Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier: naGFV2ql22kvsw0C7AJTa1+bjdkg6TORgpyMRxpnqQg=
Subject key identifier: 8E:99:DD:08:0E:80:07:B5:79:80:88:CF:31:6C:F4:58:99:67:88:E8
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 01968211138F3398FDBCBC8BBE45E11BDCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 15:01:19 +0000
Manifest this update: Tue 29 Apr 2025 15:01:19 +0000
Manifest next update: Wed 30 Apr 2025 15:01:19 +0000
Files and hashes: 1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=)
2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: rxCVuBT5cqKFTuINu8YLJBFmrmRJYD2qogFxYNDIAfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:46:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:11:13:8f:33:98:fd:bc:bc:8b:be:45:e1:1b:dc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Apr 29 15:01:19 2025 GMT
Not After : Apr 30 15:01:19 2025 GMT
Subject: CN=8e99dd080e8007b5798088cf316cf458996788e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:81:02:82:bf:4d:62:c4:9e:24:e7:b2:74:
1d:b5:e8:c8:88:56:f2:a0:77:76:d0:82:20:c2:85:
d6:ff:2e:da:fd:8d:13:95:75:cb:ab:4a:4f:b6:08:
bb:f2:4c:b8:8e:70:34:36:b3:a2:ea:2e:2c:b8:c1:
63:72:a6:7b:1b:19:2c:de:93:08:bf:72:74:ca:e4:
cd:87:0a:21:94:3a:88:15:5d:0b:30:b6:fe:e1:4c:
6c:2f:1c:2f:9d:86:1c:01:43:7b:b2:3b:e0:d7:be:
29:7a:0e:a0:7f:04:d6:7b:88:f6:a6:2c:a5:59:19:
7c:0b:90:3c:79:39:1f:32:54:2b:60:15:91:7a:39:
91:e2:0a:4c:bb:22:84:2e:b3:71:09:cb:6f:a4:84:
05:82:1d:47:9e:a4:c9:a2:7a:cc:dc:ef:9a:00:af:
0e:7e:f3:91:c1:46:45:e8:e5:ef:71:50:7f:e8:4a:
24:9f:8a:15:ca:a4:f4:87:82:a9:48:26:6a:25:bb:
ac:4d:38:45:60:e2:a6:a3:5c:00:a5:89:eb:37:70:
3b:48:dc:ef:36:ba:f8:cc:96:4c:a6:ac:7e:c3:ba:
f8:2d:87:8f:25:ac:33:12:d6:0c:b1:13:e6:81:af:
5d:b8:15:54:d9:dd:00:1e:51:fc:c4:6a:7a:7f:3f:
c6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:99:DD:08:0E:80:07:B5:79:80:88:CF:31:6C:F4:58:99:67:88:E8
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5b:fb:9a:66:17:26:f5:38:da:a2:d5:58:89:fc:95:a1:83:
fd:3e:97:c0:df:7d:b8:b0:fa:d3:9f:76:87:44:34:b5:04:70:
58:35:ff:da:b6:f4:01:20:d6:cb:0a:dc:46:74:b0:d2:60:87:
39:57:a0:b0:46:e4:50:43:71:99:ec:b5:ec:da:2c:35:40:82:
f4:10:42:80:da:8f:3d:44:1d:5e:36:bc:fa:44:3a:c9:88:ac:
dc:52:82:38:df:80:68:a8:4c:57:d6:dd:97:c4:ee:ad:6c:eb:
14:5b:d0:ca:fc:1b:60:b0:1c:37:bb:a6:61:f2:35:08:3b:f8:
46:f4:60:ca:2c:19:b2:44:eb:0d:ed:75:19:4c:99:f4:99:cc:
e6:e1:72:fb:b7:27:78:34:4c:2d:ea:3d:34:4e:ea:82:46:0e:
b1:25:5c:42:09:fb:37:b1:ef:b3:4e:ac:e5:0d:ef:63:a6:47:
3a:77:54:4f:d0:bc:4b:53:6e:63:ae:21:62:f9:b9:d6:88:d0:
6e:70:84:5a:ec:3b:92:93:26:27:07:b9:40:dd:09:d4:aa:98:
94:b0:ce:26:b3:12:57:bd:ac:40:e6:24:7e:2e:48:f5:77:6e:
85:12:21:cb:22:78:58:ea:d6:4f:ee:4a:39:4d:f7:b9:c1:bf:
7d:88:6e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:59:01 2025 by rpki-client