Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier: Z34nmY6gjsC+WUmyHr29C1B65euzGHwEulbHIBT2TBE=
Subject key identifier: 0F:EC:56:92:1B:FA:6D:E9:60:ED:20:A3:4E:97:7E:C1:6A:E0:5B:70
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial: 01960DC4FC3496DBFE1F01568D8F40ECE607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number: 10FF
Signing time: Mon 07 Apr 2025 01:02:15 +0000
Manifest this update: Mon 07 Apr 2025 01:02:15 +0000
Manifest next update: Tue 08 Apr 2025 01:02:15 +0000
Files and hashes: 1: 2tiVBKWJb3sKibII0w4_JEP8cX8.roa (hash: yXLW83i0e/6bCMs04Sj4WwVKDgNnsbMkg4zpZba2Js0=)
2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: GqEIVy+O+uHOV6MwTiY3T5CsE999Ym4/QgVQ6AbV5gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:c4:fc:34:96:db:fe:1f:01:56:8d:8f:40:ec:e6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Validity
Not Before: Apr 7 01:02:15 2025 GMT
Not After : Apr 8 01:02:15 2025 GMT
Subject: CN=0fec56921bfa6de960ed20a34e977ec16ae05b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:2c:de:8b:5a:a7:06:49:5b:e0:0f:d7:76:
8f:cb:23:a9:21:ea:d3:a6:c8:66:cb:42:10:37:9e:
09:52:3b:bb:73:6e:08:ef:ce:a0:45:c5:b8:77:65:
92:12:60:a2:24:24:7e:ad:55:e8:cf:35:6a:24:39:
32:14:3b:6b:a6:8e:36:4b:73:df:c1:d8:6e:22:58:
53:79:cf:97:74:0b:00:fe:e8:62:58:71:17:fd:04:
27:02:dc:d6:50:58:b9:88:f3:96:65:46:b0:36:e8:
64:74:62:6c:7c:17:2f:bc:d5:ad:21:f0:fb:29:dd:
d1:0e:9f:4e:ed:6c:48:77:dc:3b:99:e8:02:67:30:
db:d2:49:4f:47:8a:89:07:1a:16:79:d6:c9:4b:04:
b4:19:65:92:49:fb:51:e9:87:db:18:a0:6c:a6:25:
d7:ca:1a:aa:74:0f:0e:07:54:44:9e:e1:79:15:4b:
1a:54:02:d3:c6:0a:be:a8:96:4b:03:3b:9e:e2:38:
59:ca:c5:e5:9e:13:99:5b:9d:3d:9a:c8:34:5a:65:
a4:fd:d9:08:ae:0a:eb:2b:fd:92:55:81:c6:2e:c5:
f2:70:41:19:c5:2e:6d:3f:21:00:b2:42:a9:fd:7d:
bd:61:a0:dd:99:81:83:31:8d:3a:e5:79:d4:63:56:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EC:56:92:1B:FA:6D:E9:60:ED:20:A3:4E:97:7E:C1:6A:E0:5B:70
X509v3 Authority Key Identifier:
keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d0:92:44:9b:21:de:dc:23:be:4e:97:42:11:31:cd:28:1d:
c2:b3:1b:e4:fb:42:bc:23:36:92:64:ad:59:c8:b4:76:31:1a:
6f:08:27:44:fb:a8:88:61:f8:fe:67:b0:6c:21:66:5b:f9:66:
99:41:65:3a:9d:bf:30:a8:40:fc:a7:75:01:c4:a9:3b:74:df:
18:38:3e:9a:6b:50:f1:ef:e6:a0:14:b3:4d:78:c7:1b:d4:84:
17:11:a2:a4:14:27:3d:1e:ee:be:78:ab:f9:c6:0a:85:b0:ee:
ca:78:29:ed:59:a5:b6:f5:d2:ee:37:85:99:8c:8b:ce:99:49:
e6:4a:6b:d7:7e:fb:7c:a9:4e:32:86:70:9c:f5:15:59:ce:35:
a7:db:9b:12:e8:2d:d3:81:a2:f6:36:2b:91:a4:82:ef:72:94:
0e:89:d5:21:df:17:14:29:c7:a2:31:4f:6e:0f:a0:45:ca:b4:
c4:ff:44:e1:e3:84:7f:28:47:e3:b6:72:9f:24:76:27:c3:89:
75:d7:18:ef:23:53:8b:bf:13:0c:ad:e0:14:05:2a:80:2c:d5:
0f:eb:1f:5f:b8:2a:14:0d:cc:b2:ce:f7:13:76:5a:dd:96:00:
8e:49:6e:37:30:69:fb:6c:f6:e7:a2:b1:b5:0c:58:be:fa:de:
bd:fa:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:06:53 2025 by rpki-client