Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier: bSUqFQdG6HWQQZbt8415Tvibl6C26vm7EWs3O/E2Bqs=
Subject key identifier: 4A:B6:75:6D:90:81:35:6A:CA:09:39:6B:84:6D:16:C4:37:E1:A2:08
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial: 01965424BE1E7AF3B5281053142A2C014CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number: 12B9
Signing time: Sun 20 Apr 2025 17:00:16 +0000
Manifest this update: Sun 20 Apr 2025 17:00:16 +0000
Manifest next update: Mon 21 Apr 2025 17:00:16 +0000
Files and hashes: 1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=)
2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=)
3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: l+AoQno9lXO4LEbE8T5hUV+2JsMSt/A1eX9uIrM70eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:be:1e:7a:f3:b5:28:10:53:14:2a:2c:01:4c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
Validity
Not Before: Apr 20 17:00:16 2025 GMT
Not After : Apr 21 17:00:16 2025 GMT
Subject: CN=4ab6756d9081356aca09396b846d16c437e1a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:70:f3:26:af:96:60:49:2e:0c:cf:3c:f5:
d7:23:96:34:93:a1:4c:86:68:fd:1c:74:24:bb:f7:
fa:49:41:4e:aa:fa:19:c2:4c:ac:42:bb:0a:50:4c:
d4:3f:a0:36:0d:ab:4a:da:43:76:84:24:bd:6a:93:
84:a2:65:8d:b5:5e:58:ea:b4:0a:d7:a6:66:67:dc:
5b:e4:f1:66:b5:b0:a5:0e:38:06:fb:6d:16:47:76:
00:22:45:86:b0:7c:f0:6e:56:4f:cc:65:04:4d:57:
b4:16:66:b8:18:4c:87:bf:2b:6f:69:5b:61:58:64:
82:6a:cb:7e:be:43:9b:9c:d6:1f:60:a9:94:b1:07:
f2:83:99:43:8e:12:3b:84:76:32:c2:f4:79:19:42:
aa:7f:40:ec:06:79:9e:8a:5d:b3:f5:78:53:00:59:
98:e5:42:94:58:73:8e:9f:69:ed:6b:0c:f0:42:52:
12:a0:88:09:b9:60:a1:48:a5:a2:5e:06:49:a2:9b:
c0:ad:7c:a1:99:4e:7d:cd:d3:9f:be:f5:90:df:0d:
7d:0d:be:94:7f:53:01:13:6b:d7:fb:b6:9c:19:12:
98:ab:22:c4:d7:b4:48:3f:28:1d:15:6c:1e:7f:83:
58:02:94:22:87:3e:17:cf:bd:b8:d9:8d:03:6e:90:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B6:75:6D:90:81:35:6A:CA:09:39:6B:84:6D:16:C4:37:E1:A2:08
X509v3 Authority Key Identifier:
keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:29:ac:9f:b8:ce:27:e0:de:11:9e:28:3b:52:1b:69:f3:
a5:c1:50:0e:0f:04:67:1c:a0:13:b0:77:cd:9c:ff:ea:63:3b:
ff:18:f0:3d:d0:88:ff:f7:ab:ec:7c:1d:d7:ea:2a:a5:ac:fe:
57:53:c3:16:32:eb:cc:0d:2d:66:d3:cd:88:9b:3a:ae:47:e4:
55:a1:7c:9f:04:9e:60:7a:ec:d9:e4:11:96:69:ec:c9:c3:54:
e7:b2:da:2f:84:55:93:5d:6c:c4:2f:81:4f:e7:fe:f8:27:a3:
55:61:5e:a0:6d:55:f3:0b:51:8c:c4:3d:c6:6b:13:47:f1:b1:
54:d3:fb:ea:f5:96:ef:7e:23:46:f9:da:c4:b7:0b:a4:52:e2:
b8:0a:ca:f5:b0:92:f8:75:2c:b4:4c:45:52:38:1c:c8:74:44:
29:b5:a2:db:97:4f:b2:09:a0:95:0f:9d:7a:02:11:ae:a7:7f:
6d:47:db:26:39:19:4f:46:6a:4d:08:53:5a:75:a0:58:85:04:
08:37:d5:03:9a:0b:59:a5:9f:e0:27:ec:20:d3:d9:d8:51:01:
78:17:4d:cd:bf:82:1c:51:08:2d:5f:91:dd:f0:44:ad:91:65:
98:be:a9:ea:cc:6d:a1:3d:25:d3:0d:6b:7e:c3:79:74:70:ac:
be:17:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:23:58 2025 by rpki-client