Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File: wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier: xqcHwDAC4MGcwNcSpIfu5hHb4daxAPuux+z/BupoT0Q=
Subject key identifier: 09:BA:03:E2:20:D5:0D:F7:74:EF:5F:C4:DD:06:83:BA:8A:C7:01:2D
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 019656137A652633E323B6ECE289C11066D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number: 1314
Signing time: Mon 21 Apr 2025 02:00:39 +0000
Manifest this update: Mon 21 Apr 2025 02:00:39 +0000
Manifest next update: Tue 22 Apr 2025 02:00:39 +0000
Files and hashes: 1: 0I0Fa0O7Xqk8PAo5VRR9HwHSvFo.roa (hash: VDz1V6rPF+444e2I1uldEDzVvDGxCwDp5UCK6SCxm94=)
2: 20U7SL-48kkH7iK0DO4f8T7R21E.roa (hash: GmOKvt6kHI1bE0YH6oqXpTeejjgDh3Wthg7QwYWtufU=)
3: cIRs34GrM17DP76r2K4VKlnq1i8.roa (hash: gvtYS4ycN0WNeVX6nyckWypk1ijeZALWriynsiEgZyQ=)
4: irZgQBJdGnmucTekqqp2deRaSYE.roa (hash: exMITnVVS0zVwAaCFgSt1eOayd7B5fiXvzvzStQ9hxA=)
5: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: A7ebTvxycPW5JL2VUQNPv95hobOkY8GPcKV1O6cF05E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:7a:65:26:33:e3:23:b6:ec:e2:89:c1:10:66:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Apr 21 02:00:39 2025 GMT
Not After : Apr 22 02:00:39 2025 GMT
Subject: CN=09ba03e220d50df774ef5fc4dd0683ba8ac7012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8d:17:eb:f4:0c:ac:52:89:2a:1f:c9:e1:23:
f3:d7:ed:2f:52:a6:57:c6:c4:55:cb:29:eb:f2:47:
06:3b:1f:13:69:9c:79:bb:44:9f:f8:5c:40:d7:3b:
53:0c:3e:d3:66:81:63:3a:57:2f:f5:7c:28:a9:95:
52:78:a1:60:b7:fd:b4:01:6a:05:ad:ad:85:1f:c4:
20:0e:bd:f9:00:88:cf:01:41:56:5b:9b:33:5b:67:
29:8a:66:ed:ea:ee:ab:21:25:21:00:e0:8a:7b:17:
c7:24:04:9e:ba:be:f8:bd:ca:16:a0:42:e3:72:89:
b5:82:06:09:2c:80:c5:56:e9:85:fc:48:2e:7f:4d:
00:66:68:d0:2f:e4:00:29:00:9b:cc:15:f9:6e:b9:
60:f1:4a:c6:23:67:fb:55:26:60:14:f7:a1:7d:42:
44:c3:a5:be:d5:aa:36:0a:52:86:bf:82:08:33:d2:
80:be:35:e8:05:b7:88:f2:6a:f1:12:f6:88:a1:2d:
9f:f5:f5:78:1f:a1:5a:14:28:c2:99:02:ed:1b:d7:
49:66:06:a7:51:41:a4:7f:8a:f0:75:d2:9c:54:28:
44:b3:58:79:c4:ac:d6:0d:eb:fb:de:46:bf:61:ec:
49:74:61:c8:77:80:71:77:79:81:d4:12:70:4c:5c:
3e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BA:03:E2:20:D5:0D:F7:74:EF:5F:C4:DD:06:83:BA:8A:C7:01:2D
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d0:0a:e1:b5:14:d3:5c:aa:3d:7d:67:f3:c1:3f:7d:18:e6:
83:bd:33:6e:3d:20:4c:b2:b6:2b:fb:97:d1:2d:ab:ec:68:7a:
17:a6:7a:8f:21:56:b5:6c:f5:9f:ae:bf:70:8c:40:6b:53:52:
08:7b:58:51:c3:db:9c:14:4b:b7:e7:ba:6d:d8:96:f0:ad:05:
e6:fe:a8:91:f8:58:af:99:03:43:81:51:56:77:98:f5:12:64:
f8:ec:62:ad:88:a6:ef:d6:67:1f:0d:8b:88:f6:da:03:0c:05:
72:b3:88:4b:f7:74:39:1e:ad:f9:07:3c:30:bd:22:65:79:4d:
aa:51:ae:7a:36:06:86:17:20:88:18:7c:56:bb:e1:0a:0d:11:
41:c6:ca:56:5a:85:43:6d:70:36:be:57:0b:38:be:ae:98:2b:
ef:c6:34:aa:0d:22:45:26:3f:58:7c:70:3b:cc:6f:f2:ab:3d:
78:19:5f:80:5d:38:02:e4:e3:28:5f:b8:e3:a2:ba:7c:ec:96:
f0:13:67:8f:dd:5b:52:8b:25:ae:a4:ff:8b:54:a5:db:7d:e1:
2f:5d:fe:9a:dd:61:a6:20:33:29:9d:b5:76:fb:37:63:94:12:
3b:52:5f:8c:00:39:50:97:13:1a:b4:c0:06:c9:f5:ae:6f:07:
29:ed:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:02:18 2025 by rpki-client