Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
File: wq_BTc5FCwXshsfFMHDNa7bbx-4.mft (raw, json)
Hash identifier: sSmq8WYHme5oQA7Y/lADl1XAFqfq3rKqX4LsgUT/PTk=
Subject key identifier: 0B:7A:76:51:66:78:D7:EC:19:57:CC:EF:17:54:70:8A:C8:52:74:93
Authority key identifier: C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
Certificate issuer: /CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Certificate serial: 019680FD5E88571D3ECED87D0B1F24F83DF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
Manifest number: 1518
Signing time: Tue 29 Apr 2025 10:00:10 +0000
Manifest this update: Tue 29 Apr 2025 10:00:10 +0000
Manifest next update: Wed 30 Apr 2025 10:00:10 +0000
Files and hashes: 1: 9R7u9NYY_fdGGu9OLtebIHbh-p8.roa (hash: EvXc+WkKL+opgKBNfenegjbhQJ0LX3U13qSmBaz/xEY=)
2: L9HnYDWvNpMZS4pIu5zArdvE5v8.roa (hash: 0/PRNPNH9PE5TqzwlxbNtq6foN9oanZ3LsojHdx7xuw=)
3: khRg4MYEnETJ2jPimtqut6SDcfI.roa (hash: Nu5ttQZeyOdAqpRtT8J7JzoHpXrE1o2QevNWAJZ6hBk=)
4: wq_BTc5FCwXshsfFMHDNa7bbx-4.crl (hash: iCSxff0b8hMvMOr/Reejkdi8lHN45hYX2rlTL055KLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:5e:88:57:1d:3e:ce:d8:7d:0b:1f:24:f8:3d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2afc14dce450b05ec86c7c53070cd6bb6dbc7ee
Validity
Not Before: Apr 29 10:00:10 2025 GMT
Not After : Apr 30 10:00:10 2025 GMT
Subject: CN=0b7a76516678d7ec1957ccef1754708ac8527493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:fc:0a:d8:e8:e0:67:af:27:d1:c1:54:ea:
2f:ee:22:02:81:01:19:9a:c2:75:d4:da:5f:7c:37:
53:57:e8:71:d3:24:76:70:be:d9:43:1b:0c:f6:e4:
c4:52:74:83:e0:b4:6c:37:95:ac:f5:51:61:47:3b:
75:f2:41:c9:2c:ea:ad:c3:31:d0:b4:e8:91:a4:4b:
42:61:63:0c:60:21:01:35:75:a2:9f:d8:fa:18:d0:
f2:92:73:92:68:41:f0:f1:eb:11:b3:d6:d9:a5:29:
8b:1f:51:02:44:3a:49:b3:f1:b5:2f:1e:7b:04:52:
29:04:0b:b7:7b:ea:7b:84:87:94:93:9e:9e:4b:85:
41:60:8c:fe:54:7c:17:37:1c:69:1c:02:66:f2:a7:
89:da:44:3c:34:5a:6b:08:2d:80:e6:55:58:0b:c5:
33:3a:55:c0:11:ee:25:a7:f4:dc:b7:b1:1a:ab:84:
26:12:e5:0f:5b:ea:7a:d0:dd:99:73:ac:10:01:55:
c5:06:67:6c:aa:0a:a8:cf:79:ff:3b:b3:20:da:c5:
82:12:a9:2a:29:a9:f2:46:35:39:74:d8:4f:49:ad:
de:7e:b6:3f:e8:70:1d:f0:20:6b:21:a0:34:d8:51:
10:40:df:cb:54:e5:7a:87:60:61:39:56:00:da:e2:
b2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7A:76:51:66:78:D7:EC:19:57:CC:EF:17:54:70:8A:C8:52:74:93
X509v3 Authority Key Identifier:
keyid:C2:AF:C1:4D:CE:45:0B:05:EC:86:C7:C5:30:70:CD:6B:B6:DB:C7:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wq_BTc5FCwXshsfFMHDNa7bbx-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ec3284-3576-4ee4-93b8-1847cb88e83a/1/wq_BTc5FCwXshsfFMHDNa7bbx-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:ae:b7:df:b6:63:38:50:eb:fd:4f:c6:00:d0:28:7d:c6:
1c:27:df:4a:db:e4:41:fe:52:c9:75:00:3e:46:47:81:3a:c5:
17:8e:ad:bd:39:f3:90:cf:74:a1:e0:df:b9:f2:8a:15:f5:17:
82:fc:8b:88:5c:8e:77:f5:dc:d8:07:41:97:94:49:f2:9c:6e:
7f:2c:1a:88:e7:b2:82:30:0c:0c:49:48:ae:fd:e5:54:86:86:
26:b3:26:f4:e9:8e:6c:09:16:b3:1f:e1:b9:cf:18:47:70:4a:
e7:3d:42:e8:ac:e5:0b:ad:65:9b:07:af:18:a9:09:3d:34:fb:
2b:ec:63:6e:70:27:37:50:a2:e0:ab:be:27:8e:c1:78:55:ce:
02:e0:82:35:59:8e:60:26:ab:41:65:eb:80:5f:17:f2:b9:6c:
c1:ac:f3:cd:45:35:e3:a2:bf:b9:4d:94:79:fe:1e:42:92:74:
00:a8:ae:d8:19:71:05:92:cc:aa:8e:f3:60:34:e1:e2:56:07:
c4:d0:0c:e6:96:f8:27:3e:cb:87:52:02:f0:a8:bd:d2:d5:8e:
66:37:ce:94:9f:7a:b6:82:15:79:fe:32:92:59:ad:32:d2:9a:
c6:73:7a:cd:c9:e1:45:ae:5a:fc:7e:ff:42:b2:c5:7d:76:e7:
bd:e6:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:41:43 2025 by rpki-client