Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
File: waTRQtQQqrCQURLErleQdsDm3IE.mft (raw, json)
Hash identifier: lSF6IDJJ83THO+M0dUbpbewu/Cc2hu5EoxWkTtmw4aY=
Subject key identifier: 1C:2D:6F:71:25:2F:01:85:B5:8D:76:F9:08:50:A6:CB:A6:D3:7D:D3
Authority key identifier: C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
Certificate issuer: /CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Certificate serial: 0196BECA6184E3F398572A8A2CAD5224C52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
Manifest number: 37
Signing time: Sun 11 May 2025 10:00:56 +0000
Manifest this update: Sun 11 May 2025 10:00:56 +0000
Manifest next update: Mon 12 May 2025 10:00:56 +0000
Files and hashes: 1: 1Fb4jd1urOHJo5_owKu58GeUbfQ.roa (hash: HWTH5r2vvToQGYptxfGymBxA0UDvVBAeiYA9Tehs7MM=)
2: bkgPAomj5Hty0jREj4Wi4CYSl34.roa (hash: xTOY7fOryKrBCrnTTY9ZhQG8l94maF649pWjsuI216E=)
3: waTRQtQQqrCQURLErleQdsDm3IE.crl (hash: NzqkAJzRvDQLosoT1qiTupwXOF+9R++hiJmRB7jeDPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:61:84:e3:f3:98:57:2a:8a:2c:ad:52:24:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1a4d142d410aab0905112c4ae579076c0e6dc81
Validity
Not Before: May 11 10:00:56 2025 GMT
Not After : May 12 10:00:56 2025 GMT
Subject: CN=1c2d6f71252f0185b58d76f90850a6cba6d37dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:c2:ae:06:a3:56:25:6e:66:38:69:4f:dc:
f8:7e:5c:32:05:74:82:d3:48:98:63:39:13:68:c6:
63:d8:05:2c:bf:cc:82:b1:90:1c:35:83:c2:95:ec:
20:5a:be:be:1b:c5:8e:b9:c5:a7:dc:e3:3f:37:6a:
5e:f4:bc:5f:b8:79:34:45:59:ec:51:3e:06:ee:46:
40:6f:cd:60:0b:23:b8:8d:64:df:2b:d1:7e:eb:70:
06:58:21:52:74:2c:d1:73:27:fc:1f:3a:96:3f:a6:
af:ab:63:f8:82:44:3a:92:a2:cf:7f:62:6f:7c:19:
58:e2:55:26:81:17:dc:a4:4b:9a:cb:8e:2b:93:f0:
2b:48:dd:f6:16:4f:34:58:1a:04:c7:e7:f6:75:4a:
77:b5:0a:46:17:9a:18:d1:f4:fa:a7:f6:a3:0d:ee:
72:50:c1:1f:15:b2:6f:e9:b9:db:9c:d3:44:9a:ba:
d3:80:07:eb:54:a4:13:98:a1:6b:64:f3:83:3a:ae:
64:48:ee:10:c2:65:99:08:ed:31:20:a7:58:c9:22:
06:a2:fc:2a:53:d0:b0:3f:09:59:26:ed:5d:ba:3e:
f0:ed:37:5e:31:53:aa:22:01:19:60:cd:ca:cc:6b:
e7:ce:3b:94:6f:1a:50:8e:22:19:f9:24:bd:41:0a:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2D:6F:71:25:2F:01:85:B5:8D:76:F9:08:50:A6:CB:A6:D3:7D:D3
X509v3 Authority Key Identifier:
keyid:C1:A4:D1:42:D4:10:AA:B0:90:51:12:C4:AE:57:90:76:C0:E6:DC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waTRQtQQqrCQURLErleQdsDm3IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/18057a-7c28-44b0-b346-99097670b44e/1/waTRQtQQqrCQURLErleQdsDm3IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:77:a4:6a:4e:a0:74:6d:e4:72:50:ae:4b:47:f7:00:c8:01:
13:c8:2d:8f:93:95:00:d2:7f:d8:57:a8:95:40:2f:86:bd:b3:
6e:13:7e:86:2a:f6:d9:bd:6a:b1:c4:d3:13:d3:e2:e4:49:5d:
28:74:d7:c6:53:1c:41:df:58:f2:45:08:57:db:cf:b7:fc:87:
fc:49:35:31:fb:30:9d:a5:01:89:a6:45:1b:ab:6c:7c:3e:79:
ea:fb:aa:14:4e:52:26:6a:05:a3:e8:90:fa:27:59:42:a8:f2:
44:33:ad:a3:30:dc:7c:7d:c3:80:0c:79:36:e3:fc:21:11:8e:
c3:c2:86:b0:e2:95:35:51:25:ab:65:ab:34:81:59:4d:08:12:
64:69:59:57:ac:69:7c:5e:85:c9:cb:c5:b1:37:d9:38:6f:37:
d3:0b:a5:74:ae:ea:0e:d0:db:53:66:dc:8a:8d:21:08:77:8b:
d6:af:c1:4e:d6:fb:29:15:f5:6b:75:c6:61:cd:5c:5e:3e:7f:
9c:3e:1f:66:46:dc:d7:e5:f5:2b:c4:0c:ed:5e:1c:af:01:2a:
0d:b6:53:cf:e2:b9:1b:29:59:c2:b2:ff:1b:5b:78:80:f4:00:
1c:93:9f:1f:3f:44:71:ea:6b:27:6a:95:bc:c2:99:3d:46:06:
64:3e:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:16:22 2025 by rpki-client