Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
File: wQKF31sDng8E4t_s4opaj77G6Tg.mft (raw, json)
Hash identifier: OHXjWEBY/+rdp81gXOxjFfUsqgGSvabIJlD/sOSJX3U=
Subject key identifier: 20:E2:C5:0F:53:26:B1:DE:C8:60:E0:8A:B1:57:67:68:88:EB:AC:DB
Authority key identifier: C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
Certificate issuer: /CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Certificate serial: 0196789F216C867AAA78234C9E9E8F91714F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
Manifest number: 0E4C
Signing time: Sun 27 Apr 2025 19:00:16 +0000
Manifest this update: Sun 27 Apr 2025 19:00:16 +0000
Manifest next update: Mon 28 Apr 2025 19:00:16 +0000
Files and hashes: 1: XqKPzfmuCzaXuReNqmun-bylVl0.roa (hash: fIH8TXgcjjHXQ/BvOpbDJ0pldyGYRtZMTKQJxTQ5HkU=)
2: llJ6liNS1pumqjPV_Jv49wbPcyA.roa (hash: 8yXr4/k0VmsJ3fSG9IZQB1mAPItrWTFszMy9LsJzJdk=)
3: ty37WXzEM_QABRJJkI6c7K_G8EQ.roa (hash: KUqDTpdF99zPoKmTMTv8GshjWBlrKcQSI4Ly51l4brg=)
4: wQKF31sDng8E4t_s4opaj77G6Tg.crl (hash: v9nQZQEOzE6kyOSvGOF3hMqZljsnHRSZa2azOScpSDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:21:6c:86:7a:aa:78:23:4c:9e:9e:8f:91:71:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c10285df5b039e0f04e2dfece28a5a8fbec6e938
Validity
Not Before: Apr 27 19:00:16 2025 GMT
Not After : Apr 28 19:00:16 2025 GMT
Subject: CN=20e2c50f5326b1dec860e08ab157676888ebacdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:88:8f:29:5a:b2:31:d6:54:00:cd:13:6b:80:
0f:2f:aa:5d:7c:21:e5:73:10:a4:9a:e0:9c:6c:19:
45:36:c6:57:b7:b2:d5:7d:b1:a7:cb:9f:c7:4c:e2:
49:41:d4:bb:0b:bf:6c:e6:b7:93:8f:f8:bb:d3:0b:
5e:cd:85:bd:bc:44:30:fa:28:45:6f:03:57:6e:85:
c0:91:00:0c:1c:3d:6c:1d:21:0b:77:06:13:64:e6:
f7:3c:aa:51:23:0a:be:f8:9c:7b:20:fe:d7:a6:00:
8e:73:c8:84:d2:ce:2a:a3:29:f3:27:1f:0a:fe:93:
f8:22:8d:67:53:ef:47:94:77:79:0c:b5:99:24:8f:
0f:d3:30:85:02:7f:0e:52:4e:53:71:a7:ac:dc:5c:
9a:21:d6:81:31:f5:49:4f:3c:b1:59:cd:fc:c4:60:
57:f9:2d:3d:18:14:6b:16:87:ce:4d:03:22:d5:7b:
52:af:ce:16:e0:38:c1:70:03:90:9f:ff:7f:6d:1d:
d1:73:c7:35:ba:a4:a2:dd:f8:2b:f3:75:af:95:7b:
43:f6:94:4f:40:76:89:2a:17:25:bb:0f:92:ff:8a:
0b:23:b0:43:60:ef:b5:3e:bf:89:1d:8c:50:39:a2:
73:2b:51:40:60:7f:b6:17:50:d0:94:d8:4d:aa:03:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E2:C5:0F:53:26:B1:DE:C8:60:E0:8A:B1:57:67:68:88:EB:AC:DB
X509v3 Authority Key Identifier:
keyid:C1:02:85:DF:5B:03:9E:0F:04:E2:DF:EC:E2:8A:5A:8F:BE:C6:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQKF31sDng8E4t_s4opaj77G6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/aebd42-07a3-4cb5-852e-52afc77ca18f/1/wQKF31sDng8E4t_s4opaj77G6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d5:40:20:3f:d2:9b:05:a2:8b:2f:5c:12:a1:40:38:b6:26:
cc:35:33:98:b2:4d:db:14:ab:c7:2e:b6:71:61:9f:52:45:e5:
ce:1a:6f:e3:73:fc:bb:21:15:b9:fa:7c:ce:d9:88:11:e2:e2:
ba:b9:fa:44:71:0d:64:3f:0f:65:4f:81:87:a6:eb:d1:25:0a:
23:e4:e2:f4:dc:67:6d:91:76:a9:dc:f8:ae:94:ff:8f:c3:c9:
16:5d:80:72:c3:87:c5:ac:47:c1:23:c5:2f:76:d7:10:1b:82:
b6:c2:20:61:9f:1a:46:6d:ce:8b:de:78:89:7e:22:2e:c4:81:
19:8a:39:d1:7d:55:a4:a0:83:90:9f:48:4a:06:5a:78:9e:f2:
89:cc:d6:50:dc:fc:58:fa:8b:e1:7f:df:0a:e8:f4:67:e7:a8:
34:90:08:4e:61:f3:35:00:23:bb:b3:75:77:f4:b3:4e:5d:b9:
0a:11:e6:a5:8b:2d:d7:dc:ff:43:40:65:35:0f:f0:d7:77:3b:
a9:f2:ba:fb:ee:a5:57:ca:43:f3:d4:c7:15:6b:4d:bf:bf:0d:
1d:ce:65:1f:b4:66:31:b4:87:0f:c6:a9:18:8b:b0:c9:cc:ea:
65:d2:52:35:c6:17:f6:7c:3c:e8:a9:18:94:65:40:7c:b0:83:
00:df:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:16:12 2025 by rpki-client