Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File: wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier: kkNNTZ4YB85cJdetmr3asfnUqBr9SI6iewX5nkSNgjo=
Subject key identifier: 9D:83:93:0F:4E:DD:08:FD:50:8D:80:B1:84:E6:B1:BD:88:9B:94:C7
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer: /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial: 0196A01B05FF2452456BDD5237EB2AF4AF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 11:00:47 +0000
Manifest this update: Mon 05 May 2025 11:00:47 +0000
Manifest next update: Tue 06 May 2025 11:00:47 +0000
Files and hashes: 1: NcyIXNvoa22SJL0FsYyeOTgc_BE.roa (hash: I7SWTbgf+E38lSjzpIc20ooNKJL8yjb7efp//cF2mds=)
2: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: qO8gME0J3eDVAvOsSP57CtfJcCwf78x2jZNIMrzTnQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1b:05:ff:24:52:45:6b:dd:52:37:eb:2a:f4:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Validity
Not Before: May 5 11:00:47 2025 GMT
Not After : May 6 11:00:47 2025 GMT
Subject: CN=9d83930f4edd08fd508d80b184e6b1bd889b94c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b6:9b:d7:fc:72:8d:1f:92:79:5c:f3:a4:5d:
ab:b1:de:26:dd:f4:28:d7:eb:f6:d6:bc:11:ba:fb:
07:18:27:67:c1:34:d9:11:61:9c:77:2a:cb:26:12:
52:44:76:9d:d7:8c:e1:9f:8a:e5:f4:71:de:b5:27:
3e:87:a2:74:b7:88:76:3f:cb:bd:6d:9a:71:4e:e4:
c9:c0:fa:f3:67:bd:b9:1f:3b:2f:fa:11:68:af:51:
99:8b:7d:d8:55:21:a2:ae:7a:11:2a:03:e8:c0:6c:
5d:38:54:e6:58:b6:9c:86:43:38:ef:e9:4a:81:7f:
8d:bd:07:f4:27:2d:d4:59:06:99:d4:be:e1:dd:e2:
27:e1:95:e3:84:72:0a:7e:b2:a0:f3:b4:24:2c:32:
f5:cd:2f:eb:ec:e3:45:06:61:cb:88:90:1d:73:7b:
68:46:a2:f8:f5:b6:23:e6:00:a4:e2:67:7b:d5:1e:
8b:7a:fc:5f:53:59:dd:4b:39:08:08:bd:c5:f4:49:
2a:4e:08:ee:f6:81:76:c7:98:7d:80:58:fa:0a:39:
0d:09:08:9e:6f:b9:0d:1b:b4:78:e7:c4:08:46:b5:
e5:9d:3a:86:c0:02:25:85:35:94:91:14:7e:38:16:
ea:46:d2:1c:3a:94:56:89:c8:b2:5e:9f:62:12:e3:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:83:93:0F:4E:DD:08:FD:50:8D:80:B1:84:E6:B1:BD:88:9B:94:C7
X509v3 Authority Key Identifier:
keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:18:b0:ce:ee:be:69:95:0f:97:ce:d7:3a:2b:c0:33:ce:35:
1f:ad:18:6a:67:2d:2e:92:9b:7f:8b:10:29:63:9b:19:a3:3d:
74:46:5e:bc:83:ba:af:d4:a6:0a:b5:22:c7:ff:6d:bb:64:ba:
ca:e7:f8:30:1f:65:62:b0:21:5b:f7:b0:e8:0b:96:96:e6:8b:
a0:b9:71:ce:b5:a7:d6:7d:36:9e:f9:8d:c1:a7:ab:f0:cb:2a:
47:05:85:17:58:ec:82:2f:43:54:b8:cb:29:cb:8c:11:24:05:
a3:96:d5:f6:0d:13:07:25:74:72:5e:4e:bc:74:92:39:5c:d4:
64:0f:d7:01:f2:f6:d8:ab:8c:17:06:78:28:17:29:58:d7:25:
c6:71:cd:3c:a2:09:10:6d:e6:94:9b:be:e4:a3:fc:82:4b:19:
63:d9:5c:8d:e4:8e:4a:f7:f4:bc:60:08:3e:32:2b:6f:f3:a1:
9f:ea:47:0d:94:eb:30:b1:f9:ce:bf:75:f7:e7:4b:c1:c9:58:
00:9b:4d:10:75:0c:d1:40:50:a0:20:6e:af:c5:3f:06:0d:85:
c5:3f:1e:af:1f:c5:df:4e:04:d7:f2:46:da:cd:44:13:4e:11:
6e:76:32:74:f1:f8:dd:ff:87:d5:12:f7:0a:a6:1e:1e:41:ec:
af:fc:b0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:28:13 2025 by rpki-client