Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier: fNNPsM4D71z2Eb9JxJgniV7eZaaXMQsHuqOIrb+qEwo=
Subject key identifier: A5:D5:D7:42:37:64:8C:6F:21:B9:14:B1:A7:F4:29:36:4A:C7:A1:64
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer: /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial: 019656EF6166CC2BA6CC17A66797EA99D6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number: 097F
Signing time: Mon 21 Apr 2025 06:00:50 +0000
Manifest this update: Mon 21 Apr 2025 06:00:50 +0000
Manifest next update: Tue 22 Apr 2025 06:00:50 +0000
Files and hashes: 1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
3: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: jUDyHh450vpEttyeyqP+kIOnaACRBJBXjBV1DvgDLLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ef:61:66:cc:2b:a6:cc:17:a6:67:97:ea:99:d6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Validity
Not Before: Apr 21 06:00:50 2025 GMT
Not After : Apr 22 06:00:50 2025 GMT
Subject: CN=a5d5d74237648c6f21b914b1a7f429364ac7a164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:4a:d2:41:86:0e:96:35:27:ac:26:86:39:
19:98:37:e3:fe:37:b9:e3:77:9d:fd:80:13:ee:24:
b0:76:fe:65:5f:f6:9b:c9:d3:1b:53:2a:2c:21:af:
b6:95:da:e1:3f:7b:63:2d:0e:b1:6b:76:b5:08:bf:
f9:d8:78:11:7d:3b:32:a1:02:5c:33:c1:ac:0f:41:
ef:e2:d6:ba:34:c5:86:09:ce:37:83:ee:a7:b4:94:
99:3f:a0:2b:1b:55:be:c2:15:10:08:59:12:a7:28:
3c:12:db:63:5c:51:04:22:c6:82:4c:1d:36:76:fb:
67:1c:5f:5e:ee:bb:22:b8:9a:62:16:bf:2e:f1:81:
66:91:cf:47:1b:f5:4e:4f:06:ba:e3:b8:10:53:6d:
9b:b3:10:e4:a4:1b:06:b7:ea:aa:16:ea:17:56:1f:
05:c1:64:91:b6:1a:6f:fc:17:b1:05:11:2f:dd:94:
ea:a2:3f:ed:0c:6d:c9:38:5d:df:d4:d9:84:99:d8:
45:2b:07:f9:02:83:b0:a3:57:ab:c6:85:9a:07:93:
c8:ba:2a:cc:3e:ab:41:91:6b:a9:24:0a:fe:a7:79:
97:03:fc:31:fe:4e:95:09:48:5b:77:ca:97:df:8c:
90:72:0b:21:ac:24:26:29:a1:69:3e:fa:ce:5f:19:
92:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:D7:42:37:64:8C:6F:21:B9:14:B1:A7:F4:29:36:4A:C7:A1:64
X509v3 Authority Key Identifier:
keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a9:a1:11:58:52:bf:f3:49:49:0e:fe:72:ed:a1:0b:06:7b:
c7:f4:71:b9:6d:ae:86:45:51:4d:0e:30:1b:ed:43:cf:85:0f:
10:92:a3:e4:f9:70:0d:41:82:bc:b8:ca:4f:63:9c:8d:40:74:
42:ce:20:71:0f:88:3f:db:cf:34:44:12:f3:0c:02:2b:19:0e:
d1:5b:ae:42:05:7a:19:a9:15:7f:e4:90:f2:38:a5:af:e5:5b:
ce:b8:5f:f8:92:e0:27:4e:ac:86:5f:76:08:b9:f5:8c:28:e9:
60:c2:7d:3f:7d:5c:a8:1c:f5:40:bc:c8:85:5e:c6:57:42:27:
95:bd:fa:e9:64:0e:52:42:88:75:4b:c8:c4:bc:52:ee:f9:11:
97:cb:d8:a5:5d:1c:9a:1a:be:e5:c9:ea:9e:fc:6a:c5:ef:04:
4d:e7:3c:63:d6:37:cf:94:e2:29:eb:ff:bb:05:ed:d7:53:c9:
3c:24:91:75:ed:08:d7:ff:3a:33:d3:ce:85:61:0b:0f:78:81:
6c:97:7c:61:9f:f4:ce:2b:43:56:de:15:02:db:1e:1a:ed:57:
03:d4:09:bb:bb:2c:ac:be:6e:9d:f5:6f:ac:36:f9:6c:75:79:
0f:84:c3:3b:f5:a3:8f:b6:14:d7:e6:41:a0:7f:95:79:16:56:
ef:91:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:37:51 2025 by rpki-client