Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File: wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier: gBDOF8yoqtNfhBhg7Ie95sD1FTOP5Ll0d+pcUbA3yAY=
Subject key identifier: C4:C6:95:54:C3:46:1A:4C:6D:04:50:B8:CA:3A:B7:55:A4:31:8E:BF
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 0196488EA2D17DA20B926C6355181B2AE1ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number: 0F70
Signing time: Fri 18 Apr 2025 11:00:29 +0000
Manifest this update: Fri 18 Apr 2025 11:00:29 +0000
Manifest next update: Sat 19 Apr 2025 11:00:29 +0000
Files and hashes: 1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
2: 4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa (hash: 1LrkJHOzTguh6JvPCNh6V6i/J0BR7h6wEY/GDxBjoTQ=)
3: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
4: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
5: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (hash: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=)
6: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: 3dhNH956vo2azmwixDKGmrQnMkjcr7GHvhjEXUtR5Lw=)
8: zlP9_orrw6aHHSv7bATBUkhqiRA.roa (hash: NvMCHUJ14Lp9H+mYdu1xuY40BR4qWMQHtDYR2W3Odek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:8e:a2:d1:7d:a2:0b:92:6c:63:55:18:1b:2a:e1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 18 11:00:29 2025 GMT
Not After : Apr 19 11:00:29 2025 GMT
Subject: CN=c4c69554c3461a4c6d0450b8ca3ab755a4318ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:64:a3:5a:a5:13:fd:04:57:c2:60:bd:29:
cf:2c:87:56:ea:96:07:39:b1:d2:cd:ff:30:48:b1:
94:65:23:76:6b:0b:ae:9b:9a:50:ee:9b:05:ae:53:
ac:fa:13:ef:d8:66:4b:68:b2:18:fb:07:f9:06:34:
7a:95:df:94:61:23:e4:f5:cd:14:38:c0:07:bd:8f:
1f:ce:ff:62:16:1a:98:88:20:d7:b0:d0:5e:27:f4:
ed:d7:1b:11:b3:f0:98:2e:3a:d9:39:48:74:58:8f:
f4:df:28:a2:7d:98:81:66:a5:f5:70:53:02:7c:dc:
47:78:2f:24:6e:8c:e4:57:be:a6:6a:13:aa:01:79:
19:cb:8a:89:47:d6:8a:a1:eb:dd:13:bc:02:9a:31:
29:69:4a:e9:42:18:e6:6c:6b:7e:42:91:66:b2:01:
ed:7d:ca:dc:ac:39:c4:d5:e0:98:49:c9:f8:8f:17:
6c:18:02:ce:3c:eb:3a:2e:49:d1:12:7e:9d:e3:f0:
4e:3c:62:b0:27:84:40:e0:4a:fa:55:b3:58:b3:cc:
e6:fc:e8:fc:ab:f9:79:fc:b5:cf:2b:6a:bd:b8:92:
e4:86:ee:84:cf:20:85:f3:99:55:86:dc:fe:fa:b9:
d5:db:06:b6:6b:c2:5d:cd:aa:cb:3c:79:1d:ca:cb:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C6:95:54:C3:46:1A:4C:6D:04:50:B8:CA:3A:B7:55:A4:31:8E:BF
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:93:22:02:b5:a6:b7:d7:67:56:79:5e:e6:6a:73:17:de:4f:
6f:8a:1c:a9:8f:5d:9f:cf:32:de:cb:11:91:5a:76:e0:2a:eb:
59:e4:d6:10:4d:90:96:b4:2c:74:67:30:b4:f3:11:3d:41:c3:
b8:db:ac:12:d6:64:81:4f:c1:d8:ae:e5:07:e9:1f:85:61:26:
ea:a9:29:6f:1b:89:c7:33:45:dd:fa:f9:3e:79:95:3b:f8:a3:
7d:8f:87:b6:82:ea:d8:99:93:b0:c4:3d:0c:aa:6d:49:2d:ed:
8c:74:17:64:c1:09:2b:88:15:e0:da:e3:c0:00:65:7b:98:42:
2e:8e:80:2d:15:67:0e:c6:56:3e:b1:c0:e0:72:1e:59:64:4f:
3b:89:49:fa:97:a1:48:85:f0:99:30:ad:ea:ca:ac:25:3f:0f:
13:31:88:da:aa:1b:9b:30:92:c5:dd:a6:76:6c:72:73:97:b6:
86:01:63:49:fa:96:7a:0f:05:ae:26:83:7a:be:c0:47:dc:c7:
36:6d:0c:aa:20:82:f7:4d:f1:c9:07:98:b3:1a:68:21:19:fe:
93:7f:ba:55:e2:6a:53:ea:04:3f:7b:7a:34:66:7e:f9:68:31:
4a:19:d2:9e:39:73:98:45:47:6d:0d:bc:c7:4e:6a:d6:f4:55:
44:3e:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:11:03 2025 by rpki-client