Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File: w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier: GR9wMwBNC3CRVrLy6CW/dtET85fFha8PIwsITYGnW8Q=
Subject key identifier: BC:08:99:4F:55:C5:05:4A:9E:7B:F0:57:51:27:87:5F:03:7A:0B:BB
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer: /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial: 019653B6D72E72EA1C30F6805366EE0E2599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number: 0967
Signing time: Sun 20 Apr 2025 15:00:13 +0000
Manifest this update: Sun 20 Apr 2025 15:00:13 +0000
Manifest next update: Mon 21 Apr 2025 15:00:13 +0000
Files and hashes: 1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=)
2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: End/ia3uka5qLPxOR0PVTTpVUidp+OuhpNkauyoymeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:d7:2e:72:ea:1c:30:f6:80:53:66:ee:0e:25:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
Validity
Not Before: Apr 20 15:00:13 2025 GMT
Not After : Apr 21 15:00:13 2025 GMT
Subject: CN=bc08994f55c5054a9e7bf0575127875f037a0bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ea:d4:ed:3f:44:d8:8b:06:68:65:58:3b:26:
ed:e2:90:80:5f:3a:e6:27:a6:73:5c:fe:e3:72:dd:
8c:a0:eb:8b:1a:48:cd:01:b6:d2:e4:16:43:23:be:
d7:f9:88:c0:19:89:3d:52:06:3a:24:9a:27:3e:ee:
ce:05:c7:78:a8:2e:f6:21:5c:3c:6f:5d:42:8c:da:
82:94:57:df:3b:a9:c8:de:9e:5d:ef:67:9c:75:68:
a2:2e:63:b4:56:0c:7a:d6:11:23:a3:38:ef:be:19:
24:e9:9c:e9:df:dd:d4:6d:7a:78:7e:71:52:37:94:
dc:87:7c:b5:26:ad:dd:1a:aa:a8:a8:b3:98:97:13:
01:94:8e:22:1c:3b:03:16:d0:d4:f1:03:99:aa:c3:
57:a6:a2:70:c7:26:f4:bf:c1:d0:7d:61:09:b3:31:
76:b7:1c:e5:bd:01:a3:55:af:23:d7:c1:86:3f:3b:
66:5b:58:8e:46:8c:ee:c4:5b:53:38:e0:e1:e1:17:
72:fa:88:8c:3d:69:de:cc:63:46:c2:87:7e:67:74:
12:e1:35:66:5d:f0:34:dc:8a:e3:c0:df:7e:32:5b:
8f:2e:fd:d5:bc:c4:e6:7d:7d:8b:64:09:c0:92:5c:
b0:b6:17:2d:1a:83:d4:11:8e:cf:97:b1:4a:c6:8b:
0a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:99:4F:55:C5:05:4A:9E:7B:F0:57:51:27:87:5F:03:7A:0B:BB
X509v3 Authority Key Identifier:
keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:25:c3:db:44:10:0d:93:8b:f2:c1:69:4b:03:84:e7:d5:
6e:0e:9d:31:b7:d2:d3:ff:59:50:25:c2:92:2d:15:c7:6f:c8:
f7:6f:55:04:72:17:1a:80:61:3f:34:85:e8:61:30:a2:4b:07:
82:4e:a8:80:b2:14:61:93:81:bc:cf:2e:ff:81:d5:76:e4:5d:
22:6c:8f:81:0e:ca:41:4a:6b:7a:23:e5:ca:8a:3d:6f:96:e6:
54:a1:c1:a2:72:17:41:d7:ba:a4:44:6e:ea:47:e4:d0:d9:00:
f3:e5:e6:9a:d0:1d:f9:7f:ab:69:66:a5:e0:4b:20:af:37:a8:
9f:c3:47:ba:9d:ac:47:7a:63:5d:c5:26:9d:e0:11:3a:b4:bb:
50:76:04:c5:19:c0:54:c4:c2:d1:4c:73:fb:64:c2:70:eb:9b:
3d:8e:09:7a:33:51:d2:a3:59:fe:ea:e8:5b:c0:3f:84:24:f6:
27:89:90:97:cc:14:1b:51:15:27:d8:ac:5d:06:ad:29:29:20:
0f:b0:82:3a:13:79:01:e2:c3:dc:fb:69:22:8c:26:90:ae:da:
0e:31:b4:e0:a1:23:48:f9:bb:19:ff:3f:78:f9:a4:98:30:48:
ca:31:5f:d3:8e:96:86:f2:e3:50:81:68:27:47:69:aa:32:85:
36:c5:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:39:11 2025 by rpki-client