Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
File: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft (raw, json)
Hash identifier: HohV+mzZagI0MBEGdxg4imfh7rtmPAorLrRlOujIKuA=
Subject key identifier: A0:6C:E4:FC:A3:8E:BC:27:FA:9C:FF:91:37:9A:FE:C8:F8:37:0C:C6
Authority key identifier: FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
Certificate issuer: /CN=ff017f878432b2fe31f58153b44a81659d50ba20
Certificate serial: 019674C2F25B3B673BE403F8AB339ED8D61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
Manifest number: 1203
Signing time: Sun 27 Apr 2025 01:00:55 +0000
Manifest this update: Sun 27 Apr 2025 01:00:55 +0000
Manifest next update: Mon 28 Apr 2025 01:00:55 +0000
Files and hashes: 1: T4eXTqD8qMkY5DY9RCIRmYEaW64.roa (hash: E3LBQ2rpYHnPvo7DUVa09ZVv6KEvA9HMX0+KhVuVzuY=)
2: _wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl (hash: +VFbEVvkoXax4tjWsjvZRpe0sDhkUH8yelV2tVYO13o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:f2:5b:3b:67:3b:e4:03:f8:ab:33:9e:d8:d6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff017f878432b2fe31f58153b44a81659d50ba20
Validity
Not Before: Apr 27 01:00:55 2025 GMT
Not After : Apr 28 01:00:55 2025 GMT
Subject: CN=a06ce4fca38ebc27fa9cff91379afec8f8370cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:c3:89:de:2d:03:44:01:b2:76:ce:68:c8:
92:37:4a:a9:0a:1c:0d:06:df:05:aa:89:c4:60:ef:
63:4f:99:8f:fc:ed:6e:55:98:33:b3:9e:53:49:d2:
27:51:a2:9e:08:f3:ba:63:ea:17:37:8c:b7:c3:c1:
45:6c:8d:25:7d:05:21:2c:7b:1c:d6:fe:fe:f9:5d:
a7:9f:fd:8d:c9:68:b0:f4:a9:5b:0b:41:ab:cb:0e:
01:8b:11:8c:3e:57:1d:c4:cf:cf:c3:cd:51:84:25:
1a:39:f1:78:82:3d:11:ab:39:25:9b:8d:a4:05:ec:
b5:be:97:a7:1f:a4:4b:12:9f:92:53:ab:ea:6d:04:
42:10:54:e4:2b:6e:0e:41:d2:2f:dc:9b:62:15:c5:
e8:f4:67:f8:47:1b:67:43:70:e9:6d:7f:b1:aa:8a:
37:15:e9:64:cf:53:79:57:77:98:7a:e4:a3:ed:58:
d6:34:55:eb:3d:1a:0f:2b:d3:1e:0f:b0:e1:6c:89:
f0:8c:3a:93:75:96:f6:25:cc:c4:4a:db:c9:c1:83:
c2:0f:7d:08:9b:71:b9:95:27:9d:77:bc:c7:e4:73:
02:a8:9f:90:e3:72:48:b8:d9:79:e6:99:3a:f2:97:
02:84:f8:09:08:28:48:12:08:c4:19:de:97:a7:db:
50:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:E4:FC:A3:8E:BC:27:FA:9C:FF:91:37:9A:FE:C8:F8:37:0C:C6
X509v3 Authority Key Identifier:
keyid:FF:01:7F:87:84:32:B2:FE:31:F5:81:53:B4:4A:81:65:9D:50:BA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7a4ffb-0289-466c-a2f5-30207773f760/1/_wF_h4Qysv4x9YFTtEqBZZ1QuiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d8:17:d9:08:c5:74:83:cf:08:6b:fb:3b:6d:91:fc:2f:3f:
2f:a8:4e:3c:ea:9d:25:51:92:98:ed:05:aa:49:14:ed:78:f0:
a3:8b:e7:87:79:10:71:2a:dd:9b:a9:bd:b3:41:d4:d8:76:ff:
ec:7a:e7:da:eb:7b:3f:0c:46:91:08:43:59:84:cf:f4:99:95:
48:cd:5c:c8:0c:e7:38:86:bb:64:80:ad:53:58:5c:f9:c7:7b:
17:cd:af:ee:50:e3:f8:12:d7:0b:4e:fa:0d:04:70:c9:59:13:
ee:9a:68:d5:0d:17:c6:65:e3:64:97:7d:af:da:8c:41:c1:00:
de:12:a5:e2:cd:f2:f7:75:32:9c:d2:40:8d:11:c8:f4:64:01:
f1:3e:23:2e:2f:23:85:f5:90:88:25:00:cd:cd:4f:49:7b:77:
9f:23:63:89:3e:81:9d:c9:53:37:8c:84:73:dc:99:6c:24:d6:
b3:47:cf:19:bd:ad:ec:1a:65:23:48:6e:4a:a1:f4:d5:0a:dc:
82:e7:cb:f3:58:78:b0:1a:66:1a:b9:94:32:62:86:9e:d4:ea:
6b:37:11:eb:91:35:4c:cc:50:09:25:34:29:b4:6a:bf:0c:04:
67:20:fa:e0:d5:a1:3f:ad:05:e0:47:ba:b0:0d:01:31:53:f1:
78:91:80:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:02 2025 by rpki-client