Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File: wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier: BX9TgOFAXVaTl6dLh7r7bZLSUQihw7D0V+x5Lx92Znw=
Subject key identifier: 8C:AF:04:D2:1D:2B:BB:F8:E3:10:C0:4B:92:9E:83:F2:40:9E:01:4B
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer: /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial: 01964DEBFD85086098B0D7D2AD6D273C1350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number: 0723
Signing time: Sat 19 Apr 2025 12:00:33 +0000
Manifest this update: Sat 19 Apr 2025 12:00:33 +0000
Manifest next update: Sun 20 Apr 2025 12:00:33 +0000
Files and hashes: 1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: RryXQqf7wBALVWoCLLjRhLGZwRSByjmUXqAvObiMMrI=)
3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:fd:85:08:60:98:b0:d7:d2:ad:6d:27:3c:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Validity
Not Before: Apr 19 12:00:33 2025 GMT
Not After : Apr 20 12:00:33 2025 GMT
Subject: CN=8caf04d21d2bbbf8e310c04b929e83f2409e014b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:19:85:36:94:59:83:3f:81:0a:da:0c:66:
f2:30:03:5d:2d:9b:21:82:3a:6d:32:3c:37:4b:84:
cc:d1:cf:67:a5:f3:06:61:8f:b1:16:d8:6c:00:1e:
82:d1:41:13:6e:0a:ff:06:2c:45:09:11:f9:1a:b5:
a7:a0:9e:7b:78:d3:50:51:5d:0d:3e:e6:74:c6:22:
b7:48:90:6d:46:94:a4:54:52:e9:1e:ee:90:d2:1d:
b5:43:b8:58:35:69:19:b0:44:4e:01:04:9c:bf:f4:
88:a0:67:2c:d6:ef:0b:a7:c8:99:db:bb:0f:e9:05:
a7:2a:91:e6:28:9b:4d:2e:3d:7d:fd:53:59:a5:ee:
fb:00:02:2a:09:9c:5d:fc:d3:cb:42:10:37:56:49:
f9:28:69:b0:36:ee:33:b8:95:67:5a:b7:2e:29:ed:
cb:b8:6d:d6:4d:8c:26:46:8b:5b:c5:94:53:0b:e2:
25:34:34:7c:4f:d1:6f:0f:03:ac:9f:a9:d7:bc:0a:
15:6d:30:c0:3a:fb:6d:b0:8f:38:0d:42:e7:1a:92:
8b:64:c7:2f:1e:76:0c:7d:00:af:dc:88:01:90:08:
f6:12:89:de:5c:e4:fc:79:9c:61:0a:ee:3b:6b:d7:
47:52:c4:6b:e5:37:f0:a6:3b:2b:82:87:4b:69:8f:
4d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:04:D2:1D:2B:BB:F8:E3:10:C0:4B:92:9E:83:F2:40:9E:01:4B
X509v3 Authority Key Identifier:
keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:26:85:19:0e:41:2e:bd:fe:ed:d8:c7:bf:1c:7a:c0:f7:32:
e2:8a:c8:21:55:c3:04:c4:5f:7e:7c:f2:42:ee:c9:2f:b7:81:
34:6d:f7:56:f4:3d:14:6e:e9:9b:d6:03:25:79:3d:89:6b:93:
f0:57:66:ec:e3:08:38:cf:fc:35:dd:b3:0d:c4:aa:b2:76:d1:
0e:7a:55:33:b0:46:0e:17:f0:0a:ce:ac:7e:90:07:02:98:63:
7a:b0:82:ee:b9:d9:9b:24:dc:eb:8d:b2:92:a2:65:dd:6d:39:
cc:71:e4:f6:23:ee:70:28:fa:b7:b7:84:9b:2a:f6:c1:6a:ad:
86:3b:69:c5:1e:19:be:78:c9:f7:e4:8a:bb:19:08:f0:d2:de:
4e:d6:f8:ea:24:da:a4:9c:a5:93:4d:36:19:1a:94:c1:c9:61:
b7:55:d1:c5:b8:7e:c3:c6:a1:2f:19:25:3e:13:6a:c2:25:88:
1c:17:a6:08:8d:0f:5c:dd:13:04:d2:66:27:f2:ce:71:a8:fc:
fd:ce:c9:7f:8d:6c:bb:4c:b5:78:9d:28:35:53:30:1f:ba:fa:
38:fa:54:3d:f7:cc:df:86:0c:2e:b6:67:31:ab:e2:44:bc:e6:
e7:90:7a:83:c3:45:78:c8:88:8a:8d:56:e0:7a:71:c5:03:2f:
76:cc:f2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:13:55 2025 by rpki-client