Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File: wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier: wrcDuygUgqx8BSDu4qYLezWLCd4jvnUdOnSpiTA7iJE=
Subject key identifier: 9E:3C:CD:98:70:07:14:AA:1B:8C:30:8D:20:68:AC:28:77:46:DF:A7
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer: /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial: 01964FDA47C0069B29F4E0F59AE6BD5E48FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number: 0156
Signing time: Sat 19 Apr 2025 21:00:27 +0000
Manifest this update: Sat 19 Apr 2025 21:00:27 +0000
Manifest next update: Sun 20 Apr 2025 21:00:27 +0000
Files and hashes: 1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: 60/rNLI1jmyguyXaVe6k7jHn03EVLqqBOU0bzOByKcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:47:c0:06:9b:29:f4:e0:f5:9a:e6:bd:5e:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Validity
Not Before: Apr 19 21:00:27 2025 GMT
Not After : Apr 20 21:00:27 2025 GMT
Subject: CN=9e3ccd98700714aa1b8c308d2068ac287746dfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:e5:51:b3:cb:bc:68:eb:42:7e:26:04:86:
34:e4:55:f6:db:b4:f1:2d:1a:7b:29:dd:65:3f:de:
d3:28:7e:63:db:02:7e:7b:17:09:b4:f7:15:83:ee:
b5:8c:3b:60:85:81:96:3f:bb:64:c0:ff:12:0d:75:
f9:a3:86:78:47:9e:3e:bd:26:10:41:03:9c:5a:66:
34:22:eb:3b:ea:80:c1:3f:35:b3:ff:70:e5:d4:4b:
d5:7f:f2:af:23:e9:67:e7:13:68:5b:d8:65:52:13:
82:80:c8:7f:7c:6a:49:34:33:0b:5d:7d:fc:ba:9b:
1d:10:74:77:e1:10:c7:2d:83:7b:da:13:fc:27:1b:
5a:bb:89:0c:50:06:7f:d0:16:ae:8e:34:dc:fe:33:
1a:13:4f:56:5b:3c:25:5c:da:4c:f6:89:27:9c:df:
1d:53:28:1a:32:95:e1:dd:b8:d6:b0:d4:58:02:8a:
a7:1a:15:d9:06:b4:6b:db:a4:06:cb:65:88:14:31:
8a:24:24:4c:96:29:dd:00:e8:9c:1c:1d:fa:56:56:
32:e4:5a:32:58:6c:76:7c:ab:90:7b:cc:d6:7b:0d:
69:13:af:5b:62:cd:c0:f3:d9:b3:e7:3d:ba:3f:72:
25:2f:8e:b2:dc:eb:20:e7:0f:a2:f5:42:23:67:88:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:CD:98:70:07:14:AA:1B:8C:30:8D:20:68:AC:28:77:46:DF:A7
X509v3 Authority Key Identifier:
keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8a:2f:ec:d5:44:88:62:38:96:32:76:c0:12:8f:41:da:33:
6c:e7:2b:99:76:03:cd:d1:2c:16:8b:84:fc:ce:5c:e3:d9:9a:
3c:36:68:08:82:bf:24:c2:af:ba:95:e7:d2:04:33:82:91:55:
1f:01:70:53:58:7c:c1:e9:b6:f5:a6:67:bf:b9:af:fa:d8:6d:
ba:81:84:2d:09:e8:ca:6f:65:6f:87:fb:58:38:23:9d:b8:e2:
22:3a:db:5d:ca:8e:fc:91:a2:88:62:6d:bc:0c:14:9b:ca:0a:
c1:63:38:d2:b7:84:24:a7:1e:07:15:7a:f4:bc:dd:59:9b:51:
24:0a:34:82:73:4b:cc:0b:b7:64:d4:d0:d4:67:0f:16:4d:b6:
ad:60:b1:52:a9:66:2b:25:97:25:7f:e7:0a:2f:fc:38:0b:3e:
1a:bf:04:23:c0:ca:e7:16:30:e4:ab:ff:96:c6:ac:bb:27:84:
9f:c6:e4:6f:45:1a:5f:6b:ef:59:5b:bb:2b:b5:13:91:a0:c5:
b8:4d:3c:5d:bc:4e:83:b5:18:63:4d:bc:dd:ba:c7:1f:8c:6b:
ee:d0:b5:6d:38:c2:fe:ac:f4:e1:e2:4b:06:ce:c0:8e:d5:11:
31:f4:3c:7a:37:b2:d3:cd:1e:62:d5:4a:b5:6a:36:f5:74:7c:
79:fd:3a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:01:52 2025 by rpki-client