Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: JxRpANgq8khrq48P+3drO4rgPtR4b0ep6fWIMDA3z/g=
Subject key identifier: D4:42:B1:FA:8E:74:C5:AA:0A:02:CF:13:2F:2C:84:89:10:8F:17:60
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 0196B6D946DCE4E3860B2FFB92E4F1EA2228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0E2D
Signing time: Fri 09 May 2025 21:00:14 +0000
Manifest this update: Fri 09 May 2025 21:00:14 +0000
Manifest next update: Sat 10 May 2025 21:00:14 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: mQgYSuE+HohwNk3poWQIxdBWKb3/VrHCi8ArSvQAuCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:46:dc:e4:e3:86:0b:2f:fb:92:e4:f1:ea:22:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: May 9 21:00:14 2025 GMT
Not After : May 10 21:00:14 2025 GMT
Subject: CN=d442b1fa8e74c5aa0a02cf132f2c8489108f1760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:00:d0:85:0c:d0:30:82:44:21:af:10:aa:
4a:f0:de:4f:2e:31:0e:83:60:b2:23:3d:b8:54:80:
ab:99:8f:1d:34:5c:30:af:e2:12:88:18:0a:0c:86:
c6:47:62:dc:a3:4c:d4:29:cc:36:66:59:2b:fd:f2:
0f:2f:54:57:eb:ed:c7:aa:06:56:3a:ed:fa:b5:26:
3f:b2:54:50:07:06:a9:7e:ae:d5:4f:3a:f4:aa:d6:
aa:04:e3:bb:eb:54:8b:ad:e1:06:fe:40:5f:48:ef:
5e:dd:b3:67:59:08:f1:bb:ed:e7:0c:ec:f5:2e:c6:
d5:fb:d6:5f:42:5f:a5:8b:90:a6:c6:ca:92:57:06:
51:42:60:2b:bc:bb:e2:a5:ee:dd:e4:fc:f6:4b:4f:
8b:a3:f8:85:9f:5a:1c:92:da:c1:a3:c7:e9:13:a1:
61:b5:51:ad:1a:7d:21:15:4b:7c:e9:6a:bf:be:d7:
8b:79:94:48:79:f9:b3:2b:27:65:e0:25:c2:15:4b:
e8:d7:7b:60:07:7c:86:64:16:5d:9c:2d:6b:9b:85:
01:40:2a:d7:2c:12:6d:ea:92:87:92:0a:bb:82:13:
a8:0d:be:e8:d2:94:c3:fc:ba:bb:ee:5b:13:4e:27:
85:86:7b:25:1f:61:9e:bb:e3:57:4c:26:5e:f6:45:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:B1:FA:8E:74:C5:AA:0A:02:CF:13:2F:2C:84:89:10:8F:17:60
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d4:58:c0:9e:68:9d:31:15:1c:dd:51:9c:fd:96:79:10:24:
a0:0c:d7:93:65:98:91:ce:77:31:01:bb:6a:d2:dc:95:5d:22:
eb:46:1b:1d:fe:1c:6d:31:ed:d1:41:86:1e:b9:fc:97:72:53:
97:27:55:a1:10:80:0d:fa:28:09:68:75:32:05:05:80:bc:5f:
1f:73:d2:7c:3c:5a:6b:70:ee:6f:a8:43:a2:e9:58:fc:0f:00:
96:c8:72:71:d1:a3:45:88:f5:50:be:85:b3:1c:9f:1e:58:34:
e2:0a:48:e0:03:47:86:ae:f3:d7:b7:9d:f4:83:8c:86:ac:8f:
11:2a:a8:37:71:d6:97:9b:aa:52:b1:33:a2:e4:00:cb:a1:6a:
91:01:54:0e:15:fa:80:19:49:82:ba:94:17:e4:ee:e8:37:79:
0b:53:f3:94:f2:0f:fd:1b:c2:ad:c1:d5:a3:9e:d1:99:59:a3:
ee:5c:76:ba:35:b8:29:4d:28:fc:da:85:9d:6b:a9:72:1e:cc:
b4:2e:6c:a1:91:2a:cd:9f:6d:4b:ea:17:2e:a0:29:f8:8e:20:
98:84:10:0e:68:9c:8d:3e:45:0f:37:08:d5:be:57:2c:5e:c8:
8f:5a:61:44:88:66:a9:09:9a:e7:ce:7d:6b:72:ee:bc:65:68:
76:6f:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:03:08 2025 by rpki-client