Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: VK+dXJSzAkvz1e63IO9vGwv6TF7o9qMhQ5b/DHU7DAo=
Subject key identifier: 4B:74:BE:C9:B2:88:BC:1F:3A:E1:7E:8E:BC:31:A4:D2:2D:0D:B4:7C
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 01965BA7F67309865F84A98CE3B7FD2F92E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 1501
Signing time: Tue 22 Apr 2025 04:00:56 +0000
Manifest this update: Tue 22 Apr 2025 04:00:56 +0000
Manifest next update: Wed 23 Apr 2025 04:00:56 +0000
Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: o3qe5MwSQxE4hqAUn2oBByM46+KKy26OwxaiWjsi2XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:f6:73:09:86:5f:84:a9:8c:e3:b7:fd:2f:92:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: Apr 22 04:00:56 2025 GMT
Not After : Apr 23 04:00:56 2025 GMT
Subject: CN=4b74bec9b288bc1f3ae17e8ebc31a4d22d0db47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:7d:ce:cd:ae:54:75:45:09:00:88:cd:1c:
74:84:6e:dc:ba:69:38:8d:c6:b8:e3:98:43:e4:2e:
1d:c0:83:99:27:0e:75:a2:91:35:2b:80:13:b9:de:
a4:2d:95:07:9f:a3:33:bf:28:21:c7:91:e4:5e:22:
5c:56:f4:e7:95:92:7a:89:cc:ba:25:d2:2a:aa:04:
2c:19:4e:ef:92:e0:dc:16:41:82:f2:c6:8a:55:21:
0f:f0:34:08:7d:b5:1a:7a:a0:25:b0:a4:ea:9e:4e:
9d:d9:26:12:80:d5:df:e3:cc:ab:f9:ac:20:06:79:
ce:91:73:78:6f:da:80:88:47:4a:35:63:13:20:39:
90:1c:a7:9e:81:a2:a2:04:4e:df:84:60:b6:09:bc:
94:4c:9a:0b:63:66:19:ca:02:8b:f8:e0:3f:6f:1d:
e4:b6:54:2b:6b:fa:76:65:18:b1:f2:bf:f2:f3:5e:
7d:f6:65:8d:16:76:b6:15:1f:8e:90:71:14:9b:00:
ed:a4:7f:36:f4:da:a0:6d:d7:9f:58:16:63:78:8d:
2f:1e:6e:d2:2b:96:c3:5b:36:52:8f:3f:c4:4d:9e:
0a:82:bb:5c:f7:38:ff:31:93:2e:d3:ce:99:e3:53:
26:a8:9a:d5:53:95:b7:f7:ff:4e:3d:3c:f0:3f:28:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:74:BE:C9:B2:88:BC:1F:3A:E1:7E:8E:BC:31:A4:D2:2D:0D:B4:7C
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:d7:bd:2e:11:fe:a1:3a:16:ff:6c:8a:41:41:56:33:a6:c5:
88:27:83:20:92:d2:e6:1a:34:c7:10:6e:ca:7e:c1:5a:57:e5:
7d:1a:13:43:a6:f7:d8:04:4f:37:70:56:3d:73:59:6d:ca:be:
3a:30:66:4a:c0:c0:09:98:1d:58:66:05:fa:e3:ab:0a:0b:ca:
c1:eb:86:93:dc:b9:85:b3:0b:76:7b:dc:1d:ef:9b:dc:50:a5:
41:dc:59:47:2a:2f:be:31:73:e6:a2:32:48:dd:d3:65:ea:46:
1a:db:1c:e9:fa:3c:1f:25:25:9e:e1:21:53:7a:b7:5e:79:95:
3f:62:fc:d6:6c:a4:82:aa:c0:16:18:24:d3:ee:48:3f:ca:2a:
64:d6:07:71:c8:9a:cf:91:2a:ad:82:5a:d1:d1:cf:d2:2e:21:
e3:5b:d8:28:43:ca:a6:b7:b2:b3:69:1e:d7:77:09:63:c1:10:
4e:72:be:35:cd:69:0e:53:d4:35:d9:3c:6b:8f:ba:89:b4:80:
95:f9:8d:a4:2d:8b:99:9a:fc:0c:76:72:90:08:31:4b:09:1a:
3d:98:2e:c1:c6:46:31:38:c0:9c:cf:55:11:91:fb:a4:c5:f6:
81:ae:5d:0f:0b:25:a4:8f:a1:3a:ba:fc:9b:a4:d7:65:b7:30:
36:02:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:28:08 2025 by rpki-client