Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier: XDfceBU9IvQ+Ukd0EJ1D5s4vqVt+PDUtk8dkU2rpl90=
Subject key identifier: F2:CE:F5:96:B6:08:33:69:96:2F:B4:C4:78:F6:B0:8D:6A:3A:84:34
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 01960FB31A4C5E8CE3966C449D08CBC47C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number: 0BAF
Signing time: Mon 07 Apr 2025 10:01:57 +0000
Manifest this update: Mon 07 Apr 2025 10:01:57 +0000
Manifest next update: Tue 08 Apr 2025 10:01:57 +0000
Files and hashes: 1: DkCgqG244-xdfGSiZiRL_6jjMU4.roa (hash: LYv1Ix1K/vm79oDEZ0SXpTqFtZHiYhhxeZ+EeZAbK6I=)
2: eaEk-4j5PrJQWB1ynGSuwR96qYE.roa (hash: cKnW7tUA+y/LjIR8x0MQBeinXC+rpLOrHc/MhvgB6Fk=)
3: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: 9KXcrc2ZlltVEtlYmpvNpllfcbynCSixOpyVldgm0B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:b3:1a:4c:5e:8c:e3:96:6c:44:9d:08:cb:c4:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Apr 7 10:01:57 2025 GMT
Not After : Apr 8 10:01:57 2025 GMT
Subject: CN=f2cef596b6083369962fb4c478f6b08d6a3a8434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:96:f3:9c:8d:4f:3b:98:e8:ec:57:01:3f:
fc:f5:7f:03:67:1f:69:64:a3:b3:fc:e1:e6:a4:2e:
3d:f5:ad:06:96:84:b3:fe:da:e9:bc:d7:4d:ef:a8:
7a:b8:f0:4f:bd:74:06:29:98:8e:57:2f:f4:83:96:
66:b5:3d:98:9e:04:49:a9:15:bc:05:15:c1:4d:ee:
10:67:b1:69:2e:e9:43:99:25:05:5b:a5:56:b4:71:
a9:ba:b4:63:01:7d:e2:b6:cd:c0:43:9e:4a:6a:8c:
2d:f5:30:ef:e0:0d:d9:30:72:21:ea:27:d5:9b:40:
fb:d7:98:01:cd:d7:4f:fe:9a:05:41:77:19:bf:72:
45:7d:50:63:23:45:8a:0f:0b:78:20:53:d9:5a:18:
83:cc:24:1e:cc:bb:19:a3:29:e6:5a:60:6e:5a:5f:
69:8d:b8:c9:15:dd:e1:4e:a4:ad:78:c5:81:01:b2:
0a:dc:f0:c2:cd:d5:4f:20:04:33:cc:f5:d4:15:fb:
fe:e0:2d:ac:9c:d3:0d:58:be:71:db:ae:dd:40:59:
c1:53:2d:f3:55:aa:df:39:b8:74:37:05:4b:19:cc:
f9:93:25:8a:93:7a:f8:98:4c:c7:e4:78:5f:6b:66:
9b:0e:3c:97:1b:1c:4d:c6:27:7d:5a:4f:fd:bd:23:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CE:F5:96:B6:08:33:69:96:2F:B4:C4:78:F6:B0:8D:6A:3A:84:34
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ae:30:36:df:7c:13:9d:69:bb:96:b8:f0:ed:28:59:b9:06:
5a:fb:81:9e:60:6b:1e:f6:c3:e4:2d:f2:76:88:c6:82:c3:4e:
24:d1:eb:42:ce:8e:0f:ef:eb:88:65:5b:46:9d:a8:87:f0:c6:
fd:f1:9c:39:11:f8:11:fa:49:7e:b7:00:6e:da:3f:3b:98:be:
28:d0:35:e0:6e:ae:a6:4c:94:30:22:2c:9f:9c:a1:e6:09:25:
77:1f:41:22:ae:16:1d:79:57:b4:59:4f:a3:b4:0d:22:3e:76:
b8:32:3b:55:34:60:39:3e:94:f1:73:09:fc:8e:2c:e5:e3:e6:
bc:bc:51:00:7d:11:51:1d:7a:e8:49:ce:a0:93:5b:5c:57:d7:
2d:a2:74:b1:eb:1c:e0:0f:ac:53:79:9f:e6:5c:fe:ee:f0:a7:
c9:89:d2:78:bd:3b:21:01:e0:01:81:c0:25:9f:f4:b3:5c:95:
f7:41:ba:35:c8:7b:be:4b:1c:55:3f:7a:37:ed:67:11:81:a6:
c5:a6:48:f2:d2:12:5f:14:88:2a:43:42:ae:ae:49:7e:8a:f7:
2d:51:13:a5:98:f5:a9:af:0e:82:25:58:fa:14:0d:8c:d5:ee:
ae:01:9c:ae:2b:01:c7:d9:0c:9c:ca:32:39:c5:e5:0b:05:71:
e7:61:ac:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:21:44 2025 by rpki-client