Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json)
Hash identifier: t347R5SufhiZ7kWkKKGOWJQyhFrnR9VlXDipzSRRJns=
Subject key identifier: E0:44:87:80:80:64:C8:9C:91:1F:F6:9E:ED:21:38:65:AF:AF:33:90
Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Certificate serial: 01965537CC56725D01BF7A16E0E9AD9988B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 22:00:42 +0000
Manifest this update: Sun 20 Apr 2025 22:00:42 +0000
Manifest next update: Mon 21 Apr 2025 22:00:42 +0000
Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=)
2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: wA69LbdoEqx4bd2mC3bJXMzrIW7XdMhzpbAFNIndJlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:cc:56:72:5d:01:bf:7a:16:e0:e9:ad:99:88:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751
Validity
Not Before: Apr 20 22:00:42 2025 GMT
Not After : Apr 21 22:00:42 2025 GMT
Subject: CN=e04487808064c89c911ff69eed213865afaf3390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:14:07:f3:b9:c9:fd:3a:b7:66:f8:b3:60:
2a:ac:4f:c3:dc:9d:f0:71:68:18:c6:c5:40:ba:42:
f4:db:46:8e:eb:9e:b0:3a:9d:46:c0:49:bd:62:6b:
1f:c4:5f:ed:52:99:5e:9d:9a:70:78:54:76:b6:15:
7b:8e:96:04:3b:b2:cc:d0:33:11:a4:9e:e3:d6:19:
81:76:27:ee:ef:23:c4:27:72:74:47:ca:79:d9:d9:
c6:76:25:e3:fe:27:66:b5:b8:d5:37:3c:db:c6:8a:
c4:78:12:8f:99:48:9a:cb:28:25:24:c5:51:30:c5:
b9:e1:9d:77:f5:45:e3:1a:a6:50:b2:35:dd:da:76:
99:ed:78:85:fc:5f:d7:43:6f:65:12:05:54:e7:b7:
3c:41:16:74:de:c0:09:66:31:af:87:45:a4:25:ca:
8b:d9:d5:c1:fd:7e:00:32:ae:51:1c:c7:d8:9c:81:
36:1d:bb:3a:ce:42:5a:26:a9:82:82:71:af:25:44:
fb:1a:8d:75:6f:e2:b5:55:7e:2f:7b:c0:0b:db:23:
89:26:9e:a1:3a:57:9d:f4:1d:75:13:9f:24:2e:bd:
c2:ce:c2:4e:88:05:e0:bb:c0:28:28:7e:af:8a:08:
d0:81:9d:80:3e:3b:4b:74:39:95:f9:00:6f:c3:7c:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:87:80:80:64:C8:9C:91:1F:F6:9E:ED:21:38:65:AF:AF:33:90
X509v3 Authority Key Identifier:
keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a4:e0:c3:d5:88:60:a7:ab:d8:5e:e3:a3:e7:98:dd:9b:51:
55:14:cd:6f:1e:20:1a:52:af:47:64:e6:be:0b:50:3a:7c:6f:
2b:d7:82:16:8d:e4:25:54:7f:e7:c2:02:a4:89:c8:47:04:53:
81:8f:10:03:be:f5:a3:be:ee:e7:79:42:5d:21:15:b3:1b:fc:
b2:13:54:7e:64:b7:88:41:69:b4:28:09:17:92:59:a4:ec:b7:
c1:b7:a4:17:c9:e4:b7:68:77:6d:3f:1d:06:51:79:5d:d7:f0:
4d:66:5c:42:aa:f4:50:b3:86:1a:d9:d2:4a:c1:b6:2d:1e:ab:
67:b9:0c:c7:68:ce:7e:94:e7:5a:8b:e9:33:f9:c3:e4:4e:ac:
c3:e3:6f:c4:86:9f:66:ff:b0:be:11:05:b4:88:fb:15:aa:b6:
32:03:c9:cd:f9:e2:1d:36:a7:9a:e4:72:58:7f:2a:de:be:ad:
aa:45:5c:ea:b0:6a:62:45:5c:46:71:5c:20:58:a3:b9:3e:47:
b2:d3:ae:67:8d:28:36:d5:e6:d8:3c:ef:4c:03:80:83:f2:5a:
36:b3:98:77:fe:34:85:f7:7b:ac:fd:5f:c0:2b:0c:c5:61:d0:
da:7d:19:ea:8c:30:d2:e5:87:95:be:53:70:9f:49:a4:ed:3c:
72:c1:7c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:04 2025 by rpki-client