Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
File: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft (raw, json)
Hash identifier: 8fI4M6L956U+ssywjcrkidEKwO1E5lGSuDLoyjlEvic=
Subject key identifier: 71:DA:26:32:10:CD:D4:6C:A0:F3:19:84:EA:F3:7E:3F:84:47:DB:8C
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Certificate issuer: /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial: 01963FFA14FE568E64AE5A13E282612CCECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
Manifest number: 11D0
Signing time: Wed 16 Apr 2025 19:01:16 +0000
Manifest this update: Wed 16 Apr 2025 19:01:16 +0000
Manifest next update: Thu 17 Apr 2025 19:01:16 +0000
Files and hashes: 1: HASJFQJ0dhUBOsyjobgHrPemYuk.roa (hash: t2cor/choG8bzkBioIX6Z6t5j6GZXqfW3BgdsKtvgZE=)
2: V2wJ6rRmC43RRh3IPdBHHjW281Y.roa (hash: Avq4OHU4hwzXrjOvbzGbJG8yV+Q0N6KuIdKdAo1r63E=)
3: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl (hash: AvuvQ8MUIg7c+S7YOknf22gm/HiRUUEfKGPcUHiRQZ0=)
4: rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa (hash: pFW5RVqZxflQiZHo+kcVS/DdoHRiWRG5Vues4Jg84IU=)
5: tIRGV1d2T8vpZcEr5yhT7qzzmu8.roa (hash: k7phpFXieBGnmSKu+QsLBAEm2dEA+/STqbnwyEif0CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:fa:14:fe:56:8e:64:ae:5a:13:e2:82:61:2c:ce:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Validity
Not Before: Apr 16 19:01:16 2025 GMT
Not After : Apr 17 19:01:16 2025 GMT
Subject: CN=71da263210cdd46ca0f31984eaf37e3f8447db8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c3:5e:8f:cd:d4:ac:c0:42:be:9e:26:aa:29:
19:17:8b:ea:a1:dd:51:6a:73:07:0f:f5:91:e0:98:
58:94:f8:0b:7e:3c:66:71:42:15:81:4f:69:f1:c6:
ac:29:85:e4:c0:5f:2d:bd:ba:56:11:b8:de:d0:14:
c2:4b:05:c5:95:fa:55:02:74:24:d4:cb:b4:69:fb:
f9:67:06:59:cc:40:4b:f3:ce:9c:90:0b:08:9a:70:
69:32:c5:ea:5c:f8:49:0d:f5:99:9c:91:65:b1:37:
8b:b5:dd:67:1d:8a:93:04:93:3f:ac:50:12:25:ca:
ee:81:eb:2b:cf:d3:03:58:39:05:cb:58:10:20:f7:
4a:2b:92:6c:79:44:6f:89:07:db:14:fe:03:a5:9f:
bd:05:e3:1c:9b:f5:72:b8:e5:93:dd:df:bf:ea:f8:
a9:80:18:02:88:cc:b5:6f:31:01:b9:48:77:cf:16:
94:49:0a:81:36:af:3d:60:2e:77:83:81:a4:bb:40:
ac:64:ca:fe:24:44:26:e7:ca:ff:42:cb:95:ea:da:
30:10:43:7f:10:4f:ca:f2:d8:9e:e3:ea:df:f0:8e:
1d:77:79:f0:59:41:ad:df:69:80:fb:15:2d:57:35:
f6:ce:eb:73:25:e8:15:b3:11:a6:b7:50:e1:e7:7f:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DA:26:32:10:CD:D4:6C:A0:F3:19:84:EA:F3:7E:3F:84:47:DB:8C
X509v3 Authority Key Identifier:
keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f9:74:8e:4b:f6:d5:84:58:63:76:0c:6b:d2:98:e1:e3:c2:
e1:e0:70:0a:f6:fa:6c:b6:52:70:e1:c9:67:a6:ed:e6:39:44:
60:02:fc:e4:a1:9f:be:6b:37:ab:0d:cd:2e:81:5e:a2:88:a4:
4a:70:16:97:87:70:b0:bd:db:07:cd:94:2c:f7:d4:0b:1b:44:
13:c6:ee:61:0a:9c:4e:60:e0:ea:65:ca:60:25:6c:34:33:da:
7c:23:69:c2:50:42:e6:67:b0:ac:66:50:b6:41:15:33:68:c0:
ce:90:a3:fe:ad:9e:07:c8:14:6a:90:f4:95:b5:61:16:07:10:
e7:da:96:fb:7c:d4:44:c8:e2:dc:20:94:c9:35:1d:c0:d9:21:
3f:99:44:8e:1e:db:65:c5:1a:85:f6:ee:56:7c:c6:69:65:b5:
5e:c0:b3:ac:a9:17:de:42:36:59:f0:14:b4:78:4c:a6:e8:6c:
42:08:4c:7b:1b:c6:95:1a:52:88:dc:66:55:72:b6:38:8c:b0:
40:3d:ba:30:1c:9e:04:3c:9a:43:89:f6:c3:77:5e:d0:a3:5a:
b4:50:b2:e8:8c:53:8a:70:5d:8c:cf:28:93:75:eb:27:cd:98:
90:70:78:34:d3:84:04:94:ab:cb:c0:a4:49:65:73:a5:f0:fc:
25:1e:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:51:44 2025 by rpki-client