Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json)
Hash identifier: etBSB/yJc4F0+5+gZGgnaNYIY9WkeI51Qsn9eqFsfd8=
Subject key identifier: 98:15:9E:41:A6:CE:3A:09:16:69:70:BA:6F:2D:20:C7:54:9F:1A:1D
Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Certificate serial: 01964EFED3B3ACFC1F31A505C58B1E0B3224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
Manifest number: 14FD
Signing time: Sat 19 Apr 2025 17:00:45 +0000
Manifest this update: Sat 19 Apr 2025 17:00:45 +0000
Manifest next update: Sun 20 Apr 2025 17:00:45 +0000
Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=)
2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: YWeRpOhXEEIxj0eQvdwFmU4AkniHC7y2A3e7+NgILEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:d3:b3:ac:fc:1f:31:a5:05:c5:8b:1e:0b:32:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769
Validity
Not Before: Apr 19 17:00:45 2025 GMT
Not After : Apr 20 17:00:45 2025 GMT
Subject: CN=98159e41a6ce3a09166970ba6f2d20c7549f1a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:56:c0:2f:5b:5c:19:16:6f:cb:5e:fb:e4:37:
38:0f:d4:8d:9d:46:9f:93:60:76:bc:48:17:28:bc:
52:8e:54:ea:61:b5:20:b0:e3:36:7c:7a:1d:07:89:
23:04:c0:38:3a:9a:85:f3:ba:73:10:7a:2b:7b:da:
50:bf:d1:47:48:aa:ed:f4:33:af:03:19:74:f9:11:
6b:a3:c8:8c:26:71:82:ff:22:6d:08:ea:75:98:15:
31:35:dd:b9:1f:86:ff:5d:76:3a:26:5c:53:fb:88:
03:e7:fe:c0:a6:f1:42:7a:cd:80:5d:32:be:4b:19:
03:6e:e5:75:ba:45:fd:e0:41:82:ab:19:fd:fc:73:
dc:ae:32:8a:5e:2f:4d:aa:f0:04:88:98:32:52:d3:
be:8b:fd:97:44:02:94:bb:af:2a:d2:72:d6:56:26:
05:bb:d2:67:03:4d:58:65:12:5d:33:28:0e:51:08:
ee:60:40:d6:91:00:4e:eb:f8:4c:d5:3c:cc:df:a7:
b2:a7:c4:fd:5d:7d:6b:26:ab:3e:99:5d:f7:a8:eb:
37:ac:71:de:cd:cf:d0:19:fb:58:48:b9:11:6c:24:
fc:b4:54:ed:a4:7a:2f:0c:e2:67:b5:43:39:5d:2a:
e9:b1:c7:f3:d0:0c:14:c6:a7:fe:f6:b6:06:0b:d5:
67:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:15:9E:41:A6:CE:3A:09:16:69:70:BA:6F:2D:20:C7:54:9F:1A:1D
X509v3 Authority Key Identifier:
keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:16:35:4c:8f:10:11:92:9f:37:c0:92:92:30:9b:ca:32:08:
e7:05:0e:ac:ad:77:fb:8b:2b:16:6e:25:c9:bf:53:f0:ae:0b:
61:65:b5:7e:92:12:c4:15:80:c4:6a:ec:4e:5e:01:51:27:29:
b5:ba:42:8a:c9:77:e1:29:cd:33:dd:d4:97:f4:88:d1:98:77:
94:7d:24:ba:31:5d:66:35:53:14:51:6f:c4:a2:3f:14:3b:56:
41:5e:69:99:08:1c:f3:f3:ec:48:77:8f:72:3c:1f:10:bc:aa:
c7:78:35:a0:91:a2:89:fc:13:b9:aa:1e:81:93:35:54:08:1f:
51:7e:aa:97:fe:5a:18:85:ad:08:7e:26:33:b6:31:0a:20:47:
72:1d:00:8d:06:af:dd:94:12:1f:97:68:6e:cb:d6:90:61:29:
1e:12:2c:f4:be:fd:4a:d1:0a:36:ac:73:d9:d8:67:c7:b5:c8:
ce:04:7f:f5:50:42:28:8b:06:ca:91:e4:f0:5c:c4:06:f4:4d:
9e:c1:65:90:14:70:94:c1:6b:dd:d9:3f:7b:36:75:63:6b:14:
d7:46:de:da:e7:8c:c6:02:5c:2d:75:04:3c:0f:0f:2c:61:62:
b8:2a:aa:c1:da:c2:31:ad:df:29:bf:f2:0f:08:7b:7a:c7:d3:
c6:77:16:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:33:57 2025 by rpki-client