Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File: wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier: 9q9jJAzEAhIfzrPe/VQtJdF+OmMnWNMoXrzy7jIqjfE=
Subject key identifier: FE:16:1A:14:7B:E3:CA:2C:C7:12:A5:FA:D6:A0:8B:00:FF:F5:7C:6C
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 01965B031F9B1F5A0FBA156F8C712BCF5FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number: 0BE3
Signing time: Tue 22 Apr 2025 01:00:53 +0000
Manifest this update: Tue 22 Apr 2025 01:00:53 +0000
Manifest next update: Wed 23 Apr 2025 01:00:53 +0000
Files and hashes: 1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: zUJSsWY6Ved4Pdrc0nvvfA9upgdi8a9cziAB2C8Oi4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:1f:9b:1f:5a:0f:ba:15:6f:8c:71:2b:cf:5f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Apr 22 01:00:53 2025 GMT
Not After : Apr 23 01:00:53 2025 GMT
Subject: CN=fe161a147be3ca2cc712a5fad6a08b00fff57c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:e6:06:c9:d6:c2:c1:aa:d6:5d:1e:4d:ee:
0d:7b:91:54:4a:b5:04:39:0c:47:e9:b3:88:61:71:
32:8d:55:83:13:65:68:f0:f6:38:98:0b:4b:99:34:
88:30:42:0e:56:a1:99:34:93:9b:c9:49:95:7d:62:
54:10:de:7b:9c:06:ba:c6:73:be:23:de:90:35:07:
72:4b:14:d3:fe:87:38:3d:3f:13:88:0d:2a:27:37:
c9:8c:98:63:62:a6:c8:f6:87:41:61:88:40:f2:ba:
d7:56:39:06:a7:62:dc:7c:23:36:86:b7:c6:03:51:
1f:61:c6:91:c3:03:24:34:d4:e9:78:f6:1d:9e:a2:
da:80:f6:8c:2a:a8:2f:45:70:07:a8:69:94:47:fe:
73:7f:4a:ca:c2:47:86:a6:52:1a:f2:28:e4:45:6a:
3a:44:d5:37:e3:28:67:9b:bb:3d:d3:fc:51:7b:64:
a4:05:00:04:5d:0c:9e:c1:9c:75:11:45:47:4a:b3:
0b:65:dd:c5:51:48:28:92:6f:e0:ab:84:67:7d:6a:
05:62:05:ab:88:b1:1b:e1:7b:46:89:c0:57:db:6e:
54:be:b7:e7:56:92:f9:dd:b8:ad:89:56:10:44:81:
0d:db:8a:aa:b3:5a:e0:e4:19:b2:73:ab:fc:43:e9:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:16:1A:14:7B:E3:CA:2C:C7:12:A5:FA:D6:A0:8B:00:FF:F5:7C:6C
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2c:f2:f2:60:cd:1f:dc:b3:48:45:e6:8e:34:08:0c:c8:1d:
07:b8:c5:d4:d3:ef:9d:4f:8d:7d:ff:61:c6:e8:8a:b1:ba:68:
d1:47:70:c6:d6:c4:4d:85:10:bf:86:46:c3:a4:18:13:89:c3:
c8:6f:cf:ad:80:fe:3d:68:7e:da:bc:69:71:c1:dd:2c:c1:e8:
8a:c5:17:c3:fa:c4:ef:c4:63:bb:f0:bb:bd:df:a7:ce:8c:53:
2a:77:7a:ae:fc:b6:5b:d4:15:23:8c:6f:ad:4c:fe:73:7c:56:
90:9a:f2:d7:37:01:6b:29:bd:e5:fc:48:01:86:9d:f9:11:fc:
09:25:56:72:d6:0a:e1:bc:74:8b:ae:42:ba:43:9d:0d:c7:11:
6c:a8:13:25:f7:be:77:45:0d:70:9b:42:7b:b6:63:44:43:53:
34:1d:8b:20:e0:51:e5:3d:88:b3:0b:ad:b6:68:e6:d5:19:8d:
89:70:26:a3:6c:37:58:08:7a:a2:cf:c4:c4:12:7f:b5:57:01:
31:e8:fa:56:51:7e:c0:92:e2:2c:65:2a:1d:f7:c4:73:2e:96:
f2:3b:24:0c:51:b7:33:81:dd:64:4e:fe:3e:ec:b4:c7:89:19:
b0:da:9e:fb:c9:61:06:46:67:f1:33:69:b6:6b:59:a8:8e:23:
cc:c2:5e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:37 2025 by rpki-client