Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
File: wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft (raw, json)
Hash identifier: 9bj/14FZzLtn8+hSrWJ1wEarmRvVCzjZqsEoAKeYSps=
Subject key identifier: 08:62:40:F0:6A:96:D5:DF:9B:43:74:8B:E1:E3:B2:2B:E8:52:68:16
Authority key identifier: C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
Certificate issuer: /CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Certificate serial: 01967679BA321FAA4CE1B8B24C9823771720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
Manifest number: 1512
Signing time: Sun 27 Apr 2025 09:00:10 +0000
Manifest this update: Sun 27 Apr 2025 09:00:10 +0000
Manifest next update: Mon 28 Apr 2025 09:00:10 +0000
Files and hashes: 1: uOmu1u-0cx95qJdb2F6OqNW0AyI.roa (hash: T1ZCPSydqXCfxYKH+M6++cGYvIdpSTMuo8K8u6PSUYU=)
2: wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl (hash: TH7gZbbuwbYWItivtZZ609XAiHG8BGgpUy92b6uYC7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:79:ba:32:1f:aa:4c:e1:b8:b2:4c:98:23:77:17:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0ab92de7eaf5fbb2d14a508a90cefc569b54ed4
Validity
Not Before: Apr 27 09:00:10 2025 GMT
Not After : Apr 28 09:00:10 2025 GMT
Subject: CN=086240f06a96d5df9b43748be1e3b22be8526816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:c9:0e:73:ae:13:56:35:3c:2d:22:02:44:
b6:ce:f0:2b:f0:71:4c:ec:ba:58:7a:b0:9a:6f:33:
a3:32:ce:1b:12:1a:61:9a:8e:f2:e7:0b:6a:dd:13:
8c:48:4c:2e:56:10:fd:fd:00:b3:b6:90:6a:5a:6f:
b8:c9:30:21:52:48:81:32:e8:15:8e:62:30:ce:7b:
cf:66:16:61:90:42:3f:aa:1c:bc:47:43:f1:4e:10:
35:c5:12:ef:cf:3a:0b:b6:e9:23:5f:f6:97:aa:82:
61:66:b7:dd:63:9c:7e:b2:02:e4:77:20:d3:0b:c9:
70:e4:24:c1:ec:1a:60:d1:48:ac:1d:7a:5c:90:b6:
25:29:f3:45:66:fa:fe:0c:f6:26:01:64:dd:06:c6:
b6:12:53:f3:8e:c8:2b:5f:ec:60:21:71:17:7e:d6:
3c:0a:6f:5a:e8:2e:66:b8:03:be:dc:c0:b1:1e:13:
41:c1:e9:68:db:03:ff:0d:be:f6:fc:25:82:16:40:
4a:ba:6d:f2:e9:1f:d0:06:2a:62:56:38:f6:1c:9e:
f3:b5:9a:41:e5:c4:0c:77:75:24:f3:8c:0b:66:9c:
39:8b:0e:12:b3:14:0e:c5:84:ca:dd:a5:07:6b:a7:
2d:18:40:6e:40:bf:28:3f:dc:b6:a5:18:1d:06:a8:
66:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:62:40:F0:6A:96:D5:DF:9B:43:74:8B:E1:E3:B2:2B:E8:52:68:16
X509v3 Authority Key Identifier:
keyid:C0:AB:92:DE:7E:AF:5F:BB:2D:14:A5:08:A9:0C:EF:C5:69:B5:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKuS3n6vX7stFKUIqQzvxWm1TtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/1f1ccb-ed10-4fe8-ae0b-61b982ada662/1/wKuS3n6vX7stFKUIqQzvxWm1TtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b4:c6:0b:9b:d9:71:12:73:5b:da:5b:0e:c0:32:46:3b:1d:
e4:ff:e6:ed:a4:e7:e7:e3:93:35:3f:92:04:93:68:be:34:33:
ac:82:2f:cd:d4:b7:1f:b9:40:1c:2b:67:5e:a0:1b:27:63:b5:
93:fb:49:6e:63:9a:f2:e3:53:9a:ac:92:fe:11:17:26:45:b2:
c6:28:2c:70:87:62:db:f3:b1:36:ce:68:d4:27:90:24:2e:d6:
8f:cd:bc:6b:42:24:18:f9:17:97:4d:f5:ae:2c:cc:f9:08:df:
91:0c:cc:62:0e:07:61:ff:74:22:35:a2:c5:d2:4f:87:df:ee:
7c:2d:6c:89:a8:fb:6b:12:a6:27:3d:b0:f6:e4:d7:d4:58:cb:
bc:98:7f:77:bb:74:46:1b:eb:d1:99:cd:b9:88:98:fd:5d:1e:
8a:f9:af:5a:9e:0f:15:6b:3d:ed:a5:c1:ab:8a:ca:87:c0:a8:
b8:10:8a:7b:83:4f:ee:98:6d:db:90:d7:8d:e7:31:54:7b:b9:
fa:14:77:e3:84:d7:f6:f7:f9:5c:26:9c:5e:94:01:b1:02:36:
9d:c8:b8:0a:2a:d1:5e:08:bd:a0:3f:32:0e:6e:2b:5d:60:1e:
41:eb:d5:69:29:fa:bd:62:4f:78:f0:02:52:9f:87:bc:94:2c:
65:9c:fa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:18:41 2025 by rpki-client