Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
File: wRkJVIaV8YwEy4leKs7rEQPgPhI.mft (raw, json)
Hash identifier: Qxd2DdUap/WQZAckoVurQJadj57DAb1vheOqFZSF5fA=
Subject key identifier: 3E:C8:DA:B5:0E:9A:7F:6C:3E:B2:E2:1A:08:46:2D:70:EB:9C:48:34
Authority key identifier: C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
Certificate issuer: /CN=c11909548695f18c04cb895e2aceeb1103e03e12
Certificate serial: 01967ED8729F17C7C0FB775B7D97E0328A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
Manifest number: 0657
Signing time: Tue 29 Apr 2025 00:00:36 +0000
Manifest this update: Tue 29 Apr 2025 00:00:36 +0000
Manifest next update: Wed 30 Apr 2025 00:00:36 +0000
Files and hashes: 1: YrKYk7I6vE-csMWooaZM6NHB8BQ.roa (hash: DGcItu+t1LfBz2hIuLIG2raDTGGDZoaJ5stlNvHsdUs=)
2: qYy8XmUApmSr7E4zGQ4BdVZDGb4.roa (hash: Fn2Mqkncw63T9+361k6HpXw83uUzWzsG0tY0nJ1gyjM=)
3: wRkJVIaV8YwEy4leKs7rEQPgPhI.crl (hash: YjMBj9vvVP0Z1N+VLkyWFHQRWVyhN5PfdZpV46dyVUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:d8:72:9f:17:c7:c0:fb:77:5b:7d:97:e0:32:8a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c11909548695f18c04cb895e2aceeb1103e03e12
Validity
Not Before: Apr 29 00:00:36 2025 GMT
Not After : Apr 30 00:00:36 2025 GMT
Subject: CN=3ec8dab50e9a7f6c3eb2e21a08462d70eb9c4834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:ab:cc:2b:f8:ce:38:11:3b:a4:6f:09:0a:
e9:5c:d6:61:a2:be:4c:d0:b6:2c:39:06:30:80:c4:
65:94:ce:a7:04:26:33:42:1f:15:c3:e7:a9:8f:0d:
4d:38:7c:cc:06:b3:e5:26:f8:c9:89:81:79:97:78:
3a:28:ed:7d:f3:f6:33:ec:12:4f:b6:b2:e0:ad:3d:
d4:a1:f6:1a:14:7c:ba:f2:d3:5d:dc:1d:26:2e:d2:
b8:c4:89:2a:d5:1a:3b:cd:06:f7:60:d6:09:2e:94:
50:1f:5c:c8:fa:36:6e:bf:9b:46:9a:38:d5:d4:92:
c6:8d:f0:ea:fa:60:91:22:14:7d:ce:47:59:39:c6:
a8:6d:d4:b8:f6:35:ee:a6:a4:ae:e7:0f:44:7f:23:
7b:e7:ce:ca:51:ca:f8:86:55:a5:e6:c1:5f:25:89:
3a:94:a5:21:8d:7c:16:5e:c2:b5:86:e4:38:03:23:
c1:31:ff:e0:60:14:02:2d:ea:b5:36:e7:73:bd:a8:
f6:5b:91:ff:bf:69:5b:6b:52:07:90:96:0c:67:e2:
c5:2c:72:bb:e6:d9:4e:c4:92:9c:0c:26:83:cb:76:
fb:7f:96:88:4a:43:36:2a:df:e5:8e:16:ea:8f:9a:
8b:17:a7:e7:a3:99:a0:59:f1:12:aa:95:a7:31:55:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:DA:B5:0E:9A:7F:6C:3E:B2:E2:1A:08:46:2D:70:EB:9C:48:34
X509v3 Authority Key Identifier:
keyid:C1:19:09:54:86:95:F1:8C:04:CB:89:5E:2A:CE:EB:11:03:E0:3E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRkJVIaV8YwEy4leKs7rEQPgPhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3b33e7-30b4-4149-9045-a0564c9d6fde/1/wRkJVIaV8YwEy4leKs7rEQPgPhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:99:ad:50:2e:81:55:f2:cd:46:04:cf:2d:42:0c:6e:4a:
2c:ea:ac:ea:9c:8a:ff:6a:d1:d9:ef:a5:b6:3c:8b:02:a2:e8:
c2:e6:70:84:30:85:39:d3:a1:56:fb:da:37:1e:c2:ea:32:64:
c1:f4:dd:67:55:e3:ee:20:04:61:29:19:7b:97:0a:20:92:61:
c2:5b:21:65:ba:9c:b9:82:7c:44:a0:4c:43:fb:f8:d7:54:6f:
1c:00:2e:b1:cb:6f:da:4c:d2:a2:82:52:6c:c8:c4:1b:c1:70:
94:05:a8:a9:87:41:3f:41:fa:48:ae:71:0d:3f:13:7e:63:97:
11:8a:c7:4d:21:b0:79:e4:6b:c9:c5:53:7e:ad:25:22:7d:3c:
1c:09:2e:7e:47:b0:c8:ef:5d:5b:09:a0:e4:15:85:8a:01:66:
03:c5:68:d9:5f:c9:f6:a7:86:ec:da:94:e9:06:1d:6c:7d:11:
c2:89:2b:ad:86:62:83:f8:ce:e9:8d:f3:d1:be:93:1a:6c:6e:
89:c9:aa:74:ba:60:08:49:80:97:27:af:17:e7:3b:16:fb:f6:
6e:73:32:8e:fd:0d:a2:5d:b5:91:42:0b:a0:04:5f:77:a6:51:
78:c2:15:08:25:8a:b3:09:72:8a:5d:8a:ee:2d:54:fd:53:87:
24:83:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:23:53 2025 by rpki-client