Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File: w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier: 7o+dTjOvdyRZB1puwDgW9xcFRC10A3kGuTPmCakXvis=
Subject key identifier: BC:89:59:B0:12:C2:F8:89:F9:32:C8:99:9A:2B:09:AE:96:5B:C9:27
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer: /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial: 01962ABCB1500964490C095E534975D4C57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number: 14E7
Signing time: Sat 12 Apr 2025 16:02:11 +0000
Manifest this update: Sat 12 Apr 2025 16:02:11 +0000
Manifest next update: Sun 13 Apr 2025 16:02:11 +0000
Files and hashes: 1: a_tI6HP1FzzUH0r0poa89IN3meo.roa (hash: W0Z3kY29z8HP1pU9kcp4FsO8DLdrIX+XsxzLiYSWp8o=)
2: n66sSu3oH6YqRjQYMkqXYnUVvGI.roa (hash: oBf8U9TtdYD0BgLgRABjFu+My106UWYSpVHQ13ZhmvY=)
3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: d+9GZzQL3xUI49PwZoFMAHQftMcFgQO54BpWGkizK20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:b1:50:09:64:49:0c:09:5e:53:49:75:d4:c5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Validity
Not Before: Apr 12 16:02:11 2025 GMT
Not After : Apr 13 16:02:11 2025 GMT
Subject: CN=bc8959b012c2f889f932c8999a2b09ae965bc927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e1:07:ee:04:33:8e:42:72:8c:3a:ba:6c:55:
7f:49:64:e2:be:d1:eb:e3:2f:76:da:36:6b:5e:70:
b8:b6:a8:1b:d2:0a:a6:cf:34:cb:df:76:e7:8d:9a:
17:fc:3f:af:d1:ce:f3:9b:7f:bc:df:7c:0d:0d:6f:
12:85:16:e7:69:43:70:ce:73:54:04:4f:9b:83:b0:
af:e2:26:1f:6c:96:39:04:ff:ec:a1:0c:c3:b1:2e:
75:94:70:b8:cb:18:ed:ec:00:3c:cc:d5:47:6c:7d:
0d:a5:c3:1b:9f:7a:64:f1:22:50:09:28:3a:df:c6:
60:6a:19:6f:38:84:b3:b5:32:0f:2b:e7:5c:83:4c:
c6:1b:d6:2f:24:e7:f6:c9:27:0d:cc:54:68:a5:9a:
4c:52:64:07:c5:d9:8a:66:9b:7d:ce:eb:bf:a0:97:
31:fb:d0:4d:f9:bc:2e:45:0a:82:f9:91:e3:f0:78:
3d:96:eb:f5:4a:02:1f:29:fa:d2:b7:d9:6b:e8:18:
7d:c2:19:2b:4b:52:c7:b7:85:d0:3a:e7:ec:57:0d:
0e:e8:67:eb:32:e3:d9:92:bc:ae:06:e5:76:e9:1d:
56:a0:b8:8b:8e:53:91:bb:fc:5b:44:09:d7:fc:43:
b7:11:50:6d:73:b9:1a:67:e6:2b:5c:a6:21:72:4b:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:59:B0:12:C2:F8:89:F9:32:C8:99:9A:2B:09:AE:96:5B:C9:27
X509v3 Authority Key Identifier:
keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3e:ee:7e:9c:0c:f4:2c:30:5f:65:63:b1:f0:8e:ea:19:78:
8b:59:96:d9:75:9d:48:ae:0e:db:d6:cf:1e:03:88:00:6f:3b:
14:95:0d:9d:a2:c7:6a:61:99:54:9e:cd:18:78:27:a2:4e:a9:
f5:71:27:fc:18:08:f9:c3:2d:f5:d9:1c:ce:45:82:88:73:d3:
08:8d:bc:93:40:da:c9:c1:25:bd:2b:88:22:53:58:6d:68:e9:
09:f2:5a:5d:65:7a:ed:48:e2:05:ea:c6:2e:68:7a:d5:d5:3b:
ee:95:c9:60:9d:45:c4:e5:35:01:93:9e:8a:7e:3d:f3:de:07:
a6:b2:5f:ac:79:a5:70:50:65:dc:90:ad:66:95:86:b7:ef:b0:
d6:f1:ff:ac:5d:0d:52:93:47:72:58:97:9b:67:58:ec:60:79:
3c:76:d3:74:55:f0:fc:e4:65:82:70:83:51:2e:81:ee:20:19:
9e:cc:2c:ec:86:dc:c9:4c:20:89:5d:4b:bc:e8:ad:d3:0d:ae:
20:6d:fb:2c:a6:4d:02:9d:1e:4a:af:59:2a:24:26:c1:fb:4e:
dc:c0:0d:76:54:81:88:d0:27:5d:eb:b8:fd:b0:62:ea:6e:86:
46:f3:ae:2e:44:bc:5d:fb:bb:e2:6a:f5:79:66:79:13:77:40:
d6:7a:08:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:12:19 2025 by rpki-client