Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
File: wXO75fcjeEWsqNMmO41R7zePwSA.mft (raw, json)
Hash identifier: HpmZNhlSX7Bq5QB5n4UbMXxJSql89FlXMgdIoMLh5hc=
Subject key identifier: E1:51:7F:9F:34:92:E0:78:63:83:53:DE:FA:B6:51:B4:85:5B:7C:F0
Authority key identifier: C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
Certificate issuer: /CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Certificate serial: 0195903D7918D26C3D2DC90117E9F4E72B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
Manifest number: 018B
Signing time: Thu 13 Mar 2025 16:01:42 +0000
Manifest this update: Thu 13 Mar 2025 16:01:42 +0000
Manifest next update: Fri 14 Mar 2025 16:01:42 +0000
Files and hashes: 1: nTT0TyM5N3ly5yMdXzhx4HHtEso.roa (hash: RLNwdKAN6eUr14/Qkl0nwCAt9mev9qzfdg1E2WS7ZdA=)
2: wXO75fcjeEWsqNMmO41R7zePwSA.crl (hash: BmFcHuwbU1FYkJMqniavSmUKQ35XpWXWGML7+MCTIws=)
3: wkDz4piEW6E8TjjPv3mOyqzv81A.roa (hash: eds8liA7bmXrlLWfOe2ZVl6NU4VaLq7onyWiImSwEm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:79:18:d2:6c:3d:2d:c9:01:17:e9:f4:e7:2b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c173bbe5f7237845aca8d3263b8d51ef378fc120
Validity
Not Before: Mar 13 16:01:42 2025 GMT
Not After : Mar 14 16:01:42 2025 GMT
Subject: CN=e1517f9f3492e078638353defab651b4855b7cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5e:bd:27:26:62:70:a8:16:2c:ae:56:18:45:
b5:4b:08:b1:20:00:88:ae:2d:56:de:84:42:a5:41:
54:94:2f:f4:d6:c3:21:6f:cf:d2:60:69:f2:f1:fd:
0e:95:97:2e:32:68:e0:25:30:16:9e:41:83:9a:77:
fe:d4:7b:ee:9e:c9:8c:c4:9f:9d:13:7a:36:b7:71:
dd:16:e1:d3:32:a4:8c:81:32:20:d6:9d:cf:e3:4f:
56:52:80:da:39:a5:e3:9c:10:5a:a8:4a:e3:1a:e7:
8a:dc:df:f5:16:42:5b:4f:1b:a2:6c:5f:59:cf:e4:
8f:59:86:c0:73:15:78:c6:62:93:37:de:ae:46:32:
62:8b:ef:b0:9d:11:27:3e:a4:8f:83:b3:50:5a:e0:
10:00:41:e6:72:c7:aa:ec:ce:2a:f7:70:f4:f8:1c:
48:1d:5b:18:69:ba:c6:ea:29:50:77:3b:bf:66:5b:
3a:84:70:e4:0b:bd:98:b6:9e:cd:d8:c2:c1:07:19:
81:b0:dc:9e:33:3f:5a:a0:54:6f:1b:4f:d3:48:32:
72:ad:c7:b8:d5:b7:fa:ac:63:41:b8:43:a2:ff:71:
fa:96:57:ec:b9:e2:9b:2d:a5:d2:3b:42:be:6c:ad:
61:46:ba:e2:d7:6d:2d:3c:a4:24:69:cf:1c:5c:a6:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:51:7F:9F:34:92:E0:78:63:83:53:DE:FA:B6:51:B4:85:5B:7C:F0
X509v3 Authority Key Identifier:
keyid:C1:73:BB:E5:F7:23:78:45:AC:A8:D3:26:3B:8D:51:EF:37:8F:C1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXO75fcjeEWsqNMmO41R7zePwSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/99d2f5-1800-4c08-bcad-8a751b0e0170/1/wXO75fcjeEWsqNMmO41R7zePwSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:af:79:53:73:d9:f4:83:39:42:f4:14:f4:23:5a:c8:e9:41:
5c:0a:cc:af:4a:bb:df:09:fb:c1:93:f2:9b:5a:32:86:aa:72:
d3:7a:2a:dc:bb:50:9d:a2:3d:51:fa:5a:9b:42:6b:bb:58:72:
a1:c9:0d:19:f6:0e:bf:97:8d:34:80:b8:04:8c:c7:3e:a1:fa:
b9:22:f2:b5:56:af:b3:4e:12:0a:02:f1:80:54:33:e9:81:7e:
2c:e8:c6:df:e1:36:1a:a3:6c:b4:ab:8d:a9:9d:69:a0:13:59:
47:1d:e2:45:e0:ed:46:1e:5b:c6:6b:2b:45:6e:c7:7e:d5:e1:
1b:e6:f9:ce:aa:a9:1f:7b:99:50:7f:76:3f:41:17:30:17:11:
88:db:cf:49:9b:10:01:ee:93:35:ca:32:f4:42:60:3c:ef:ac:
35:8a:25:40:22:3d:c7:cc:00:82:ea:fd:7f:c9:ac:51:39:af:
fa:4f:be:ae:9b:5f:94:24:86:97:2d:c4:ff:97:dd:d6:c1:66:
bd:0a:e0:36:12:3c:77:a7:29:23:33:bd:ed:a7:a6:66:d5:6c:
b0:9a:b6:8e:93:56:65:44:3f:0d:0b:73:ff:41:87:c6:f8:14:
62:b3:67:40:be:57:4b:3c:41:7d:80:f2:bb:8a:40:dd:7f:f4:
87:2d:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:09:37 2025 by rpki-client