Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File: wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier: U19tWZWAfFJkmE+dNb6QXpa4npVIR855ErGFjQOkGIU=
Subject key identifier: 96:2A:DA:B3:86:47:4C:0F:14:72:5C:7E:14:C8:97:4F:7C:3F:B6:7F
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer: /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial: 01967FEAE2C43757E2BC7D1D1531F69B9003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number: 0B18
Signing time: Tue 29 Apr 2025 05:00:21 +0000
Manifest this update: Tue 29 Apr 2025 05:00:21 +0000
Manifest next update: Wed 30 Apr 2025 05:00:21 +0000
Files and hashes: 1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: bGmFP4aUE2Ye53bRW73OlbQy7Hd5luReMMhuCkKlc6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:ea:e2:c4:37:57:e2:bc:7d:1d:15:31:f6:9b:90:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Validity
Not Before: Apr 29 05:00:21 2025 GMT
Not After : Apr 30 05:00:21 2025 GMT
Subject: CN=962adab386474c0f14725c7e14c8974f7c3fb67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:94:58:4f:e0:f8:df:4d:0c:23:01:6d:06:
44:0e:27:60:ed:ad:c1:44:ed:8f:40:8d:6d:4e:8f:
44:b7:c7:2c:ef:a5:82:35:7d:1c:48:7f:30:b8:44:
dd:7e:50:50:03:20:25:46:5f:e4:e7:f2:42:93:85:
53:bc:4a:e0:d6:a8:94:34:ec:d6:60:44:fd:15:dc:
3f:bb:6b:50:1a:11:61:08:a8:6e:8c:bc:a2:c4:70:
57:c4:18:0f:6b:84:50:64:83:44:5d:8b:d9:64:26:
6f:38:40:43:0b:b4:6a:f7:f1:e9:68:5b:71:9a:35:
2e:58:39:a7:29:49:34:11:9c:c1:1d:e2:c3:9d:bb:
fd:2a:53:9f:53:76:1d:e7:25:5d:c8:25:0b:1e:1e:
a8:d9:37:6c:8d:2b:0f:90:f1:bf:4c:9d:df:e1:67:
40:37:55:80:89:32:5f:dc:3a:23:d0:e8:78:3f:72:
a1:f1:ba:51:4b:46:68:9b:b6:ad:b7:bf:f9:01:a2:
b6:08:25:ef:39:37:e0:19:7f:16:e4:a3:42:08:e5:
3d:d2:1b:c4:84:19:cb:fe:a9:26:e7:0d:49:ad:74:
65:e2:30:f0:00:e3:cc:4a:f2:65:8a:84:5a:c6:91:
92:ec:b9:fd:26:4c:6e:5c:fd:f6:66:ed:f6:9e:2c:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:DA:B3:86:47:4C:0F:14:72:5C:7E:14:C8:97:4F:7C:3F:B6:7F
X509v3 Authority Key Identifier:
keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b2:3a:69:2e:42:ea:f2:53:01:3a:cb:85:98:b0:36:8c:2b:
42:d1:b9:fe:fa:b0:18:28:08:71:85:e4:c5:9e:47:89:fa:18:
11:7e:31:50:a9:27:e0:85:6c:62:0d:c4:82:25:b1:d4:a7:4a:
d6:46:b5:6b:2d:b0:c4:6c:c3:f6:37:8b:24:67:ba:45:a7:4f:
6c:2b:f1:9f:75:e3:f1:ca:86:e4:fe:50:bf:a7:3e:54:2b:99:
c9:f4:25:0c:4c:d1:3c:4f:bd:32:a7:a9:11:6f:6e:ba:18:d4:
c0:ef:76:fa:a4:15:91:61:25:86:95:cc:34:8f:06:9e:e2:12:
2f:52:95:8e:9c:39:25:c3:d0:f3:94:ca:d1:27:13:7c:84:fb:
de:5e:29:c8:4c:77:b0:1d:cf:74:51:3e:4f:01:f3:20:3f:06:
40:07:cc:af:11:19:3d:b7:36:54:7a:76:7b:75:8e:0d:bd:57:
9e:bd:d5:47:a3:d0:7a:e1:65:85:15:f0:c1:64:d8:c8:2d:8c:
59:7b:5d:41:92:b7:af:a3:03:56:23:79:c4:a0:4c:8f:3b:ff:
f1:fb:9c:a1:e5:ed:dc:5b:7b:fa:23:49:f8:3c:a7:cb:be:a2:
d0:75:f4:e2:6c:94:3e:09:4e:f1:0f:55:f3:40:e4:47:ec:3a:
e9:13:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:23:50 2025 by rpki-client