Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier: K8wfWt/dTV3f8FdTtKW9NidEDpe7FXf65NtXNBgaL5Q=
Subject key identifier: A0:88:3F:AB:CA:55:CD:78:ED:60:3A:70:75:C7:E5:D1:75:EB:D4:A0
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial: 0196515B298EC748A34083712DFDF976B3FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 04:00:50 +0000
Manifest this update: Sun 20 Apr 2025 04:00:50 +0000
Manifest next update: Mon 21 Apr 2025 04:00:50 +0000
Files and hashes: 1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=)
2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: 9Iwh4smCBP5syCpcr6rKAH/Yu34HHyWepMmrbT7gsKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5b:29:8e:c7:48:a3:40:83:71:2d:fd:f9:76:b3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
Validity
Not Before: Apr 20 04:00:50 2025 GMT
Not After : Apr 21 04:00:50 2025 GMT
Subject: CN=a0883fabca55cd78ed603a7075c7e5d175ebd4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ef:62:0e:40:97:4d:b0:38:85:eb:06:76:37:
1b:6a:06:36:11:fd:04:25:e3:70:bd:57:53:8e:e9:
e3:f6:05:19:75:54:e0:c8:75:3b:4f:8f:5a:6d:b5:
f0:48:b4:6a:b3:df:8e:2a:11:58:25:90:f0:50:76:
b7:8c:3c:2a:85:a6:f1:ca:de:52:3c:40:e3:af:bc:
7c:25:b9:33:60:0d:c8:c8:44:b1:07:39:ef:fc:22:
89:dc:4d:b8:28:9a:6e:e9:51:d2:6f:b9:c1:a3:50:
62:43:e4:81:63:cc:ac:79:ea:11:26:6f:c1:a6:c0:
6d:8c:65:a9:01:4c:61:c7:d5:da:ee:e8:00:7d:58:
85:2a:06:10:f9:80:6d:cc:00:cd:44:28:51:aa:28:
5c:fa:49:2d:2a:09:de:82:1f:19:58:26:33:7e:b5:
97:e0:05:a6:63:74:65:38:45:7b:f2:b9:cf:78:66:
07:01:1f:1b:99:9c:6e:31:ab:3b:c6:dc:8c:d4:59:
23:c9:ce:c6:c7:7f:21:1e:e6:91:de:36:67:2e:7c:
7f:52:98:86:6c:6c:be:a0:0b:2a:5e:ba:ad:89:88:
57:f1:6b:84:35:30:a8:9b:6c:42:15:65:a7:d8:8d:
03:ff:a9:e2:e2:f2:ac:ea:6e:62:ed:7b:1c:7e:45:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:88:3F:AB:CA:55:CD:78:ED:60:3A:70:75:C7:E5:D1:75:EB:D4:A0
X509v3 Authority Key Identifier:
keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:f1:57:39:55:a0:17:c9:14:d6:00:b8:4f:db:5e:93:6c:
69:6a:c5:a7:37:ed:0f:f5:d4:89:a3:9f:1f:88:49:89:16:32:
5b:e4:82:cb:dc:f3:34:a7:0e:80:58:5c:a4:85:0f:a5:c7:37:
a6:58:09:c2:51:bd:67:58:9a:52:d1:f1:de:cf:d0:20:2e:e7:
d9:2b:60:04:2f:28:cf:ba:eb:1e:87:5d:a9:96:6f:e2:25:86:
a4:b4:51:4c:ae:2a:18:32:65:9d:5c:6f:16:c5:28:fb:db:ac:
09:20:d8:bd:49:db:64:e7:01:80:14:ca:22:75:dc:8a:d7:53:
84:68:61:a7:29:24:f9:5e:43:94:93:93:15:3c:eb:20:bd:10:
c6:97:df:ac:f4:74:5b:27:bf:b4:34:e9:4f:4b:b8:53:73:ca:
42:93:33:8b:21:71:c1:eb:ac:4a:33:d4:67:1a:2b:d5:19:4a:
37:41:14:42:32:d5:e3:b0:de:b0:88:20:2c:e3:37:bd:b7:04:
a3:88:07:cf:72:db:e6:88:b7:7c:28:71:13:70:e2:53:92:23:
19:e4:cb:b0:d1:a8:c0:c0:3c:d7:5a:0d:7a:9c:13:35:3a:75:
25:b8:a9:f0:9c:97:64:dd:e0:43:0f:fe:40:ee:12:46:33:6f:
df:3d:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:14:27 2025 by rpki-client