Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: prBKeyjrQSaIJAO3K3uL8gr2svCUDwcey5X4wz6BNug=
Subject key identifier: 36:D5:F5:91:F1:93:62:4A:7D:9A:C1:8E:95:6F:DC:13:1C:BE:FD:6D
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 0196556EBC85EA7343DF1D3EA913F8DC2609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0B02
Signing time: Sun 20 Apr 2025 23:00:42 +0000
Manifest this update: Sun 20 Apr 2025 23:00:42 +0000
Manifest next update: Mon 21 Apr 2025 23:00:42 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: nNXC+sWWkeDSHcVRDRU1edxwk5RPUs/kUVW6dJ8kxBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:bc:85:ea:73:43:df:1d:3e:a9:13:f8:dc:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Apr 20 23:00:42 2025 GMT
Not After : Apr 21 23:00:42 2025 GMT
Subject: CN=36d5f591f193624a7d9ac18e956fdc131cbefd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:5c:16:f2:ff:1a:72:8c:0c:08:a9:a3:d4:
be:e7:8b:50:28:53:16:53:c5:71:8e:98:83:05:41:
86:e5:9f:d0:ed:53:a6:5f:9c:9d:8d:06:0e:d4:5f:
de:e3:3e:38:35:62:89:06:7f:bc:e6:2c:74:70:31:
76:18:51:5c:f1:ca:6c:08:f4:c8:bf:64:94:cb:ec:
79:9c:6a:9a:de:28:ab:51:f2:cd:03:ea:7c:b6:dc:
ad:7c:a5:b9:4d:77:2b:95:9b:0c:ba:15:aa:05:5d:
07:81:9c:3f:75:3a:1a:75:d1:08:bd:0a:33:7b:e7:
47:2a:5b:f5:06:c4:e0:3d:16:0f:7a:cf:3a:29:25:
8c:1b:8c:46:c6:c0:79:00:4e:b7:75:26:6f:34:98:
97:86:b9:5f:3d:ff:38:47:36:56:e8:b6:ec:b6:9e:
82:d2:76:af:27:8e:2c:13:36:07:39:be:4a:75:dd:
e2:06:46:94:9a:13:9d:b7:0f:82:e7:2e:53:90:ae:
99:c1:8b:30:d9:4b:db:6f:81:d9:ac:4e:b5:ca:16:
9b:63:c1:2e:a0:80:a9:22:c6:f9:3a:c7:d6:49:dd:
b0:cb:7e:a3:17:06:4c:a4:13:49:b6:06:96:32:c9:
c8:aa:c3:c8:83:ac:a8:75:dd:22:54:d3:57:12:d9:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D5:F5:91:F1:93:62:4A:7D:9A:C1:8E:95:6F:DC:13:1C:BE:FD:6D
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b1:a9:b7:3c:eb:fe:9b:30:c3:06:f9:16:e6:d8:88:85:4f:
0a:ac:e4:ae:94:19:0b:8f:d4:bf:99:02:20:38:7d:4e:77:91:
d6:a3:0d:8c:23:e3:a0:9b:75:98:2c:63:41:cb:11:89:08:4b:
9e:89:fc:8e:6c:e9:97:06:8d:60:ea:b6:58:66:f1:27:00:6b:
72:d6:fb:5f:e5:06:2b:42:4f:79:0a:21:eb:a6:d6:ae:cc:ce:
8c:6d:5f:6a:1d:b9:35:f6:a7:34:26:9b:81:be:18:25:b5:1d:
19:d6:9b:19:db:22:cf:ca:3b:b4:67:83:00:df:e9:bc:cd:b9:
5c:84:fe:fa:2c:12:06:b4:35:c8:4a:3d:85:36:55:08:9c:d0:
1b:b2:28:f5:c7:57:e9:66:e5:f8:01:4a:29:3d:c6:6e:12:13:
e6:83:16:ce:a9:0a:24:41:73:aa:d0:24:61:66:52:92:5f:68:
ec:2c:a1:b8:66:c2:3b:ea:76:44:5c:70:e0:6b:4a:30:26:99:
80:d5:fa:49:ef:c5:bb:b3:1c:0e:28:af:7f:dd:fd:8d:23:52:
99:77:4a:c3:8f:7a:5b:aa:8b:f1:0c:57:98:e2:c0:37:ef:39:
d2:c7:ec:82:e1:d0:a4:8a:d0:bb:4d:51:9a:ee:40:20:fe:c9:
98:27:64:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:49 2025 by rpki-client