Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
File: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft (raw, json)
Hash identifier: lB34T3Autqo3Xw8HCpOLOF2hQnOgCBLMtBMOOw4nV0Q=
Subject key identifier: E8:3A:00:A3:03:58:A4:5B:D2:34:F6:90:2F:97:75:F3:46:70:CF:76
Authority key identifier: 5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
Certificate issuer: /CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Certificate serial: 01965236753DEA2F3275CAAEEBE2ECF11AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
Manifest number: 148F
Signing time: Sun 20 Apr 2025 08:00:22 +0000
Manifest this update: Sun 20 Apr 2025 08:00:22 +0000
Manifest next update: Mon 21 Apr 2025 08:00:22 +0000
Files and hashes: 1: Hf8Mb8qM5ZB0G161UkFqR0v7uDk.roa (hash: 86/LxqP4QHUXPHN7MeYEfv+SmJ6UpcunDO36GSPvIQQ=)
2: Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl (hash: BYwYpwuT4GYHzFykMoV7Wf4rNn6f8ud/pPRFognKJT4=)
3: rdMKkMaHfdWNXSGH8FsWUlQ7D6Q.roa (hash: lGvKyGfhIjanaigrkcQySpZWBGRsLu6frqamWcC0ZCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:75:3d:ea:2f:32:75:ca:ae:eb:e2:ec:f1:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1d228b6acbd1803cff560fa4b42f832d28324f
Validity
Not Before: Apr 20 08:00:22 2025 GMT
Not After : Apr 21 08:00:22 2025 GMT
Subject: CN=e83a00a30358a45bd234f6902f9775f34670cf76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:f3:8c:b9:42:2a:87:aa:28:22:d3:b3:7e:
30:44:6d:ef:82:53:fd:e6:86:20:15:79:fa:fd:9a:
93:8d:38:2c:4c:7e:d9:da:71:0a:2d:3c:f5:c9:c5:
a1:87:28:d4:6f:cd:b1:d1:b7:a8:d5:94:21:a9:7a:
4f:59:92:eb:9a:a2:be:c7:9e:d9:e6:31:f9:75:81:
52:1d:8c:17:9b:ec:48:5e:a6:60:10:e5:7c:fa:b8:
55:28:c9:fd:a1:0a:d1:a6:e7:1a:0f:7c:8c:92:b8:
da:68:0c:aa:19:f4:e2:54:8a:2d:5d:d4:0e:8f:55:
6a:80:d7:d7:0e:8e:68:7f:22:58:57:f1:4a:1c:54:
ba:22:fd:e7:54:98:43:30:59:2b:31:af:63:5d:45:
df:03:d5:4d:14:df:11:30:57:e7:d2:28:4e:f0:4c:
4a:fe:61:28:0e:6d:d6:aa:01:51:b1:cf:65:b7:6e:
7a:35:fc:4e:c0:c5:a7:66:00:df:ae:a9:8c:c4:c1:
f2:a8:47:47:46:f6:77:ca:26:9d:5a:9c:06:c6:bf:
19:d0:95:8c:4f:cf:75:82:8a:b9:56:8a:75:31:b2:
f2:22:6f:57:c4:a8:27:26:1b:3d:fe:01:8d:f9:56:
e9:fe:90:bd:03:6a:18:18:b5:c7:86:86:83:ac:c4:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3A:00:A3:03:58:A4:5B:D2:34:F6:90:2F:97:75:F3:46:70:CF:76
X509v3 Authority Key Identifier:
keyid:5B:1D:22:8B:6A:CB:D1:80:3C:FF:56:0F:A4:B4:2F:83:2D:28:32:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/9eed05-1477-4f05-8ae3-618e89b12c41/1/Wx0ii2rL0YA8_1YPpLQvgy0oMk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:c4:65:72:12:9b:4a:68:07:27:7d:bf:bb:ae:ad:f8:48:
70:d9:29:27:c7:df:07:5a:2e:33:ca:a4:2f:ff:48:0c:30:06:
b2:bd:04:a9:bb:b4:71:14:76:fc:7a:27:94:1a:16:ca:c6:b7:
e3:f7:76:18:6f:2c:32:b1:b8:fd:86:e3:58:f0:40:d0:ae:2f:
71:72:e2:0e:2b:0d:8c:ff:79:c2:1d:e2:e1:43:61:b3:f0:24:
5f:14:a8:a0:d8:89:bb:69:21:fd:51:c1:c0:3e:a7:6d:83:8a:
74:6d:88:0b:9b:2a:51:f0:32:63:ed:0c:53:a3:d2:b7:f8:f0:
2d:66:ab:ca:f1:44:75:ce:b5:e6:ea:46:cb:18:11:89:b7:3d:
1a:8c:0a:d2:9d:d1:ca:b1:1c:9d:4b:8a:14:c1:e8:56:65:3e:
b8:03:3c:2b:21:1f:46:ef:dc:8f:83:96:ef:2f:98:55:03:4b:
29:1a:00:ce:2f:19:ef:43:aa:80:61:ea:66:69:1a:7b:76:7e:
d3:64:ff:c0:d7:45:92:9b:40:bd:71:c6:ef:a9:42:74:1d:5d:
fe:e5:5d:48:93:df:a0:21:e9:e0:dd:74:0a:b8:1d:80:f5:ec:
51:9a:6d:f1:77:8f:ce:fc:a4:13:d9:81:6c:26:b5:92:35:66:
3f:71:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:53:23 2025 by rpki-client