Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
File: woWhR044Yn4wGlUb4076RYKlzzk.mft (raw, json)
Hash identifier: f7ldoOkfr05NaEWsKcMBnhEKja7qAKURonW1cLEwxAo=
Subject key identifier: 01:59:F7:1D:6F:DE:00:21:DB:4C:B3:B5:58:B8:8C:1E:E6:1E:F2:5B
Authority key identifier: C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
Certificate issuer: /CN=c285a1474e38627e301a551be34efa4582a5cf39
Certificate serial: 01964FDA2DA0E90C6042805DA8B3218DB9C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 21:00:20 +0000
Manifest this update: Sat 19 Apr 2025 21:00:20 +0000
Manifest next update: Sun 20 Apr 2025 21:00:20 +0000
Files and hashes: 1: BVOoOEB4gLobrgdxyI5-9zlLWgE.roa (hash: pTz91HcnSysQwLiCozFtJaXWh/WUZ9JSyAK8aIEd67c=)
2: TKlbM4JoTI14SvlWl9KxKwEmigw.roa (hash: YEHXScxruB3ZAlC0fbNpVAnfjw2qlaMRSrlrmf/M0XY=)
3: woWhR044Yn4wGlUb4076RYKlzzk.crl (hash: LmVYlSnpWkEAf9ayguQ/oMwV7ccgWv8elwCiQrpgOeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:da:2d:a0:e9:0c:60:42:80:5d:a8:b3:21:8d:b9:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c285a1474e38627e301a551be34efa4582a5cf39
Validity
Not Before: Apr 19 21:00:20 2025 GMT
Not After : Apr 20 21:00:20 2025 GMT
Subject: CN=0159f71d6fde0021db4cb3b558b88c1ee61ef25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:36:dc:fb:26:b3:9c:a6:87:b1:1c:ce:f2:
da:0e:5f:9b:0b:cb:4f:06:6f:20:81:7e:93:d7:da:
63:da:38:b8:c3:81:5c:da:d6:0c:0d:3a:11:ce:fa:
49:80:29:f3:dc:20:00:8e:7f:2d:02:48:9f:f8:8f:
77:6b:1d:0e:0a:ad:8a:17:4a:83:89:ba:74:55:f5:
9f:7f:e9:32:69:3a:a3:3d:77:28:83:ac:06:77:ac:
85:71:4c:17:ae:c0:4c:f6:41:63:76:65:71:c9:b5:
b0:e1:ac:39:f9:5a:9c:25:27:f7:ce:6d:31:22:7f:
60:cf:cf:fc:a0:58:8e:ef:e5:27:68:33:20:dc:88:
ee:52:fa:f7:99:3c:d3:8b:4b:19:11:d6:68:1d:b2:
58:e9:ee:95:b4:db:c8:eb:7c:70:d0:44:a1:2c:59:
3d:3a:de:2a:08:de:a4:16:e2:d8:98:19:fb:07:47:
28:03:25:b6:7f:fa:12:24:d0:ab:b3:c1:a3:67:11:
d9:b3:0e:e2:3e:28:dd:3a:b8:e6:30:77:26:a6:7e:
d4:ec:78:58:82:0f:7c:eb:c8:f6:48:7c:95:5f:51:
3c:ab:4d:8c:7c:2e:69:07:a6:9e:9f:7d:7e:dc:3e:
ff:cb:7f:bb:87:e8:ba:04:52:70:b9:d3:98:cc:56:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:59:F7:1D:6F:DE:00:21:DB:4C:B3:B5:58:B8:8C:1E:E6:1E:F2:5B
X509v3 Authority Key Identifier:
keyid:C2:85:A1:47:4E:38:62:7E:30:1A:55:1B:E3:4E:FA:45:82:A5:CF:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woWhR044Yn4wGlUb4076RYKlzzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b49f81-8536-4a67-899f-d5e63856d55d/1/woWhR044Yn4wGlUb4076RYKlzzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:fb:1c:bd:96:90:9c:ef:af:21:93:41:c0:8a:91:2b:75:3d:
18:3f:3e:fc:c3:50:70:aa:f9:12:36:d2:fd:72:17:81:34:2f:
99:8b:39:7a:f2:5e:aa:36:51:07:c4:f9:42:7b:3a:2d:3c:07:
fa:5f:8e:a5:31:1a:f1:9e:d0:53:12:24:d9:38:ed:c7:a8:8f:
41:cd:0e:bd:ea:8a:2a:04:f5:f1:42:a8:a5:da:46:fa:f3:27:
ea:82:81:b5:7d:e8:2f:85:23:32:a8:de:84:df:d8:52:b3:3c:
a2:8d:fb:28:0a:12:af:56:98:6c:7c:87:c5:94:a1:d2:72:6c:
57:ac:b6:5d:86:b9:4f:ba:63:1b:a9:ac:4b:ea:17:25:cf:39:
3f:72:63:9a:82:f4:21:aa:a5:fb:34:b8:09:7e:98:2e:c9:d2:
73:55:e1:25:74:8f:b1:4a:b4:7a:74:2e:71:44:dc:a9:92:35:
2e:90:2f:16:e3:a3:21:12:00:f6:cd:38:20:d7:d6:ec:04:76:
e4:e0:ec:00:9a:df:d5:31:7b:4e:a6:a2:c7:92:31:b7:73:d8:
da:cd:84:c4:b9:1d:08:50:1e:de:08:47:2e:b0:f0:bf:2a:86:
6f:85:9c:96:b4:e0:cd:86:c6:aa:5e:a8:a4:4e:2c:1f:c4:2a:
34:7b:74:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:57 2025 by rpki-client