Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
File: wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft (raw, json)
Hash identifier: cwxDevXIk0JYjO9kv+O5jpza/07eCOJZhgL6TnTS1Fk=
Subject key identifier: 72:22:EF:02:23:08:E2:0A:A8:33:A0:12:0D:9E:A8:43:FA:8F:6A:6C
Authority key identifier: C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
Certificate issuer: /CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Certificate serial: 019658DD7B6D3FB36205ACE2143B37EFCF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
Manifest number: 1491
Signing time: Mon 21 Apr 2025 15:00:32 +0000
Manifest this update: Mon 21 Apr 2025 15:00:32 +0000
Manifest next update: Tue 22 Apr 2025 15:00:32 +0000
Files and hashes: 1: NO4AW5Gi5epvfnutXf6m_pLoKDw.roa (hash: 1o2hUp8Qay3eqTXCqBb3VcdpmxjfDTdYSgYdj2A3ZP8=)
2: hsaReoXY2mR3_oCjpG4j-yPGtgE.roa (hash: cnraCmQfKTDWUgiiK98Z/023EXxjG/JmIpzpFMXqbwQ=)
3: nChyDb158g4ETV6S1h4UKmIWYw8.roa (hash: nll+aElSurSjLSWtf0Qc8rCb0mOo9oC+4mUSWL5RZno=)
4: wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl (hash: AxQk0koqR4kJsx1N03j0wvmF8sdRYly5ClmsmX92/vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 15:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:7b:6d:3f:b3:62:05:ac:e2:14:3b:37:ef:cf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e8e56b18d45c646f03cb6f9069da0c8b3c74ad
Validity
Not Before: Apr 21 15:00:32 2025 GMT
Not After : Apr 22 15:00:32 2025 GMT
Subject: CN=7222ef022308e20aa833a0120d9ea843fa8f6a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:00:33:ba:ca:ee:ac:62:51:d5:96:b4:69:
5d:15:3e:61:27:5a:dc:02:51:d0:14:0d:4e:1d:d6:
3c:37:e9:aa:f3:c2:ae:97:b6:10:38:c8:43:e6:df:
09:18:9d:c3:5e:03:e9:4b:0b:d5:50:6c:e8:e2:01:
9c:e3:75:c9:c0:3c:49:01:fd:4d:0d:a9:94:4e:84:
5d:f5:e3:46:63:b8:f8:b0:fd:0d:87:aa:ce:de:ef:
5a:99:6c:fb:4b:e6:3c:a4:9c:5a:a5:f7:84:a6:60:
45:38:b0:12:d1:01:a5:6d:14:81:f5:f9:1a:24:d8:
34:41:09:7e:41:0d:b1:d3:df:1f:0f:f2:bb:42:92:
4a:51:46:d7:bc:16:52:96:11:ab:2a:e4:5b:51:af:
ce:54:f2:3f:ab:be:e2:14:57:67:88:82:8b:2e:9a:
81:88:b7:46:63:a5:bc:d8:dc:25:84:0b:03:7d:57:
54:bc:b4:9a:cd:6c:ed:cf:3c:2b:80:2b:c1:30:61:
7d:2b:20:e8:1c:2c:dc:c7:e3:53:c2:f8:8c:11:47:
b1:1f:c4:d9:84:07:b8:ec:7b:ed:c0:da:63:d9:29:
92:5f:19:6b:4f:b1:03:eb:ea:fd:d4:45:ab:5f:1d:
ed:4e:c8:77:e8:11:0f:ad:01:f3:a4:22:ad:42:94:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:EF:02:23:08:E2:0A:A8:33:A0:12:0D:9E:A8:43:FA:8F:6A:6C
X509v3 Authority Key Identifier:
keyid:C0:E8:E5:6B:18:D4:5C:64:6F:03:CB:6F:90:69:DA:0C:8B:3C:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOjlaxjUXGRvA8tvkGnaDIs8dK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2abea2-30d0-4654-a834-745bce3060c9/1/wOjlaxjUXGRvA8tvkGnaDIs8dK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:6b:a9:bf:15:bd:45:30:24:df:24:1d:28:bf:e6:6e:c4:
f4:21:cd:cb:f0:38:b1:c3:d9:8a:24:ef:94:84:bb:e0:55:c5:
f4:52:56:7f:8b:e5:ac:42:79:43:0f:df:c1:54:e2:69:e0:5e:
4a:77:03:b1:a8:0d:47:6b:1d:6e:e1:4b:32:65:4a:11:99:a9:
03:3a:1e:d8:19:62:3a:53:b9:b1:4f:5e:c5:a4:11:33:8d:64:
f4:21:04:85:b0:d7:a6:7f:00:57:2d:37:e9:cc:86:16:f9:bb:
ac:9e:54:25:4c:0f:06:b3:e2:9d:ba:ce:0b:52:bc:6f:ff:91:
c3:54:b8:41:1a:de:f6:91:9a:08:66:40:c9:51:c2:30:f2:c0:
fc:40:2f:8a:bb:a5:de:d0:ad:5d:38:2b:f3:6d:05:ed:b2:61:
86:4d:5f:31:59:fa:d0:45:78:df:4c:b8:d8:59:7d:90:82:05:
27:5a:7b:63:a2:ab:de:40:43:33:a9:13:08:c7:a8:32:3c:e7:
86:c1:b0:b7:58:9a:8a:e9:7c:1c:71:cb:5d:26:5e:71:62:d5:
96:73:a2:4c:de:7a:b0:01:ad:6e:3e:62:1b:85:c9:30:43:f6:
59:5c:d8:b3:aa:e0:8d:ff:69:63:2c:cd:0e:e2:0a:56:ba:1d:
fa:db:b7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:18 2025 by rpki-client