Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: Nmj3qUNi/tczDVEIF4eEn6UXGRaWNA3RwY/PyeLisMM=
Subject key identifier: 65:2E:2C:66:EA:44:3B:23:BE:4F:D1:FD:F2:15:0A:4C:58:25:BF:70
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 01965492FE90436AAF5F6122695F25DB510B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 04E2
Signing time: Sun 20 Apr 2025 19:00:41 +0000
Manifest this update: Sun 20 Apr 2025 19:00:41 +0000
Manifest next update: Mon 21 Apr 2025 19:00:41 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: QLhdsu+J994SghvA9SQDj0oUYEzUSoFiA5N6arZreoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:fe:90:43:6a:af:5f:61:22:69:5f:25:db:51:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Apr 20 19:00:41 2025 GMT
Not After : Apr 21 19:00:41 2025 GMT
Subject: CN=652e2c66ea443b23be4fd1fdf2150a4c5825bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:ea:a3:5b:0e:cc:ef:05:95:b5:71:47:c7:
58:c6:a4:bd:82:c2:1c:f9:c0:4e:bf:36:e2:38:ce:
23:b6:74:7c:47:7f:34:8c:5e:97:6c:5c:2b:47:ad:
14:02:7e:f5:7a:8e:b1:b3:7e:49:cc:1d:50:e9:b2:
e9:19:8f:b8:8d:68:ce:86:57:56:d5:86:30:83:d2:
2e:1b:74:80:ec:70:6b:ab:5d:eb:fa:08:2f:b7:78:
57:de:90:de:b5:3d:10:78:d8:ee:20:00:4d:62:8d:
9a:e3:64:2f:d5:d6:75:bc:5c:a5:61:b6:8b:4b:bf:
58:ac:22:a8:5c:b0:89:46:71:be:ce:08:d7:a7:29:
34:75:13:7c:89:ef:91:d6:0f:f3:46:9e:5c:8f:c6:
c5:c2:22:fc:51:a8:40:22:e6:61:3f:0c:72:d5:50:
33:02:8b:7b:52:1c:0d:d9:c4:13:38:69:32:65:bd:
84:ee:5a:d7:72:f4:4b:17:7d:3c:5e:56:8a:17:29:
56:8c:cb:bd:c0:92:f1:61:b9:ba:35:12:77:ba:64:
43:5f:a6:56:20:51:37:86:41:e2:4f:1d:f5:12:49:
f6:26:eb:7d:02:35:b6:8b:2d:94:ee:c3:1c:f8:1a:
27:5a:63:12:68:fe:25:75:09:b0:10:e3:b4:8b:34:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2E:2C:66:EA:44:3B:23:BE:4F:D1:FD:F2:15:0A:4C:58:25:BF:70
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b6:85:01:4e:77:f4:f8:c8:54:81:15:43:95:a8:ad:c6:4d:
08:01:e5:4b:95:bf:7d:af:06:2b:40:80:64:69:a7:f4:8f:8c:
53:12:48:39:52:09:fb:89:02:ed:99:24:4a:82:90:34:93:e4:
39:d8:34:fa:d3:b0:41:b0:5a:4f:3a:d1:25:96:aa:ac:a7:ba:
1d:4e:9d:ab:1f:39:9e:60:db:53:7a:77:2e:2d:bd:c3:60:1f:
4c:b3:fe:8a:cb:a9:32:e3:cb:e0:1f:89:87:e2:96:b2:3b:d5:
2f:b4:6d:65:35:1c:a6:41:61:00:3b:95:cf:b3:d9:fe:bc:33:
9b:03:45:8e:d8:ce:c1:d2:68:d3:eb:50:ad:fc:0f:4a:cd:1d:
92:19:46:da:ec:0b:9d:88:37:e1:eb:f2:20:68:7f:0f:e6:55:
39:ba:38:23:87:67:63:5d:b6:76:7c:fc:15:bb:26:e6:21:3e:
a8:f7:28:49:1d:cf:98:8d:c8:c9:58:9a:ec:c0:ec:3e:85:59:
f7:c8:c8:a1:e7:d6:2b:f9:ae:43:d1:df:6f:00:17:5e:0b:67:
4c:b9:9f:08:ba:3c:25:10:44:d8:f6:bb:c7:e1:93:c8:ed:ab:
d3:c1:54:25:16:81:45:e6:9c:42:06:c8:19:e3:b9:89:52:3d:
7b:0b:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:30 2025 by rpki-client