Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
File: wQHFvAkVovfLFlsLfXEyEvpXMy0.mft (raw, json)
Hash identifier: ILhEZazHUpnLr732l7BDh09wS/GmHL8cFQ24u/z6RMQ=
Subject key identifier: 33:A6:1A:FA:89:93:32:28:A0:73:82:6E:C8:A1:61:EB:1B:C7:CF:76
Authority key identifier: C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
Certificate issuer: /CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Certificate serial: 01963651EA4D14B8764022997BFDD3960A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
Manifest number: 14EF
Signing time: Mon 14 Apr 2025 22:01:00 +0000
Manifest this update: Mon 14 Apr 2025 22:01:00 +0000
Manifest next update: Tue 15 Apr 2025 22:01:00 +0000
Files and hashes: 1: 9rnqD1RU0JdMjSu8BzguZaGfvTA.roa (hash: GMQdSU1ONVtRLJ/ahFPu6uQVjVVqJu2bd95QqZUAXII=)
2: wQHFvAkVovfLFlsLfXEyEvpXMy0.crl (hash: 7hZadXCrDt0ip3zHAe7F4p9Mfb631007sL05kjDo1SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:51:ea:4d:14:b8:76:40:22:99:7b:fd:d3:96:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c101c5bc0915a2f7cb165b0b7d713212fa57332d
Validity
Not Before: Apr 14 22:01:00 2025 GMT
Not After : Apr 15 22:01:00 2025 GMT
Subject: CN=33a61afa89933228a073826ec8a161eb1bc7cf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:70:b4:57:21:54:b7:58:ed:ad:e8:5b:b2:
81:40:38:a7:7c:b8:a1:25:3b:d1:bd:85:7c:b5:fe:
bc:6c:d9:56:71:b5:95:0f:c5:35:ab:70:33:43:7b:
7f:27:fd:ba:55:0c:ca:54:23:96:7e:43:3b:8b:6e:
3c:b7:33:e5:84:c6:e7:79:19:02:f5:48:05:e8:81:
55:24:18:67:5c:37:c5:d6:f2:13:6d:d6:c2:af:6f:
0d:8f:90:9d:ad:e3:ea:64:54:b5:12:a5:4c:6a:44:
30:f4:ae:dc:b6:60:b7:7d:84:2e:a0:9d:4c:a8:2d:
29:b5:48:95:86:4b:c1:6b:76:c2:9e:b8:da:1b:fe:
d2:18:ba:68:13:3a:ae:60:7d:94:74:bb:87:ae:7e:
4e:3c:bc:2c:9f:e8:1b:00:f2:3c:05:e4:1b:a5:5f:
6e:42:13:d5:90:47:f0:ec:58:37:70:49:7b:10:3f:
28:79:1d:d0:05:fb:e1:07:e6:71:c1:30:d1:33:68:
4d:2c:ae:c3:57:06:16:d5:e7:d0:dd:58:aa:36:b6:
31:88:5d:81:06:e9:d0:ac:de:b3:cd:2d:33:02:6f:
e2:9e:0a:ea:c9:83:0e:74:a2:fd:9d:97:af:da:e9:
37:78:cc:d1:65:1c:b1:5a:4a:3c:68:85:4d:71:e8:
c8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:1A:FA:89:93:32:28:A0:73:82:6E:C8:A1:61:EB:1B:C7:CF:76
X509v3 Authority Key Identifier:
keyid:C1:01:C5:BC:09:15:A2:F7:CB:16:5B:0B:7D:71:32:12:FA:57:33:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQHFvAkVovfLFlsLfXEyEvpXMy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cfcde0-9aa3-4c2d-b8f7-928d91791907/1/wQHFvAkVovfLFlsLfXEyEvpXMy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d6:41:a4:33:cf:9a:ce:e8:4e:01:c0:07:1e:c7:fb:aa:54:
bc:18:ba:31:2c:06:85:6e:d3:2b:9e:bd:7f:b2:73:e8:64:18:
46:b1:37:53:8d:f1:a3:cd:d1:05:ba:5e:58:68:9a:7d:7b:96:
56:c8:ef:5a:4e:cd:b6:63:bf:ce:46:4d:c7:c1:97:e9:18:70:
b4:b1:2b:5f:91:ea:7f:9e:9f:68:e5:b4:47:7b:c5:4c:4a:e3:
97:b1:8c:b1:64:91:aa:a5:29:b9:6e:e5:0b:7e:8b:9a:a2:3d:
c8:55:3f:44:84:0d:19:10:23:ec:9e:00:be:a2:bd:2b:74:96:
a5:bc:e5:de:2e:b7:fd:d1:13:e0:76:53:86:58:41:07:7a:3b:
53:b7:ed:9b:d9:de:c6:ec:37:7c:37:10:2d:78:9b:f2:44:18:
7b:b9:ac:ee:6a:15:20:77:6d:c3:ac:77:5e:e3:5d:ae:73:d8:
1b:39:05:9b:0f:1c:8d:56:e4:cb:24:88:59:d0:45:c4:d9:37:
37:3b:38:e0:4a:9b:e1:d0:b0:80:ea:7d:f0:ae:09:86:2c:d2:
3f:0b:d5:c7:a0:6b:fb:89:4f:c0:c6:ac:a6:4d:18:3f:46:14:
2f:e0:d5:ac:bb:5d:0e:2d:51:89:44:0b:2f:87:7f:b1:fa:8d:
52:83:23:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 03:17:35 2025 by rpki-client