Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File: w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier: v0e4t5gXiq2/BQpFt8ZKtpagtyTP0DdYBLqfP2iYzuQ=
Subject key identifier: A1:44:10:51:66:18:38:EF:B5:2F:4A:C7:F5:BC:24:77:7C:3B:E8:B8
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial: 0196127CAACFA0421143BC9FC725FB6AB20D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number: 14E7
Signing time: Mon 07 Apr 2025 23:01:22 +0000
Manifest this update: Mon 07 Apr 2025 23:01:22 +0000
Manifest next update: Tue 08 Apr 2025 23:01:22 +0000
Files and hashes: 1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: mDFRm3KIiD9O/jOAht0548jE+vCp6caezVvBhYBbGgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:7c:aa:cf:a0:42:11:43:bc:9f:c7:25:fb:6a:b2:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Validity
Not Before: Apr 7 23:01:22 2025 GMT
Not After : Apr 8 23:01:22 2025 GMT
Subject: CN=a1441051661838efb52f4ac7f5bc24777c3be8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:18:f3:82:ab:c6:53:4b:2d:70:1b:65:23:13:
e7:a0:cb:75:e6:0f:d9:b5:5b:a3:15:22:76:fd:33:
38:82:9d:68:5e:71:67:31:86:f7:44:27:3d:48:6f:
7f:00:71:f1:4b:b0:b1:e2:0f:7c:1d:7e:75:4a:f3:
2e:e7:52:dd:40:00:d4:3b:1d:19:07:7d:4c:b1:43:
c7:8e:ac:8b:50:ef:ed:5d:fa:26:0b:e6:a9:4e:c7:
e4:80:e8:08:ec:0e:cd:a2:bb:a5:ca:e1:dd:d2:2c:
6c:59:ad:11:41:bf:b8:36:87:34:53:45:fe:11:7d:
84:b1:27:21:9d:a0:b2:73:ab:79:93:32:f3:dc:9e:
b4:05:27:0b:d0:9b:14:f0:63:60:3d:b0:3d:f4:49:
5b:6e:83:27:2c:05:7f:47:e5:53:6d:4f:32:d3:20:
4a:ae:4c:c0:d5:8c:de:ab:06:77:ae:55:0a:d6:0d:
4d:67:0f:7a:4e:6e:f4:5f:c2:7e:34:9f:b5:7a:7e:
28:7b:14:d3:a9:df:8e:2b:9b:e6:22:6f:72:8c:8c:
49:57:6f:2b:40:82:3e:41:00:19:ff:8a:39:c7:34:
ec:6e:84:1e:14:a7:a5:91:d4:f9:ee:29:6e:97:e0:
a3:ef:4b:ec:83:c5:f2:ac:42:2e:c1:bc:8a:33:08:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:10:51:66:18:38:EF:B5:2F:4A:C7:F5:BC:24:77:7C:3B:E8:B8
X509v3 Authority Key Identifier:
keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ca:77:9f:b6:74:b3:a8:5f:fc:b5:a6:c3:2c:86:0f:72:e4:
cb:c3:18:c3:33:b0:3a:a5:e7:47:ec:a2:e3:9d:81:90:88:60:
39:86:6a:2b:99:81:32:6f:c1:0c:5b:07:f1:92:00:34:10:02:
9a:ee:27:5b:28:0c:87:1f:49:cb:4b:a6:0b:fc:84:2a:e2:ab:
65:7e:36:f5:6a:6c:c1:d0:ab:80:9a:99:aa:bd:4f:4c:75:1f:
55:d2:c5:6d:2e:22:23:8a:4f:fa:e1:ca:82:0d:64:2f:50:ed:
d2:af:53:50:e5:fc:79:64:78:79:7c:a5:67:92:fd:5a:39:a0:
e5:25:fa:e4:c3:ca:cd:4f:a7:ed:f2:68:89:10:f2:55:17:ca:
cf:b8:78:2e:c7:bf:af:4c:ae:9f:21:a5:aa:ae:6b:9a:bb:4b:
2c:88:eb:ae:36:a1:9e:5a:ab:fa:ab:1f:de:be:c5:e4:67:77:
a5:16:14:f5:dc:4a:a1:5b:60:19:c3:51:6d:5f:bf:93:43:b8:
06:e5:61:89:18:a5:5d:2f:24:18:cb:f1:68:81:61:e4:ea:3f:
ac:ec:5d:7f:ec:c6:9d:df:06:8d:ce:73:da:4f:3b:28:e5:cd:
3c:fa:fb:e8:7d:58:1c:fc:13:fa:f9:48:e7:88:f3:db:5d:0d:
52:59:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:31:42 2025 by rpki-client