Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json)
Hash identifier: NQTSRaWxyS94TS5/R7us+9bcpzp3heujKEXXbNTCJ80=
Subject key identifier: 3F:A3:E8:94:DD:BF:3B:1F:EE:D1:47:97:40:00:6F:E5:92:5A:8C:F8
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial: 01965B7073A0F3E71C22278A3D5F4866B347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 03:00:18 +0000
Manifest this update: Tue 22 Apr 2025 03:00:18 +0000
Manifest next update: Wed 23 Apr 2025 03:00:18 +0000
Files and hashes: 1: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (hash: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=)
2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: VVEbps7/guAkEN3LMVoAAeNg+O8tGYPLtiDAKBknzPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:73:a0:f3:e7:1c:22:27:8a:3d:5f:48:66:b3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Validity
Not Before: Apr 22 03:00:18 2025 GMT
Not After : Apr 23 03:00:18 2025 GMT
Subject: CN=3fa3e894ddbf3b1feed1479740006fe5925a8cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:17:11:1f:50:c5:a2:ae:30:b2:12:63:59:0b:
f1:c3:64:fb:cd:5d:bb:4b:73:fc:f7:65:21:8f:16:
1b:a6:95:60:cf:84:a4:8a:fc:f2:c6:b9:ea:82:82:
9b:11:05:73:2e:5b:15:7d:b1:cc:00:91:eb:05:cb:
a1:42:73:1b:72:ad:e4:19:18:c8:da:18:04:58:7b:
3b:cb:ed:32:55:28:62:67:33:03:d2:f1:d9:ca:c4:
e5:b0:3a:fd:99:0f:c1:84:23:4b:06:14:84:71:2b:
ad:ce:25:3d:0a:b0:86:c4:37:be:77:c7:53:f1:70:
91:bf:59:31:95:c7:dd:e4:93:8f:98:0c:21:6c:af:
24:09:19:97:d7:38:c3:96:0d:67:3d:45:90:65:e1:
cf:64:9d:21:df:e7:b1:9a:7d:40:ff:77:6b:f4:11:
d6:47:a3:be:df:18:18:a2:d9:81:9e:80:5d:f5:47:
7b:6a:66:73:68:a2:e2:c8:9f:9d:60:70:cc:3f:d5:
90:72:cc:48:2d:bf:dc:30:99:10:eb:99:4e:0d:41:
88:a2:33:c8:84:8f:d4:99:0c:30:47:ca:f2:56:aa:
02:c9:35:4b:f5:5c:b3:9d:dc:e5:4b:24:88:1f:74:
6a:f1:04:37:37:96:cb:68:e6:c9:0b:45:f0:a1:00:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A3:E8:94:DD:BF:3B:1F:EE:D1:47:97:40:00:6F:E5:92:5A:8C:F8
X509v3 Authority Key Identifier:
keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:59:45:8c:2d:9d:59:94:6b:2d:9c:fe:90:b6:d6:03:8d:46:
59:dd:27:28:bd:3e:f2:42:d3:68:10:44:22:58:a7:b3:03:20:
99:6a:59:c3:7a:eb:df:a0:9f:e1:13:6a:45:ad:9e:c1:73:94:
c9:9c:e4:36:a3:96:e7:d7:a6:39:cd:d1:73:8f:f7:ba:c8:4b:
6d:4f:93:d8:fb:f5:6a:9f:12:64:8d:55:b4:90:0c:68:bb:a3:
d7:9c:1e:09:12:d0:82:aa:72:85:37:8e:ff:c7:86:96:99:63:
d4:b1:78:d9:2c:be:0c:d5:80:59:15:a4:7d:da:11:6a:3e:45:
9f:0c:0f:9a:a5:33:62:32:41:a2:5f:e3:ea:2e:fe:58:b6:2d:
a0:2c:c9:9a:a0:ca:c6:d3:ba:d9:6a:54:42:b4:70:f5:f4:25:
27:c6:00:b2:bf:bb:48:b2:7a:a9:57:41:15:0b:89:17:eb:c0:
6e:7c:aa:e0:93:fe:e9:2a:ce:1c:c2:14:a0:62:96:3d:5b:c2:
c8:df:59:1c:25:4c:24:98:74:98:fe:bc:ed:ff:e3:64:0c:29:
e1:2a:e3:94:95:32:12:2b:9c:e9:28:89:f4:3b:f2:f8:e1:ed:
2b:39:2a:4f:86:4d:27:1a:b8:30:2e:48:c9:ff:3d:74:7e:b8:
02:b4:50:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:27:56 2025 by rpki-client