Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
File: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft (raw, json)
Hash identifier: mxKHupfbcNpxYNt0LOKJsN/T8ibr7SoKNUKi7pTxFoU=
Subject key identifier: D2:6F:5B:7E:F4:69:6C:DD:DF:57:E4:AC:26:B1:44:FE:B9:6F:4F:6F
Authority key identifier: C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
Certificate issuer: /CN=c30aef396394ea5950dc7956ab1bf491364622a4
Certificate serial: 0196556EA6EEEB388E78BDC881F2093C2EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
Manifest number: 1458
Signing time: Sun 20 Apr 2025 23:00:37 +0000
Manifest this update: Sun 20 Apr 2025 23:00:37 +0000
Manifest next update: Mon 21 Apr 2025 23:00:37 +0000
Files and hashes: 1: rZbNK2xJ4XhKao8afy4CimeXVSk.roa (hash: DH234KafhTlCh4Rrjfu8Y3PnZSWa2Wt2QfsLpMy42vQ=)
2: wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl (hash: h6lHxfb48azQESSU13z/cJUD6puticcxjkw09v43Jas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:a6:ee:eb:38:8e:78:bd:c8:81:f2:09:3c:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c30aef396394ea5950dc7956ab1bf491364622a4
Validity
Not Before: Apr 20 23:00:37 2025 GMT
Not After : Apr 21 23:00:37 2025 GMT
Subject: CN=d26f5b7ef4696cdddf57e4ac26b144feb96f4f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:92:bd:57:a1:b3:4a:54:62:e9:f9:dd:6b:
ac:02:3d:8a:07:e0:07:51:f9:2b:5e:a6:22:43:db:
e5:3e:db:bd:b8:fc:61:61:2a:0a:28:8c:37:83:64:
0f:f2:16:f2:f7:fb:e7:da:72:1c:b0:dd:7e:96:0f:
b6:81:a9:7e:9c:b4:9f:63:50:4c:c3:ee:f4:0c:25:
af:18:04:2e:1e:d3:53:c9:2d:f2:86:46:d4:5f:1a:
fc:18:71:c1:1a:53:d5:be:14:3b:ce:3d:9a:2b:f7:
2d:9d:b3:d3:28:c3:2d:3e:66:ed:2a:fa:1b:60:fe:
39:ab:5a:04:99:8c:82:05:7d:3d:e5:6a:92:7b:0d:
9c:d9:1b:09:e2:e0:89:f3:9a:51:23:10:75:49:52:
49:83:28:f6:de:dd:59:dc:48:b8:dd:7e:de:3a:58:
91:93:2f:38:24:5a:4c:07:2d:58:ec:7d:f0:39:80:
a9:b1:54:8f:e6:58:07:a5:7f:4f:be:41:96:98:3f:
6b:0d:f7:ea:68:4e:0a:33:96:2a:5e:95:a6:45:16:
98:49:b8:79:5a:11:de:87:b9:30:5f:4e:8c:b4:7c:
05:38:ab:c9:3d:c6:86:e3:45:a4:33:9b:e4:6d:22:
01:92:f9:a8:4d:47:aa:be:65:b9:eb:68:02:4f:08:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6F:5B:7E:F4:69:6C:DD:DF:57:E4:AC:26:B1:44:FE:B9:6F:4F:6F
X509v3 Authority Key Identifier:
keyid:C3:0A:EF:39:63:94:EA:59:50:DC:79:56:AB:1B:F4:91:36:46:22:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddc9a1-5892-44d1-b490-267da91fbff8/1/wwrvOWOU6llQ3HlWqxv0kTZGIqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ba:14:f1:04:86:16:44:a7:fe:ed:cc:fe:b1:63:73:64:3b:
7c:17:57:82:3c:9b:4b:a5:51:8f:b5:8f:54:5a:63:c9:0f:b4:
3c:01:c1:af:3f:56:c1:38:8a:63:26:d4:ee:2f:4d:da:d1:d7:
86:f9:3a:ac:34:37:4f:23:75:17:6d:d4:ca:8a:c0:d7:4a:5d:
49:83:31:b7:1e:59:87:3e:76:2e:c3:47:4c:a4:b0:b7:12:bc:
4a:3d:83:d9:f9:8c:f2:e7:3b:ab:48:c7:e4:c7:3c:d0:4f:a4:
e4:ac:28:b2:ab:d9:c1:bc:9e:25:b5:32:64:f3:e3:fc:5c:86:
7b:09:dd:d6:8f:bc:eb:14:8d:13:f9:ed:c4:53:e0:d6:1a:e7:
62:52:72:00:66:26:6d:85:29:f3:c6:63:f7:73:2d:64:9d:a3:
cc:58:19:02:fe:82:0f:dc:42:11:b6:90:4d:21:66:ed:ed:97:
26:c5:0d:a1:e8:f9:3a:18:54:33:1e:77:da:32:a3:e2:45:fe:
b5:f5:37:e3:49:de:85:97:4a:01:8f:06:2f:11:c9:da:8a:9a:
68:5b:b2:4c:e2:72:a7:e5:d9:46:b3:d4:28:84:6b:97:09:de:
ba:ba:31:20:18:53:bc:ca:32:cb:b6:3c:ef:a0:18:c8:a6:f9:
7c:ed:9b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:53:41 2025 by rpki-client