Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
File: wQmKGQW70zgVM4KPa3_SJxcEMe8.mft (raw, json)
Hash identifier: SvEqJ4YNyIGzafdh9lLEWbDnX2secl3AwaqcJjhyeYc=
Subject key identifier: 8C:3B:EA:5B:DA:9D:F2:AC:85:99:E6:B7:1D:98:20:AE:68:CB:45:33
Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef
Certificate serial: 01961057115DD90966E5DEF656572B94FD13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
Manifest number: 14FB
Signing time: Mon 07 Apr 2025 13:01:03 +0000
Manifest this update: Mon 07 Apr 2025 13:01:03 +0000
Manifest next update: Tue 08 Apr 2025 13:01:03 +0000
Files and hashes: 1: 9YIKds84pmkqqSUhkc6fWWyFF_U.roa (hash: Zl/u5pK0GcTZlUuMm3FsQSFvKxX3ghw5NC/1Sio1XdQ=)
2: Ak9XK5YFlXI4AoNUomQD5SJWMTQ.roa (hash: 8frbczP/WVHp6KYWn7u+vpW6oUS+dkfZt+1mfqWJkiA=)
3: DaFBPQjNIt89bZ-zjtkqkYfP25s.roa (hash: pp9Ceedlj+qqJJCfZTMjKuHvEOYjJEHNhnFxlngbiSQ=)
4: F7VtIEmMZmsdWkt0VCX4cwPSD3I.roa (hash: pt6vMx0dEwVx2sHh/Y99xQxE2icOOT8mwZQHp5NGxZY=)
5: cdYJonDxjk5U7tPV78g4h2hSLZo.roa (hash: WtYQS9yTDEW6OANZ+f6hcNrUBMmPvrFNaBsMzLB79qc=)
6: kJ6H7AmIyUvdxMRQ4aBB5sxRD_U.roa (hash: QA88mloj+h/kCAIWi5WNjJl3VlB1DBIdl1O6jQwCD1U=)
7: sUKcclZahYIz3onbKqmP3P88pdI.roa (hash: CBZMv3jQPhyiFf/dy9HbfwPs9kQApWp7DL2KyK40I5c=)
8: v3O2rk8WaR7VhMc1DaSHWT3Xzz8.roa (hash: QkMQyvC3sEpgXeZ6lU5JRmWJPmKhWgedStjiN3opkDY=)
9: wQmKGQW70zgVM4KPa3_SJxcEMe8.crl (hash: I2nm7KxH2UmjVuEF0kuBUSKlTp1X3Pk0TE3ctzGGa/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:57:11:5d:d9:09:66:e5:de:f6:56:57:2b:94:fd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef
Validity
Not Before: Apr 7 13:01:03 2025 GMT
Not After : Apr 8 13:01:03 2025 GMT
Subject: CN=8c3bea5bda9df2ac8599e6b71d9820ae68cb4533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:5f:ec:b0:5a:e9:dc:94:50:1e:d4:06:1d:
a3:0b:9a:c5:a4:91:04:fe:df:8c:c1:71:5e:4e:44:
26:6d:0a:f3:2d:01:63:c4:a1:51:fd:ac:e5:82:73:
99:50:2b:e7:3c:d8:58:d4:3d:05:50:48:e4:1d:4c:
9b:a5:ae:00:ee:a2:e4:f1:8d:6b:5b:2b:76:ab:ee:
ba:f2:97:b6:c4:22:64:d8:89:aa:8b:8c:80:26:71:
91:32:83:7a:29:17:8d:e4:70:1a:54:28:8c:fe:32:
d2:f7:a5:ee:68:a2:a9:48:72:a3:92:74:64:c7:a5:
f9:96:96:52:f7:52:7d:7b:5a:cd:d2:0f:7c:73:ad:
25:8f:2e:69:05:56:7b:c9:cf:06:0c:df:8e:06:1b:
77:e6:7d:02:ef:4f:20:f2:c2:3e:53:af:8b:81:99:
65:ab:df:7e:89:2a:f5:01:0b:97:f0:2f:a9:ad:c0:
10:e2:e3:8d:34:9e:9e:c2:51:35:ae:e6:f6:c7:88:
06:b1:32:e9:f8:6b:68:17:64:a9:ec:1d:d1:ac:ef:
2e:9a:6a:fc:93:bc:66:26:57:49:26:e1:73:d0:97:
0b:fa:a0:75:af:89:d8:74:e9:77:ea:b2:8b:fc:9c:
70:70:be:aa:30:c6:46:dc:9f:52:11:e2:8f:3d:3d:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3B:EA:5B:DA:9D:F2:AC:85:99:E6:B7:1D:98:20:AE:68:CB:45:33
X509v3 Authority Key Identifier:
keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ab:7f:70:b6:81:00:71:ed:8f:98:0a:d6:b3:fc:11:d9:f0:
82:35:4d:0d:4f:f2:ed:26:9f:0e:8b:14:5c:00:59:1b:48:51:
fc:9a:77:b1:92:78:0a:2d:75:ad:e5:14:bb:1b:cf:1e:1f:9b:
ea:5a:06:5a:f5:68:a2:91:ac:50:08:2e:ff:09:e6:e6:31:11:
fd:34:72:f5:6b:ec:67:d5:26:05:40:ce:a4:b4:0b:89:48:03:
20:20:50:a7:1a:c6:b0:4a:3c:24:ea:71:4d:05:33:ec:6e:ab:
38:17:27:83:9d:f6:de:dc:b7:0d:03:e8:0e:31:cb:50:34:ef:
0a:49:99:08:b3:10:e5:7c:25:f9:5e:fe:0a:cb:ee:d1:af:b7:
34:44:72:3f:e1:82:4d:b8:10:f8:2a:69:d3:12:39:94:06:33:
3c:68:77:2d:e0:93:ea:fd:65:a0:33:ce:cf:61:45:59:0c:95:
3e:b6:99:ad:01:82:f4:2c:58:00:24:47:fe:94:e2:98:b1:7a:
79:d7:b2:13:48:72:4f:aa:52:61:ff:ad:36:02:5c:38:85:ce:
72:ec:43:8c:5e:eb:a4:7b:0d:27:33:86:57:0e:86:9b:3c:c1:
8a:76:7a:7d:dd:ac:81:a4:3d:fe:ea:64:b9:35:64:a8:c4:99:
c0:b4:9d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:25 2025 by rpki-client