:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:12:17 2025 by rpki-client