Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File: wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier: +laNJE3QlwHK13PSqxxY5U8EGihS7A4bgzJEM4ALX3Q=
Subject key identifier: 86:8A:15:62:17:BB:BF:0A:B4:03:48:17:54:12:7A:49:B9:90:43:E7
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer: /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial: 019641430E29CC2139129F1831D9046C70AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 01:00:35 +0000
Manifest this update: Thu 17 Apr 2025 01:00:35 +0000
Manifest next update: Fri 18 Apr 2025 01:00:35 +0000
Files and hashes: 1: 1XPduftMWiA3mhDReUc68s4JF-M.roa (hash: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=)
2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: Rxbz4ybaiIwcF6DcUCvGh2I1GIlFZOjiamAjTZqtowA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:43:0e:29:cc:21:39:12:9f:18:31:d9:04:6c:70:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Validity
Not Before: Apr 17 01:00:35 2025 GMT
Not After : Apr 18 01:00:35 2025 GMT
Subject: CN=868a156217bbbf0ab403481754127a49b99043e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:70:5a:74:6d:c8:a7:57:86:6b:a5:4a:1d:e1:
d0:1b:b9:c3:7a:b0:76:e6:a3:ca:08:93:65:8b:f5:
97:a6:ce:ee:79:72:56:ca:a9:76:f1:ef:0c:e1:35:
45:33:0a:9a:e5:67:44:18:7e:b3:02:b7:bf:31:b5:
3e:0d:a1:57:04:6d:08:14:7f:f6:f2:fc:d1:c0:a4:
ca:be:59:ad:3b:ba:50:c4:ed:f7:79:4c:7e:ed:dd:
10:a9:c1:76:68:62:83:be:fc:86:d2:55:da:94:c5:
91:ad:a1:8c:68:bb:9c:60:e4:98:66:e8:37:a0:e0:
81:df:c7:90:7a:bf:40:ca:6b:72:66:63:8c:a6:eb:
f0:08:8b:8b:d3:f5:fc:7e:f5:29:81:41:14:8d:2b:
e7:e0:c9:f9:2c:91:9b:c4:e5:28:6e:a6:36:ff:c7:
4e:76:dc:80:77:cb:a0:4d:bc:0f:ac:ae:bc:32:e5:
e9:b8:a7:06:a1:bf:fc:54:6d:b9:ac:01:c2:29:95:
bf:52:91:f9:a9:c1:6f:0f:2d:70:88:98:c8:ec:f6:
bd:b6:8d:20:93:a3:e5:aa:06:e0:df:2f:93:1f:fb:
6e:f4:96:6d:58:3a:9e:00:60:b0:dc:48:0d:3f:55:
56:90:e5:9f:18:79:a9:3d:ea:fc:82:bd:ee:0b:86:
b9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8A:15:62:17:BB:BF:0A:B4:03:48:17:54:12:7A:49:B9:90:43:E7
X509v3 Authority Key Identifier:
keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:6b:c5:37:e0:03:c5:6d:0b:23:44:fa:69:3b:0d:5b:78:
0e:21:74:4c:e9:c0:a9:fb:66:61:d8:fb:83:b1:c8:61:42:52:
b1:c9:cd:b7:e6:8a:f2:82:15:1e:42:c3:25:ae:e0:bf:a1:18:
ed:c7:cc:85:e1:b0:8b:5b:b5:44:83:72:f8:f2:e5:ae:0d:d2:
ee:63:3d:84:f1:c9:1f:52:c5:2c:b4:c3:a4:53:a6:cd:b2:e8:
4d:58:de:2d:ad:38:a5:63:4c:19:f7:e3:cb:9e:0a:39:c0:e7:
c7:35:01:d9:0c:94:73:3a:4e:bb:83:85:c1:f7:44:58:52:7c:
42:1f:25:68:dd:ab:ce:07:4c:2d:e0:ff:bb:39:ff:32:ae:9f:
f7:31:04:89:29:16:d5:6e:51:89:a2:04:00:32:1d:9c:fb:b3:
a0:83:e6:f0:75:e2:c8:e3:66:74:ac:f6:14:34:51:6d:36:9d:
84:69:ae:3a:40:4f:ba:67:f8:55:74:f5:d2:7e:e9:be:f7:70:
f5:56:58:17:fe:1f:d9:14:56:62:d9:49:7b:51:d3:db:f4:e3:
aa:ee:7b:03:d1:fc:f7:58:02:4f:43:d4:65:aa:89:31:a9:d7:
df:2c:6e:fc:63:53:1f:85:2d:cb:11:ce:af:db:d5:64:f2:6c:
d6:1a:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:09:14 2025 by rpki-client