Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File: w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier: mR607LvqglTL98PBCM3D34qBWOoohQtXWCFR+08/uE8=
Subject key identifier: 02:46:56:A3:E8:CB:92:72:B0:03:01:D5:C3:08:0D:7B:AF:07:60:5D
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer: /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial: 0196556E493D4415E4AF7D50E7A25811DAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 23:00:13 +0000
Manifest this update: Sun 20 Apr 2025 23:00:13 +0000
Manifest next update: Mon 21 Apr 2025 23:00:13 +0000
Files and hashes: 1: UkowmR7j8dX0saZm2LcqRKWc1As.roa (hash: GBF5K+d4pg2yE1Y/OoUy9KgNyBcuaLjAQkgdpqJHVgo=)
2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: RKYlHHErGIf2rsZasJGAWnc1U4eUgDqoaY666EDOAjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:49:3d:44:15:e4:af:7d:50:e7:a2:58:11:da:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Validity
Not Before: Apr 20 23:00:13 2025 GMT
Not After : Apr 21 23:00:13 2025 GMT
Subject: CN=024656a3e8cb9272b00301d5c3080d7baf07605d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:0b:1d:a3:3a:b6:56:09:b5:f8:61:66:3d:
64:f7:56:e4:a4:9b:29:96:30:0a:47:1f:cf:6a:3b:
bd:87:24:13:24:51:7a:12:b3:a0:26:3b:fe:e6:43:
23:6c:73:67:c9:57:4d:77:ca:f2:32:9b:b5:83:95:
18:40:da:eb:49:30:d6:98:ab:84:26:68:a8:ff:67:
33:d1:bb:c5:6c:36:ed:ba:20:e3:9e:2b:47:16:de:
c8:3e:ba:9e:52:31:17:87:8c:68:28:b4:73:57:6c:
39:d8:98:df:d0:70:63:dc:59:d4:a2:c5:52:1e:b4:
be:42:62:64:52:67:6a:e6:b8:78:d0:a4:06:29:8f:
90:d4:88:f2:4b:ea:6b:35:51:2b:14:2d:53:6b:38:
58:79:77:4c:4e:35:2f:55:6a:e1:1b:ae:e7:d7:d2:
fd:4d:57:8b:05:76:9a:13:26:fe:d5:e3:fc:fb:cf:
35:83:3e:2c:01:e3:d1:63:bb:02:ce:c4:9a:e0:15:
63:3b:84:a3:e1:4e:8b:3f:e3:eb:08:94:31:73:28:
40:a5:98:2d:f3:2b:cf:bf:26:4d:98:8d:a1:43:a3:
80:03:c6:73:99:6f:f2:9e:bc:40:5e:f0:82:8e:42:
6e:d9:bd:22:aa:23:38:f9:f1:33:bc:65:c7:9b:47:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:56:A3:E8:CB:92:72:B0:03:01:D5:C3:08:0D:7B:AF:07:60:5D
X509v3 Authority Key Identifier:
keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:65:19:40:de:43:fa:65:c6:58:5e:d0:88:59:01:de:49:c1:
e5:26:0c:b5:45:ca:ba:af:9c:ab:0b:14:9f:e0:3f:ee:42:32:
5c:ca:c4:f3:ae:21:30:cc:36:d7:f2:98:b8:ed:00:9d:dc:74:
0b:e7:37:c4:2c:40:3a:be:72:92:52:ce:4a:06:8a:24:b8:c8:
60:65:19:e1:31:56:a4:78:11:ab:78:af:f6:1c:eb:ac:fc:c7:
54:32:3b:a8:52:d8:8d:ad:41:00:51:fc:2a:7c:7a:5e:46:f7:
12:b7:3a:3e:2b:df:a2:e9:e3:e2:3d:9c:56:65:5e:db:3e:54:
dc:87:f8:19:d0:4b:8e:3a:fc:60:8c:f7:cc:a9:e1:bb:07:66:
d3:43:d5:d2:08:6c:32:32:0b:49:e5:ee:31:d1:08:4f:52:c8:
7f:8d:d4:4e:c2:56:b7:c4:f6:6e:11:cf:6e:37:ea:ba:6d:7e:
c1:8b:c0:43:f5:2b:68:2e:a0:47:9f:0d:2e:04:7d:44:4f:5d:
c5:d3:78:70:f5:4e:9e:72:d8:73:a2:45:9d:72:6a:c4:37:65:
d8:ae:de:36:4a:7a:c6:a2:1d:f7:71:3e:cd:d6:57:d7:02:2d:
ed:7e:a6:bb:f9:cd:90:72:67:20:ea:4e:17:6b:80:8b:30:0f:
5f:ea:7b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:03 2025 by rpki-client