Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
File: wi1VOyjF0OpbHvYMm84z31C8tJM.mft (raw, json)
Hash identifier: OyTtIIwtDGbeOQL7VTdLGFY3p6iloGU8KEjO6VUWSJc=
Subject key identifier: 02:0A:02:2F:D7:40:08:1A:D3:B4:F7:F3:38:F7:E1:2B:EB:C3:E6:EE
Authority key identifier: C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
Certificate issuer: /CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Certificate serial: 0196507F2FE58E7D65EF4A8250D2C0F809F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
Manifest number: 0DF8
Signing time: Sun 20 Apr 2025 00:00:34 +0000
Manifest this update: Sun 20 Apr 2025 00:00:34 +0000
Manifest next update: Mon 21 Apr 2025 00:00:34 +0000
Files and hashes: 1: 2if-W7_9B6ndVwa4CXKbXlfYipY.roa (hash: x6w8qlU6igwl5cXDxoZUE8Lr1i8+UZJJXlmem9XWOSg=)
2: iNIpA6NRoHEtD1Gdwv0RcZxMEOY.roa (hash: QoWSCTkZW/GH9j1mmy2Sv0c+Jd5oUQpoqRVhrzgy26s=)
3: wi1VOyjF0OpbHvYMm84z31C8tJM.crl (hash: 1FzqAneYyf6k9//3M3BdkMW062AhgF+h/HGbPiAfCQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:7f:2f:e5:8e:7d:65:ef:4a:82:50:d2:c0:f8:09:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c22d553b28c5d0ea5b1ef60c9bce33df50bcb493
Validity
Not Before: Apr 20 00:00:34 2025 GMT
Not After : Apr 21 00:00:34 2025 GMT
Subject: CN=020a022fd740081ad3b4f7f338f7e12bebc3e6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:4d:d5:35:10:28:c8:d0:d4:24:75:31:a8:
fb:af:02:0b:a6:20:0f:f1:a4:24:57:0f:b6:b2:de:
32:10:58:bd:ab:db:5d:b5:69:b9:35:99:e8:26:60:
5f:7d:68:60:91:fd:a9:b4:19:e7:fc:ad:da:ea:8f:
67:29:a7:c8:d9:f5:07:db:71:d1:53:c6:8a:57:35:
4e:e5:8b:f5:7e:dd:aa:fa:9f:c2:fc:20:02:d3:42:
59:ef:00:0e:92:45:0c:f2:59:54:cf:00:3e:ef:ae:
2c:06:89:c5:4f:af:8c:89:aa:1c:28:98:e3:d2:33:
1a:91:ec:f5:df:57:a4:dd:b9:9a:5d:ad:99:b3:36:
58:64:0a:aa:ac:cd:57:56:73:e6:c3:80:a6:3d:2c:
80:e5:04:37:4a:98:cd:ab:2b:7b:75:18:d0:1b:ab:
fd:3c:15:88:36:e4:1b:8a:08:08:b9:fb:d1:58:a1:
a6:47:6f:e3:42:45:b0:04:94:30:d3:4b:61:9e:4a:
6a:c1:d4:62:bc:95:3c:48:32:5c:16:7d:be:29:de:
29:43:3e:96:01:19:6b:fb:53:8a:a7:bf:70:50:30:
80:27:22:b5:12:fd:37:35:31:ba:5f:c7:aa:54:0e:
46:f3:ea:f0:c2:b1:e4:30:7b:ae:05:3a:5c:93:72:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0A:02:2F:D7:40:08:1A:D3:B4:F7:F3:38:F7:E1:2B:EB:C3:E6:EE
X509v3 Authority Key Identifier:
keyid:C2:2D:55:3B:28:C5:D0:EA:5B:1E:F6:0C:9B:CE:33:DF:50:BC:B4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi1VOyjF0OpbHvYMm84z31C8tJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e17644-93d4-4457-8e5e-9675068857f1/1/wi1VOyjF0OpbHvYMm84z31C8tJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:f9:d2:eb:31:12:85:9a:4f:d1:79:45:f9:0f:c0:36:69:
a3:31:3d:16:7e:7f:c1:e0:69:d8:7d:7c:78:3b:d6:dd:01:fe:
68:4f:b0:21:a3:58:50:2d:94:cf:dc:de:37:cd:b3:d9:f6:ee:
38:47:52:6f:f0:68:a6:a0:36:48:9f:98:ca:2a:e2:d0:ae:26:
75:f9:a5:51:78:ad:36:44:5c:1b:87:28:87:37:df:2e:c1:8b:
0f:76:77:d3:e9:0d:03:5f:c4:6d:a4:3c:68:eb:a7:bb:52:10:
49:c6:de:5d:6d:ad:1e:8c:b3:49:96:04:eb:75:2d:e7:34:5d:
fe:3f:db:52:d0:a9:29:72:fa:a8:d4:ff:33:44:b4:43:bf:d9:
f4:70:06:85:8a:18:8f:e3:9b:31:2d:a0:15:61:66:4b:45:ef:
03:d3:8b:44:75:70:47:65:24:cb:fe:0b:03:9c:78:6a:88:68:
07:32:c9:20:36:d6:fc:b7:1d:be:8a:ce:ad:b3:8b:b6:83:78:
f3:7f:e0:e3:78:ef:31:8c:df:36:99:f1:a9:aa:7e:3f:58:97:
e1:1c:0d:23:07:4d:c9:1e:61:5d:53:0b:cd:17:f4:5e:f5:b1:
03:38:c0:8f:6f:3e:c3:9f:72:ad:e8:70:e0:71:fd:48:63:72:
08:ff:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:20 2025 by rpki-client