Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
File: wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft (raw, json)
Hash identifier: RmJDZFQ4aGjJTwHEBCtVrijhF48LzagMa1QIocv/0c0=
Subject key identifier: 5C:F4:31:AC:0A:22:30:E6:10:F4:97:DB:3A:E7:65:91:E6:BF:DF:39
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 0196C5031D8E757FE307B66064ADDC7920B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
Manifest number: 09CF
Signing time: Mon 12 May 2025 15:00:37 +0000
Manifest this update: Mon 12 May 2025 15:00:37 +0000
Manifest next update: Tue 13 May 2025 15:00:37 +0000
Files and hashes: 1: 5CKcJ3WWdLnxNxA8zS9MSqemGeU.roa (hash: F1W/LYRU/swbDsn7VsjuOlThJoPhjHiHTuqYQgQV4vQ=)
2: FZ6_BK0_bbVrJHhN6MfGrD_zBBU.roa (hash: pGJzWgBtcqu+YLCletr5FYBbo/hFDdnErtqiP7qljbk=)
3: ICJFcNTwvBoTxR73h6RFC09rjcE.roa (hash: xTLqPPxBhdwsAxy9x/9cuJE08DZBHQ351Kx0d+iQE1E=)
4: WalhO7K1hj39eQFX6Fsg65lsYZc.roa (hash: TPuLRQcIjhduyALRmIncbUOw8bhZHm8cVLFCDxTFRgw=)
5: XrIe3RxS0PfS1KQwk38a9UzdLbU.roa (hash: TAdXiNpnMI8M4W6FRb8OCRV5yipTVzRnXpEPH/f9GFs=)
6: pIvBgTa21ZIrbNAe93h6ywfLfqU.roa (hash: 4TvmPBfwBLS029TBaeYbv9kyWoozw1GEP3VDLEg1dFk=)
7: te98bJGGUvJI2dvVEFniebRE2-Q.roa (hash: YFZNKLPi4G/NTA6BGaRrsOjmLUpnVxIljNwYkPRZo1o=)
8: vMfdW02jbLqHp-27brKBsBhbgHY.roa (hash: oHK3CDonAtcVu8dAAlZMcFQZnOMNxTDFalDW/2pvfts=)
9: wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl (hash: 2xhgFH4WRckPWdpYd/FJXQ15RCUk5podtvrYtEAkY8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:1d:8e:75:7f:e3:07:b6:60:64:ad:dc:79:20:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: May 12 15:00:37 2025 GMT
Not After : May 13 15:00:37 2025 GMT
Subject: CN=5cf431ac0a2230e610f497db3ae76591e6bfdf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2c:90:02:0b:83:21:ee:6a:0c:a7:cb:1e:ee:
e4:d8:e6:79:b4:fa:46:89:02:2f:e0:32:0d:8e:8c:
3b:3a:56:46:ba:1c:cc:0a:01:45:ca:9b:15:e6:d3:
89:cd:c4:6b:b9:9b:97:c2:16:ee:c5:ad:85:40:8b:
8c:c0:c0:ed:47:20:66:96:bf:bb:8a:a8:7f:91:da:
0d:b1:6a:b8:95:d2:4b:58:0b:7c:75:78:ac:a1:ef:
a5:98:80:44:83:2f:1c:e3:a2:76:60:b1:4a:b9:ba:
c1:e1:9d:d1:ab:b1:d5:82:e4:b4:47:6f:dd:53:a7:
61:b6:48:5a:d1:18:ca:36:ad:99:5d:89:44:d9:a9:
3a:d5:9c:c4:80:25:5b:3a:15:4e:d8:fa:47:6f:0b:
42:0a:d7:b3:cd:fc:b3:c3:8d:44:58:05:a8:27:f9:
4a:d3:a6:70:0e:96:4a:b8:ae:d1:3a:01:f6:f5:db:
84:7c:2f:4d:b0:b6:7e:79:ed:6a:82:83:ab:46:e1:
d6:1e:a0:eb:01:43:8c:56:a0:47:57:7e:b1:83:85:
1e:0b:ac:d3:e6:2f:99:3b:80:7f:06:e8:56:5b:01:
44:61:7c:d4:45:a8:a1:6c:63:73:1a:2c:3f:7c:39:
e7:c7:9a:a4:66:2a:8d:94:a3:aa:44:9e:a7:4d:28:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:31:AC:0A:22:30:E6:10:F4:97:DB:3A:E7:65:91:E6:BF:DF:39
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:19:4b:71:f9:88:01:b6:d9:c6:6e:6e:45:ab:a5:96:3c:9f:
11:18:d4:74:5b:2d:e8:3a:e7:60:f3:f8:43:7e:13:40:53:52:
15:e0:5c:3e:91:b5:25:98:84:36:bd:e1:a2:1b:ef:34:07:a6:
d4:ea:78:19:7d:48:cd:59:6a:ff:6b:e2:0c:81:03:4c:9a:ca:
31:de:3a:06:8e:90:0d:d1:5d:34:3f:50:2a:2f:87:c0:d6:a3:
c6:ae:b6:e4:6f:d8:17:37:55:7b:91:59:77:39:22:27:85:d5:
d7:c2:e2:85:eb:56:9d:56:73:61:6b:b8:49:33:27:3d:3f:76:
e9:90:6f:98:b1:0a:42:4d:84:81:6e:6a:3c:08:40:dd:c0:4f:
c7:32:b1:94:89:c3:9b:66:ef:cb:e4:ca:21:ae:93:70:d5:9e:
95:55:7d:b3:1c:e6:c5:41:77:04:2e:84:67:38:9c:70:c4:e4:
bd:af:98:cb:58:37:eb:26:d4:00:6c:2a:7a:e6:27:5c:c9:9f:
9c:6a:53:fe:fc:b4:67:0f:b4:4b:6c:49:ef:66:a9:68:ec:10:
f7:c7:4b:fa:53:32:00:91:e5:a5:31:cb:2b:56:d9:56:25:80:
50:03:9e:8b:e3:43:73:8d:38:31:83:d9:8c:6a:f9:60:4d:f8:
22:21:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:44:41 2025 by rpki-client