Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
File: _WNpJxttE6au3Koj67KeKbeWpGs.mft (raw, json)
Hash identifier: CHZ5d0eysFxKDxhviMX0JCJpgvf7EzZLCheOMuHDKAA=
Subject key identifier: AA:1F:EA:B7:C0:0C:FA:B1:8A:D9:0C:0C:FA:70:7A:C9:BB:C4:86:92
Authority key identifier: FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
Certificate issuer: /CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Certificate serial: 01960E328BF6A5DCC928F2648496BEFA2337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
Manifest number: 0F0F
Signing time: Mon 07 Apr 2025 03:01:55 +0000
Manifest this update: Mon 07 Apr 2025 03:01:55 +0000
Manifest next update: Tue 08 Apr 2025 03:01:55 +0000
Files and hashes: 1: _WNpJxttE6au3Koj67KeKbeWpGs.crl (hash: RBoxb/cBkzlffnOkOyuDCE31V96n+vOfVYuYyPUVnsE=)
2: jJZ2HGBh9sf4zKvFBoawkCSE36M.roa (hash: /j0hgJuEgbh9wJPPT5skbRnDVTk4N5FaC35FuOjVz1M=)
3: lhJ5RbjQbCIcx6Snzw8-3JVMgGE.roa (hash: VcH6B7wbqshRYaE0Py9Bav3UnTpHMEOSu603CVWuDjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:32:8b:f6:a5:dc:c9:28:f2:64:84:96:be:fa:23:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd6369271b6d13a6aedcaa23ebb29e29b796a46b
Validity
Not Before: Apr 7 03:01:55 2025 GMT
Not After : Apr 8 03:01:55 2025 GMT
Subject: CN=aa1feab7c00cfab18ad90c0cfa707ac9bbc48692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:d2:b8:d8:04:14:74:4a:64:86:b6:bd:a7:
62:7c:fd:f3:66:b7:c2:7c:d5:8b:3b:dd:07:18:27:
e5:43:40:cf:f3:d8:b0:45:91:46:96:0e:47:47:25:
50:3e:11:c6:47:78:b6:a7:ff:9d:3d:06:ad:ad:58:
f7:e9:6d:1b:95:7d:14:ca:3e:bb:97:91:ed:4b:8d:
49:57:b7:ec:83:ae:bd:e4:38:e4:2f:96:4c:72:1a:
9c:df:33:cd:ce:1c:e5:c8:a2:bf:fb:5c:f3:b0:e4:
1a:39:33:d7:eb:0d:0e:67:46:69:24:c0:c0:fd:14:
0e:82:12:94:92:5a:c1:c2:e4:68:90:38:77:a6:11:
4a:e8:d9:3a:8d:af:c9:cc:58:e0:ab:18:e5:d9:1b:
13:43:f0:f3:5e:c9:3a:0c:35:20:6a:2b:48:df:dc:
1a:31:b1:4a:e9:94:f4:ec:db:23:1e:54:a1:0d:9d:
b8:8b:11:e2:41:ef:30:0e:a0:4d:89:aa:3e:b6:06:
bd:33:ab:ce:fe:1a:a3:0b:22:70:ff:2a:20:26:93:
03:76:db:85:e7:0a:11:fd:29:27:c5:59:7a:4a:cc:
72:f4:fb:37:ce:f5:d9:0d:f2:a3:01:cc:50:66:30:
58:86:e5:81:72:32:d0:f4:ee:98:d1:0a:f3:89:fe:
a4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:EA:B7:C0:0C:FA:B1:8A:D9:0C:0C:FA:70:7A:C9:BB:C4:86:92
X509v3 Authority Key Identifier:
keyid:FD:63:69:27:1B:6D:13:A6:AE:DC:AA:23:EB:B2:9E:29:B7:96:A4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WNpJxttE6au3Koj67KeKbeWpGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ed5e15-4f14-49e6-a6dd-45351f9dbb52/1/_WNpJxttE6au3Koj67KeKbeWpGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b8:96:b6:85:be:fc:ef:78:c2:8a:c9:03:c4:10:ab:2a:e6:
c6:65:30:67:0a:7f:07:99:a7:13:08:14:71:a9:2b:c9:e1:06:
61:4e:3a:93:b4:ee:e0:78:36:3b:6d:e6:5c:54:6c:5b:a7:8a:
cb:01:ca:5f:b4:00:b9:0a:13:a0:0a:e2:25:e0:9f:78:fa:e5:
4d:92:91:72:c2:18:b2:c1:d1:f7:37:bd:cf:98:74:60:1e:c2:
36:de:6d:ce:a7:a0:b2:d7:b2:41:18:6f:0c:01:ec:2d:e7:4c:
34:22:8b:7d:a2:00:b6:b6:4c:e7:ba:e0:50:bd:3b:48:b3:8e:
41:48:45:6c:98:cf:47:f6:d6:e7:7e:e3:48:eb:47:26:5d:a7:
c2:00:80:0e:2f:37:5c:e4:f0:5f:cd:f6:1d:2e:23:a1:c2:ef:
26:61:98:a6:70:b9:e2:0f:e9:e5:35:15:38:3a:f6:95:1f:9c:
0c:80:eb:ef:60:7e:6d:1a:50:2a:b1:90:b7:84:6a:b0:60:46:
f9:44:a4:20:cd:bb:fc:2a:e8:3c:fc:41:de:d4:d6:3f:8e:22:
e0:73:99:4b:f8:29:52:06:55:02:5c:e3:f5:a9:f2:85:de:2d:
55:d9:67:bd:0e:e0:c3:c9:91:e0:c1:b0:77:bc:00:d2:0d:c7:
94:48:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:31:38 2025 by rpki-client