Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File: wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier: n08c+e8WRG+vKDgIKx3Wis4LXSEq+G5KYCdkFtL1TUM=
Subject key identifier: AE:29:04:88:08:64:E6:1F:AE:C8:E7:44:6F:9E:A7:8B:E9:62:B7:7C
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer: /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial: 019647B3A813A4521D5081543B59A3A07450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 07:01:18 +0000
Manifest this update: Fri 18 Apr 2025 07:01:18 +0000
Manifest next update: Sat 19 Apr 2025 07:01:18 +0000
Files and hashes: 1: 2JIOSCKb1yPGO4sxkBE8Pq2m1SI.roa (hash: 6wJtQ966GopPabKniSig2Pa6Q5RXd/Jr37kv2JhiMao=)
2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: Retjh1wONl/2D7idoyf4K/g5jdBV8yWLTZD0UlXPL7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b3:a8:13:a4:52:1d:50:81:54:3b:59:a3:a0:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Validity
Not Before: Apr 18 07:01:18 2025 GMT
Not After : Apr 19 07:01:18 2025 GMT
Subject: CN=ae2904880864e61faec8e7446f9ea78be962b77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7a:10:97:34:58:e1:e0:7b:44:f1:65:0e:70:
1a:df:e8:b0:29:63:6c:8f:e6:16:06:72:0b:4c:10:
d1:80:c8:37:6b:c7:8d:33:95:8e:66:43:61:8a:ef:
4c:4d:30:6f:cb:99:42:be:bd:b4:7a:e2:10:c5:17:
c5:8c:1f:3e:85:9d:e8:e0:fc:6e:07:2c:53:1d:77:
d9:42:65:46:35:cb:46:f8:c5:37:bf:66:d8:43:bc:
0f:53:bd:4a:63:cc:1a:60:3d:79:b8:89:93:ab:b2:
98:b9:da:54:e1:6c:d2:4e:da:7c:ac:02:d5:7b:4d:
1f:9a:8d:62:2b:1b:74:2f:f7:a4:93:72:f0:85:6b:
2e:8d:8e:78:9c:16:7e:35:09:37:ee:4c:e6:48:87:
60:67:c8:1b:74:a1:3c:ef:4d:7d:04:ea:64:8b:8d:
ef:3f:2a:90:a1:d3:8c:a3:93:ef:18:e4:78:89:a6:
6f:29:27:27:16:26:e8:1c:af:ee:c5:22:81:77:44:
3c:a5:8f:e2:18:aa:43:10:9e:58:83:73:8f:97:af:
38:32:b4:37:8a:71:f6:a2:9b:11:b7:01:3b:11:d3:
de:18:c8:c4:c2:2c:07:e0:fc:a2:50:ba:3b:e9:7c:
e5:ae:24:e4:73:18:be:35:d6:b4:59:52:92:ca:a1:
f2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:04:88:08:64:E6:1F:AE:C8:E7:44:6F:9E:A7:8B:E9:62:B7:7C
X509v3 Authority Key Identifier:
keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:28:02:71:3d:37:21:7a:44:a4:03:dc:58:64:6c:ef:2a:d6:
57:02:ad:8d:a5:9b:e3:13:16:47:56:ff:29:30:46:e0:a5:01:
e4:8e:ae:38:1c:91:db:c4:f2:0b:06:4a:16:3e:d4:9f:87:bb:
31:36:16:a5:8f:c7:ca:6c:be:e8:b6:3e:7e:2b:bb:2b:f7:f3:
49:f5:9e:56:8c:02:f0:c9:c5:cf:e3:d7:57:e0:e6:f2:c4:bc:
a5:5a:3d:a8:0f:ab:ea:b1:1e:a6:65:68:16:c5:d3:b7:89:c6:
6a:d7:d8:75:40:f8:11:44:17:b0:09:3b:a6:f9:00:9c:12:de:
c0:8c:e1:98:6e:69:7d:47:c4:83:4f:51:be:fb:3c:25:c9:14:
03:1f:70:4d:73:c2:2b:9e:c5:c9:a2:71:09:77:10:af:32:11:
7c:a6:fc:7b:7c:30:1a:bb:f2:b2:d8:e9:8d:c1:28:43:f5:83:
92:d9:1a:f8:7b:7f:21:aa:72:5c:d4:e3:79:29:b5:9e:3a:ab:
0e:53:64:3a:7b:25:f4:90:24:5d:08:29:aa:b8:9c:e5:63:eb:
7f:78:d6:19:68:bc:c6:82:5d:32:78:30:43:31:f1:f9:60:67:
1e:22:be:cc:09:33:77:9c:6f:bb:7d:46:af:7f:d5:f1:d7:11:
2a:76:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:41:50 2025 by rpki-client