Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File: wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier: UhCYxH2dCfckFBl1GuOZF/wMqqh9/Fkb+3HZ7VdoSIk=
Subject key identifier: 0E:E0:F9:10:5B:E3:44:53:A9:13:59:51:CF:91:2B:52:6C:28:C3:3A
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 0196C916C5EA0DDDFCA0DC0E031A670EB747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number: 0220
Signing time: Tue 13 May 2025 10:00:34 +0000
Manifest this update: Tue 13 May 2025 10:00:34 +0000
Manifest next update: Wed 14 May 2025 10:00:34 +0000
Files and hashes: 1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: b3nuPEfNaFlihnbMN5KEN5gvCcjAnFHGC0RiOYufZQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:c5:ea:0d:dd:fc:a0:dc:0e:03:1a:67:0e:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: May 13 10:00:34 2025 GMT
Not After : May 14 10:00:34 2025 GMT
Subject: CN=0ee0f9105be34453a9135951cf912b526c28c33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:0b:ea:c0:8e:98:4d:42:cd:97:df:8f:09:
c2:9b:27:58:0b:48:5e:a0:07:12:42:bc:61:a4:c9:
b3:7a:d2:0e:54:bd:78:ec:33:59:24:a8:a1:ef:3c:
cd:ba:52:f1:c6:18:dc:67:e6:19:db:ce:4a:82:bb:
42:5d:dc:81:47:e1:6a:05:41:0a:b1:37:73:e5:49:
71:14:2a:3a:7e:c9:af:fe:3c:d1:73:06:6d:2f:fd:
b3:b5:95:d5:6e:5b:f4:2b:9d:6e:7c:a5:96:b0:9c:
19:a2:91:cf:4f:83:50:f2:b3:8c:76:53:85:69:d9:
92:24:b0:6a:27:b4:69:65:aa:9a:58:5f:d7:68:42:
86:d8:2e:ef:af:05:6d:62:54:e2:b5:1b:61:4f:03:
4b:d7:65:3c:c4:c3:d5:c5:cf:91:d7:3f:1e:a5:ca:
b6:ed:e9:8a:5e:4b:c1:25:9e:12:19:ce:23:94:f9:
64:37:79:d7:a3:f5:87:f1:c8:07:13:c3:cc:52:f6:
ba:f8:fd:e2:6a:46:84:e9:f0:50:66:e6:99:08:a1:
0d:c0:b4:3a:3f:27:79:32:93:61:3a:43:21:84:f4:
be:b1:c1:31:d9:6d:97:d4:98:c0:9a:3a:e7:f9:14:
55:cd:77:82:f0:0a:48:c7:71:90:05:ca:20:dc:7c:
ad:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E0:F9:10:5B:E3:44:53:A9:13:59:51:CF:91:2B:52:6C:28:C3:3A
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:f7:20:1c:ba:90:03:9e:ca:ac:7f:09:36:42:59:f8:f3:fb:
5c:ae:53:cf:b6:c7:1a:f4:0c:e6:67:93:64:b5:80:01:7f:0a:
ce:da:ad:f2:1a:86:e0:a3:cd:fa:4d:79:b6:db:86:f5:52:c4:
8b:18:66:cb:fb:c3:e2:e9:b3:50:f0:65:c3:48:c0:6e:d7:3c:
ad:35:4d:a4:bd:87:f3:03:75:d7:49:3c:d0:c9:8f:77:56:c3:
ad:91:4f:57:75:29:d8:21:8f:7d:61:f2:fa:2c:bc:93:0f:b3:
86:2e:bd:3b:67:4b:81:df:aa:cc:77:d6:84:11:37:87:c4:31:
98:2f:7a:0c:c3:ec:cf:35:0d:1e:2a:9d:5b:e6:e3:b8:9a:18:
6d:c0:32:0d:1f:8e:cb:f6:36:92:17:4b:8b:fa:fb:17:40:74:
57:7e:bb:50:16:10:93:da:50:01:fe:9f:52:36:40:19:34:d5:
bd:df:1c:79:0d:72:d2:5b:97:1f:00:8f:06:2d:da:c8:2b:c6:
a1:89:42:a1:25:fb:86:a6:86:df:ff:ef:89:04:b6:2f:2a:df:
cb:15:34:0d:c7:38:81:d5:2c:4d:04:cc:ed:cb:2b:6c:e5:6f:
07:2d:80:cf:b3:f3:82:5b:7a:8f:9c:54:e8:df:d2:3e:ea:95:
d4:c7:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:11:23 2025 by rpki-client