Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File: we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier: o+kMkgUPKOVHpNvQ8c8TZ9GdZtjd+71om8+/jyEjpPo=
Subject key identifier: CE:51:03:6D:30:C1:9A:A4:EC:28:0C:93:CC:F3:D8:4D:0B:06:74:7F
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer: /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial: 01968BEF530AD3948B5F81372A6BC591BCB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 13:00:39 +0000
Manifest this update: Thu 01 May 2025 13:00:39 +0000
Manifest next update: Fri 02 May 2025 13:00:39 +0000
Files and hashes: 1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: sdKLRjOVC3RZa22+ZFhO1TQQ2NMbRepEnyUcr0tsJZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:ef:53:0a:d3:94:8b:5f:81:37:2a:6b:c5:91:bc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Validity
Not Before: May 1 13:00:39 2025 GMT
Not After : May 2 13:00:39 2025 GMT
Subject: CN=ce51036d30c19aa4ec280c93ccf3d84d0b06747f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:1b:be:16:4a:72:e8:c0:2e:4e:15:f3:d7:
04:3f:6a:33:09:f5:fc:c6:6a:6c:26:37:64:b8:8a:
c3:23:8d:05:7b:5f:47:16:23:91:4f:82:64:21:36:
78:5c:b7:61:05:a9:b8:c7:2d:cd:ef:a5:9f:bb:b5:
9f:93:08:68:fe:2b:ec:93:b8:4b:69:ec:77:3d:4a:
eb:1d:75:50:99:ee:0d:86:6e:4c:1e:36:d5:06:68:
1d:4f:e1:f3:da:f7:12:31:07:6f:e7:3d:e1:ef:8b:
39:61:6e:37:a5:07:c8:3a:80:7d:65:7a:fe:3c:72:
cc:b3:6d:22:13:67:0d:ae:e7:5d:a0:8a:29:ec:9d:
a8:30:84:1d:f4:81:22:b5:1f:8f:57:64:61:57:59:
47:b9:ea:f7:ee:0a:fb:a9:4a:06:1b:ca:42:64:fc:
af:bf:ff:e8:23:a8:11:7d:0c:43:75:db:ec:ba:03:
77:ae:e9:2f:0f:c1:29:e5:8e:0c:21:a5:50:ed:61:
90:4d:37:05:0a:e6:7f:b1:10:94:99:fb:fe:10:b4:
b8:6e:81:73:e9:8a:04:0d:54:75:7d:74:b5:ca:5d:
49:cf:36:39:65:1c:54:17:a6:6c:16:71:2a:70:d5:
46:45:f5:60:b3:6c:87:21:0a:f2:df:fa:b7:b4:c9:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:03:6D:30:C1:9A:A4:EC:28:0C:93:CC:F3:D8:4D:0B:06:74:7F
X509v3 Authority Key Identifier:
keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:38:42:24:b1:5b:59:7f:26:47:16:9c:92:99:5b:3e:64:c1:
91:f8:4d:b7:0c:24:eb:e6:94:21:3d:92:08:b0:59:88:0a:ec:
84:d1:ee:bb:30:61:61:61:df:56:01:f7:60:c4:fb:bd:30:70:
dc:e2:e9:dd:1c:73:b0:8a:ab:45:ad:3e:f4:29:2a:ee:24:9a:
77:aa:b1:a6:a4:4d:1b:85:c8:dc:81:27:8d:47:64:63:23:af:
65:2b:dd:0f:42:09:cb:0f:5d:3d:03:c1:ed:35:eb:a0:5c:9b:
ad:3c:a2:d6:bc:3f:9f:4f:fd:47:fd:43:51:c1:55:2f:c3:d0:
a1:ba:5f:7e:6a:e4:eb:83:df:f7:80:34:58:7f:11:ef:3f:be:
ce:a0:ad:ed:b7:cc:f1:c5:36:0c:23:90:aa:fb:eb:aa:89:f5:
33:a9:67:ad:fc:bb:1c:d6:96:c2:e9:1c:62:a8:e9:58:c5:ba:
ea:55:da:38:b6:1d:95:1f:26:1f:03:b6:c6:78:e4:58:fa:fd:
9f:55:57:97:ea:d8:6b:92:84:41:aa:9c:46:6f:5e:1c:41:96:
90:30:a0:fe:24:0b:0f:9b:ed:92:6d:a2:08:53:a7:e5:26:bb:
de:c1:a8:d6:07:1f:58:f0:34:30:f5:ec:52:a1:10:79:88:0a:
71:d3:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:44:33 2025 by rpki-client