Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
File: wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft (raw, json)
Hash identifier: RhDo3kwZZUKgiH1VsBY/qWrQKB1g9n/jAWIzveqYh4M=
Subject key identifier: C5:AC:D2:6B:D7:E9:FB:C6:E7:B3:23:5D:4D:01:49:3C:3C:27:7D:CB
Authority key identifier: C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
Certificate issuer: /CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Certificate serial: 0196556EAABB5557B4D16E4E5FCBEB9CAFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
Manifest number: 0575
Signing time: Sun 20 Apr 2025 23:00:37 +0000
Manifest this update: Sun 20 Apr 2025 23:00:37 +0000
Manifest next update: Mon 21 Apr 2025 23:00:37 +0000
Files and hashes: 1: 6zfU2J2wR6MMPAQDPcdRmDUSTTk.roa (hash: qvQ90YxdjeGEsA7jHHHCLNHaXx9teWbipOiBvb0hjRc=)
2: wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl (hash: oE/736aS8lkYDHiU2XIKj3uO3vLmoOi4aNFyhjnLE5Y=)
3: x0gusjZxaAiftvAcjczux1Ius_E.roa (hash: HFa+GGzqn2pKQb0OIJEk/YaY1MmpeAOG1mYH0pjtvqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:aa:bb:55:57:b4:d1:6e:4e:5f:cb:eb:9c:af:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00935185c68036a0faedeeaaa6bfef4e62a0c93
Validity
Not Before: Apr 20 23:00:37 2025 GMT
Not After : Apr 21 23:00:37 2025 GMT
Subject: CN=c5acd26bd7e9fbc6e7b3235d4d01493c3c277dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6d:42:83:8e:10:67:47:bd:f1:9d:3d:90:f7:
ce:95:4a:e4:28:12:d1:f6:a6:86:90:2e:e4:2b:a6:
c5:5b:e9:5c:23:cb:c4:4f:ef:5b:a2:97:3f:2a:e1:
b5:9e:fc:38:fe:01:cc:50:06:67:b0:c1:32:53:4b:
03:b5:76:77:66:ef:76:db:32:7d:f3:9c:17:d1:79:
59:41:36:b7:a7:6b:2a:df:a6:8f:bc:fc:f8:d9:63:
12:a9:71:4d:30:8c:c2:56:50:df:7d:34:34:c1:3e:
b7:0c:80:b6:b9:7b:73:f9:cc:58:d6:59:ee:bb:d3:
12:44:db:06:20:1f:12:26:dd:2e:ac:a5:02:5c:61:
fb:0a:b4:03:57:f4:07:0d:24:4b:52:32:a8:c5:2e:
24:d0:24:e6:7a:03:6d:92:da:70:f6:4c:b9:70:e0:
9a:e9:8d:6b:a0:b8:37:23:4c:32:dc:79:bf:80:c2:
93:3e:75:32:7c:f1:15:d7:bf:22:97:b8:0c:ec:b5:
15:5d:4f:76:55:52:de:5c:10:6d:a0:67:2b:7d:59:
29:20:f5:d5:87:06:51:f6:14:01:be:03:6d:d3:87:
af:56:0b:0c:71:f4:f4:de:d3:34:15:83:9a:dc:8c:
ad:59:b7:e5:b4:fe:c0:4a:16:b8:76:d9:20:b4:5f:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:D2:6B:D7:E9:FB:C6:E7:B3:23:5D:4D:01:49:3C:3C:27:7D:CB
X509v3 Authority Key Identifier:
keyid:C0:09:35:18:5C:68:03:6A:0F:AE:DE:EA:AA:6B:FE:F4:E6:2A:0C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAk1GFxoA2oPrt7qqmv-9OYqDJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/be306f-0f8c-4674-93ff-2a9712bf603c/1/wAk1GFxoA2oPrt7qqmv-9OYqDJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:db:2b:91:67:fc:38:cc:16:57:a4:b9:75:f1:cf:c2:73:15:
38:aa:4e:a6:48:3f:91:fe:30:96:f8:ff:e4:cc:3a:1e:b5:b6:
fa:e8:68:94:59:2a:a2:de:92:57:b7:fc:33:3d:12:2d:6f:6a:
43:b9:77:01:94:09:14:30:8c:77:da:cd:1b:5c:3d:d5:0b:ed:
94:32:b7:37:44:36:ff:c9:7c:4b:a9:6d:29:e0:18:91:2f:9a:
72:68:dc:d6:e4:b5:50:87:38:36:92:d4:5a:af:e4:2e:69:2a:
37:35:ab:df:0c:c2:7a:68:7b:28:fe:e9:6c:07:48:1d:bd:a3:
f8:d7:4f:e7:b6:1b:41:8c:ae:3f:56:6b:0a:23:af:2f:94:35:
87:be:b4:1f:81:72:05:63:21:fd:90:78:c1:95:aa:1c:18:aa:
12:7b:fb:10:b4:bd:ad:77:1c:de:34:98:f2:c3:01:9b:6b:e2:
d7:46:3b:ff:d2:48:94:cb:41:f6:e9:c2:e4:1e:ba:8f:34:9f:
ed:65:e4:64:52:57:3c:51:93:33:a0:21:50:e9:a5:26:db:d1:
c4:d0:7a:f1:7f:24:74:cb:0e:82:b4:4d:af:ef:2f:7f:28:ab:
2d:06:92:0d:9d:d4:01:8f:5e:3f:64:90:f7:3b:cf:9f:6e:9c:
d5:18:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:21 2025 by rpki-client