Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
File: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft (raw, json)
Hash identifier: 4LJyQ0AEAQwWa/04aOkJ5vWzmHl40O3cq6XAgebt7Jg=
Subject key identifier: 32:18:0D:3B:74:04:7B:21:B2:D6:65:E9:60:65:50:1D:4D:3D:E4:93
Authority key identifier: F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
Certificate issuer: /CN=f9629775283733a45c454b8d7be5a66df0db1a17
Certificate serial: 019682EBF5E21EF9579ED95E541DF759CF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
Manifest number: 0E23
Signing time: Tue 29 Apr 2025 19:00:24 +0000
Manifest this update: Tue 29 Apr 2025 19:00:24 +0000
Manifest next update: Wed 30 Apr 2025 19:00:24 +0000
Files and hashes: 1: 1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl (hash: gk228jRU3+H1vaOACYXZTJRvM32+wBmKi/6TdXUwJZU=)
2: NHhXoxxdMNakey6qmBeac9wJBd4.roa (hash: +reJ5PfpdsvDjpTAS5jPNWl9ybmFWN+FQOCbnBXMIy8=)
3: iobCcR3UyoYrtXm2S8hRWxvM3zg.roa (hash: 3usXJWbHzs8K4G1qHJnvLDQutknaGmUnq2D6gx78C1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:eb:f5:e2:1e:f9:57:9e:d9:5e:54:1d:f7:59:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9629775283733a45c454b8d7be5a66df0db1a17
Validity
Not Before: Apr 29 19:00:24 2025 GMT
Not After : Apr 30 19:00:24 2025 GMT
Subject: CN=32180d3b74047b21b2d665e96065501d4d3de493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:55:1a:eb:44:4e:c8:a4:6b:40:57:2f:45:
0b:cd:05:e3:f6:48:11:44:cd:e4:36:94:71:26:b1:
80:12:07:ab:77:b9:9e:8a:dd:a1:c1:ad:ae:16:2e:
4b:1c:89:fb:65:3d:21:ee:99:f2:23:b2:09:94:0a:
73:ae:1a:46:4a:e5:27:5c:e5:88:3a:c5:1b:37:23:
3e:6a:1c:10:62:7e:17:fb:b0:b9:55:2c:74:fb:ce:
00:c4:e8:fd:c3:b9:ea:0a:41:15:6d:4c:98:35:a8:
a4:cc:27:6e:60:75:5d:23:69:ff:9b:b0:ca:18:a9:
2b:24:b4:3f:3f:81:50:14:04:64:37:75:2b:16:88:
f1:65:e8:be:34:ac:a0:61:38:98:f1:f2:d0:78:b2:
0a:c4:65:ba:3b:b4:46:c8:b0:ee:0a:8b:0d:3a:93:
f0:bd:44:13:46:3c:07:5f:11:e2:13:9d:60:cd:b4:
98:57:a3:43:ba:20:d7:4e:00:e5:2b:2c:83:51:8d:
99:4c:44:00:80:f6:73:42:ec:cd:c7:01:2c:ab:d4:
aa:94:e3:4c:f3:f4:b9:7a:c8:29:ac:10:d8:e0:bb:
01:34:a1:b2:04:9b:f6:8e:93:d5:3f:77:5e:3a:aa:
e5:a8:1c:b3:49:e9:16:30:3c:f1:66:0b:92:b1:5c:
8e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:18:0D:3B:74:04:7B:21:B2:D6:65:E9:60:65:50:1D:4D:3D:E4:93
X509v3 Authority Key Identifier:
keyid:F9:62:97:75:28:37:33:A4:5C:45:4B:8D:7B:E5:A6:6D:F0:DB:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ebfce6-2857-404b-9b74-b324e025b929/1/1-WKXdSg3M6RcRUuNe-WmbfDbGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b6:37:24:ac:76:1f:9a:51:30:cc:35:f1:fe:d2:b6:93:9a:
65:6b:7b:26:c8:00:b4:fd:69:d9:aa:ca:44:ec:2b:15:ba:5a:
49:07:7a:da:18:f8:dc:de:6b:b8:2c:f1:b4:b2:bf:3e:bc:33:
3d:f0:65:1b:f0:58:00:3a:2b:0a:50:a6:39:ae:21:26:c0:97:
32:08:6c:f9:36:40:44:e3:0c:74:a0:c5:2d:a4:e0:d5:17:b6:
e0:8a:d3:91:62:4b:9d:a0:4f:e5:16:db:25:1d:b0:07:47:73:
20:96:ad:2c:ec:ba:cc:eb:7f:cd:d8:31:2c:41:e6:ef:7c:9e:
bf:a8:23:8b:20:57:14:c5:22:11:83:ee:c9:4b:b3:ab:8b:36:
7e:9d:da:20:46:ef:0f:cb:d4:cf:45:7f:1e:79:7e:32:b8:a3:
1b:51:fa:7e:98:a5:cf:85:d9:90:d3:b6:be:9b:0a:b1:38:a7:
a8:f7:cc:84:80:8c:78:6c:bf:4c:b8:89:61:96:15:03:c0:3b:
bb:d9:27:0e:3d:fa:c3:ec:03:d7:3b:9a:72:14:b5:f1:de:40:
a3:eb:ce:67:ee:c5:2c:76:e9:e5:02:2d:c9:fa:e6:b0:fd:d0:
2a:d3:0d:b1:c9:31:0a:94:f8:55:4d:ae:21:92:74:99:17:ce:
db:22:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:51 2025 by rpki-client