Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
File: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft (raw, json)
Hash identifier: QTlxzqaWGvOJcyGz8Qc/HriLrIoKF6XCy+gJWWv8np8=
Subject key identifier: 33:92:6C:95:63:D4:35:0B:E7:CE:BD:F1:71:2B:5F:71:F7:C2:A2:F6
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Certificate issuer: /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial: 019652A512B010BA122CCACCBC92CFDEF453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
Manifest number: 1492
Signing time: Sun 20 Apr 2025 10:01:11 +0000
Manifest this update: Sun 20 Apr 2025 10:01:11 +0000
Manifest next update: Mon 21 Apr 2025 10:01:11 +0000
Files and hashes: 1: 1gW4wInA_dSwaTybzK2cECnN9GM.roa (hash: lDMswWk6x4gxqUk8wVyldaT2YU119AYZXfT2M/CJ54Y=)
2: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl (hash: +mOn2Vm80PW27uktw3aIfxdotmydFB//AHhApBrdWJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a5:12:b0:10:ba:12:2c:ca:cc:bc:92:cf:de:f4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Validity
Not Before: Apr 20 10:01:11 2025 GMT
Not After : Apr 21 10:01:11 2025 GMT
Subject: CN=33926c9563d4350be7cebdf1712b5f71f7c2a2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:9d:b8:4a:a0:5d:6f:a6:4a:20:81:a3:6e:
2c:2e:c1:e5:93:23:1f:01:41:9d:23:e3:41:52:d6:
b8:37:11:8d:f8:23:42:04:d9:b0:d5:aa:d5:65:3d:
cb:bc:72:a0:26:91:bf:13:62:02:4d:00:cb:6f:31:
69:b6:19:8d:3e:c4:cc:b9:99:ee:f0:16:7f:f7:4d:
50:b2:2a:d1:ac:83:d5:32:1c:c2:81:40:5c:e3:b8:
7d:12:16:c6:99:e3:02:27:46:05:e9:bb:8e:20:f5:
f9:7c:3f:fa:ee:bd:0a:7a:41:9c:57:3c:43:e2:14:
31:dd:b9:1c:2b:b7:a5:30:ee:2d:85:e9:54:ed:1e:
c4:13:9f:1c:c1:0b:cf:8c:53:d5:91:71:94:01:4a:
89:bc:0f:97:6f:14:c4:52:eb:e1:64:d3:cc:6f:42:
2b:5b:59:1c:3a:8c:8d:71:f2:6c:9f:25:5a:3a:9f:
4e:97:f0:d1:60:14:36:8a:3d:12:73:6a:3a:5a:11:
8c:36:4c:f0:25:a0:61:f0:a8:95:d6:44:e1:12:4b:
de:61:6f:2c:ad:3a:03:ad:a9:c3:06:ff:7b:dc:b4:
fc:0e:f7:10:31:63:95:b5:5f:93:63:01:be:46:8f:
cb:98:58:89:20:49:75:9b:35:f2:45:eb:80:4e:8d:
3f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:6C:95:63:D4:35:0B:E7:CE:BD:F1:71:2B:5F:71:F7:C2:A2:F6
X509v3 Authority Key Identifier:
keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:19:8d:81:4e:8f:27:9c:2f:5a:63:91:aa:50:8a:ab:8b:af:
ca:ae:c9:c2:7a:c0:ec:f8:cb:6b:e1:ef:bf:dd:4a:8d:d4:5e:
0e:5f:b2:d3:d3:c1:3b:c8:c8:4c:f4:61:52:7e:29:ec:e4:03:
35:40:8c:46:11:c0:c2:fd:86:5c:ee:19:f5:15:be:40:4f:7d:
c4:04:82:3c:07:7d:11:be:0e:df:ee:de:70:5c:f8:f5:92:44:
02:e1:5f:5e:57:27:6f:e4:0e:46:59:49:4c:19:5b:41:a3:39:
9a:94:3a:7f:77:a7:5f:41:23:b8:10:11:51:8e:07:47:78:98:
ca:5c:82:14:1f:37:92:d0:17:62:32:b8:1c:21:10:03:c1:d8:
ca:9b:5a:14:78:f0:8e:b6:a9:cc:20:4c:a0:3c:d6:27:be:c6:
b9:b0:10:bd:0d:79:59:11:ea:8b:ed:b7:4f:35:fc:88:0f:fd:
03:a7:03:fa:15:a7:1f:da:35:b7:f1:0d:39:61:9a:0d:70:51:
c2:46:59:6b:28:b2:6e:89:97:da:7f:04:47:27:d3:8c:2f:13:
4f:82:03:44:17:2e:48:fa:44:fc:27:79:bf:e1:76:7e:6b:b4:
8c:db:a8:c0:f7:8d:72:7d:9d:58:a1:81:9b:41:77:1e:f8:ed:
1c:7c:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:09 2025 by rpki-client