Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File: wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier: rgJIqgPDz+JGL1LXTYhGUL7FjiLEbaVpirty6qAT7YU=
Subject key identifier: 3F:9E:F2:58:11:A4:9F:96:F2:41:CC:1F:1E:0C:F7:F7:64:7F:49:6A
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer: /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial: 01963F8BB01ECEB344CB6A731ED255B1B275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number: 0468
Signing time: Wed 16 Apr 2025 17:00:41 +0000
Manifest this update: Wed 16 Apr 2025 17:00:41 +0000
Manifest next update: Thu 17 Apr 2025 17:00:41 +0000
Files and hashes: 1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: KhjuLdxYD592z687zl3myZKQntlkW+2tpCBWJf3ro9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:b0:1e:ce:b3:44:cb:6a:73:1e:d2:55:b1:b2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Validity
Not Before: Apr 16 17:00:41 2025 GMT
Not After : Apr 17 17:00:41 2025 GMT
Subject: CN=3f9ef25811a49f96f241cc1f1e0cf7f7647f496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:61:be:4c:62:48:cd:6f:f9:54:8b:2b:b1:
e0:61:d0:9e:f0:e8:00:f9:7e:b5:6a:aa:9a:31:20:
52:f2:44:bc:7a:b4:39:48:23:4e:b8:2c:00:cc:ce:
25:34:2a:61:87:fb:2a:56:21:70:ea:ba:53:66:05:
9e:ae:aa:80:92:b5:ec:b5:ba:20:32:d0:c9:93:05:
a2:59:b8:ca:40:10:cd:d6:9b:f2:f4:39:d1:47:7d:
5c:25:ad:fd:bb:ba:ae:dd:b7:8e:6f:36:50:d2:45:
db:78:93:58:45:8e:7f:74:de:b4:ec:b9:1b:c2:49:
7a:8c:c5:45:fa:d7:ad:5e:ee:6e:28:24:ad:6f:cc:
35:a6:46:cc:dd:6e:83:a5:a9:90:75:ad:ae:b5:45:
51:4b:f0:c4:6d:c6:8f:e6:2a:1f:5a:47:2c:0f:58:
10:34:f9:e5:e6:f5:c8:cd:4f:31:16:41:50:7c:90:
e2:a3:c3:bf:40:a0:c4:c9:2d:17:00:06:df:4f:90:
b3:82:5f:b9:f9:1c:7c:2b:f6:fe:b8:58:89:79:db:
9c:45:c2:22:95:9d:ff:6a:32:b3:88:6c:ad:cb:ea:
80:97:fe:59:63:88:bd:13:f5:bb:1d:3c:7f:bb:5d:
f7:92:51:d2:58:88:42:f4:50:ae:9d:ba:b7:c9:d1:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9E:F2:58:11:A4:9F:96:F2:41:CC:1F:1E:0C:F7:F7:64:7F:49:6A
X509v3 Authority Key Identifier:
keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:81:d1:8f:44:5f:34:b7:d2:79:66:e8:cc:57:ad:6c:b3:d0:
ef:86:a3:d7:dc:fb:76:fe:56:6e:b6:92:f8:6a:49:4f:17:0d:
55:8d:6a:0e:af:2c:b4:d2:85:97:ad:71:64:2a:ba:e4:59:a3:
af:5e:f0:f1:f4:88:ed:82:21:dc:e7:bd:88:12:d0:a8:46:34:
18:4b:cf:44:17:94:9e:6a:b8:43:a1:f2:07:00:c0:f5:7a:ef:
67:90:41:5d:28:0f:d0:da:32:bd:36:16:2a:13:a5:a2:13:22:
7e:81:99:7c:46:3b:86:e1:04:5c:12:ba:79:f1:25:79:62:15:
29:cd:b9:f2:06:b9:de:3e:57:5a:e8:d5:52:ee:2e:83:38:b8:
6b:a4:dc:1a:73:a1:57:b4:89:6e:f6:7c:f3:04:b0:d8:78:94:
7f:26:02:ce:9c:b3:6e:71:03:e3:13:ba:76:25:1b:3c:5b:68:
1b:2f:58:b7:d9:0b:e2:cc:27:0f:c8:eb:17:6f:66:ff:d7:83:
13:b8:cf:9f:c5:d8:1a:43:61:89:5b:77:ca:87:4b:d7:87:51:
2c:0c:e0:17:11:16:f0:93:71:2f:09:91:6f:a4:50:9e:0d:db:
0e:10:79:03:75:57:b9:89:77:5c:11:2f:be:e0:d6:65:4a:ad:
69:b2:00:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:52:50 2025 by rpki-client