Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File: wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier: yuceZWzcMLcCT46Ad0LSp5gn53otiMDLH6Ebe3oMcac=
Subject key identifier: CF:3D:FA:B3:EC:EB:04:A9:5B:79:E7:EA:73:99:02:51:63:7C:77:70
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer: /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial: 019682B508DEA40C1D87DA194BD703C7692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number: 11AE
Signing time: Tue 29 Apr 2025 18:00:24 +0000
Manifest this update: Tue 29 Apr 2025 18:00:24 +0000
Manifest next update: Wed 30 Apr 2025 18:00:24 +0000
Files and hashes: 1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: HZdgzpmb1n1WZKV7aT1/oW79f3d/yWT7BXfTzlUPNgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:b5:08:de:a4:0c:1d:87:da:19:4b:d7:03:c7:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Validity
Not Before: Apr 29 18:00:24 2025 GMT
Not After : Apr 30 18:00:24 2025 GMT
Subject: CN=cf3dfab3eceb04a95b79e7ea73990251637c7770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:70:1a:02:5a:38:d1:de:21:93:9f:ff:08:
76:e0:7c:34:04:f4:0c:74:4a:c7:f8:41:83:6a:1f:
60:bc:2b:75:bd:e8:cf:64:11:14:5d:70:19:27:c1:
18:b6:d7:03:7d:38:f1:b8:de:1f:31:2f:b7:bd:91:
3a:6f:a2:6f:7d:15:8c:c8:85:02:ca:e9:32:33:74:
35:e4:22:da:37:58:39:47:ea:28:07:6a:fa:47:5b:
fa:bd:06:3e:cc:83:52:69:38:06:f8:cb:fb:e8:ef:
35:13:a5:4a:ad:0a:7e:e1:eb:18:2d:44:fa:53:d2:
f4:cc:4f:02:e5:58:cb:d9:f4:d1:1e:c2:5c:c0:6a:
d5:07:61:25:dd:5e:48:28:b8:83:51:fe:ae:6c:29:
f6:e8:c1:6d:3d:d2:d2:b3:1e:81:0b:d7:81:e9:89:
90:d0:25:63:6a:c5:c0:f8:27:ee:81:f9:fc:5e:34:
4e:4b:0c:43:49:ac:b3:0a:7e:36:02:fd:12:56:4a:
e2:da:ae:78:dd:64:f6:eb:a8:4f:ae:ec:bd:3b:2c:
bb:8c:25:be:80:ba:20:4e:c1:5c:86:35:c1:55:bf:
c7:64:fd:e7:14:aa:95:43:d8:84:ba:1e:88:8f:5a:
ae:5c:e4:0d:5c:3a:4c:51:0d:8e:11:44:4b:54:45:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3D:FA:B3:EC:EB:04:A9:5B:79:E7:EA:73:99:02:51:63:7C:77:70
X509v3 Authority Key Identifier:
keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d0:02:74:68:a5:71:79:46:6a:b4:1c:53:67:76:e7:89:a3:
f6:82:33:ae:3d:9a:14:14:d5:ed:66:9f:0f:f7:6d:73:48:88:
3b:54:c4:8d:03:09:1e:22:71:47:f1:58:ab:5b:25:d9:29:a9:
58:20:48:b9:34:f0:72:3b:eb:81:59:29:c9:94:d9:4a:47:63:
5f:1f:41:7c:1c:68:9b:0a:da:2d:78:66:e1:de:a3:6b:52:1d:
63:5b:1e:bf:c7:30:32:b2:dc:b4:aa:1b:4d:5e:b7:f9:fb:a6:
a4:83:cc:23:c3:93:3b:ea:26:11:a9:b4:a2:c4:aa:61:36:51:
27:7c:b2:80:ad:24:74:d7:1c:8d:f0:c1:fe:6c:b2:42:20:6f:
cd:49:21:76:b5:e6:a8:a4:eb:6e:06:57:76:23:66:2c:93:19:
38:a3:a7:36:7e:b8:81:7f:37:00:65:f7:aa:5a:47:ad:6c:f5:
d4:aa:5c:52:1c:fe:79:7e:b1:ac:5d:92:d3:eb:95:47:a7:fd:
03:cc:3e:11:3a:ef:00:4b:b4:c5:98:e9:42:ad:f5:7f:71:65:
80:1f:aa:d6:69:4c:be:83:dd:81:09:57:77:0e:16:43:fb:91:
c3:e0:41:b3:32:2c:d7:62:51:51:22:21:82:de:79:b2:0e:73:
12:a0:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:50 2025 by rpki-client